
$ rpki-client -vvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa
File: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (raw, json)
Hash identifier: bvFzrT6armN3+NSh25eEAeVsS6vGdsFIsCLC0MUnl3s=
Subject key identifier: 7F:9F:0C:1A:BC:15:EE:8D:D2:BF:FB:C7:3F:8A:FA:F5:72:C6:A9:36
Certificate issuer: /CN=2C1233B548C07507C6EF58E2A03DD8309F820753
Certificate serial: 270C0F29A518FEE0AA6666B3D08520620CDBC3FC
Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa
Signing time: Sun 03 May 2026 02:32:58 +0000
ROA not before: Sun 03 May 2026 02:27:58 +0000
ROA not after: Sun 02 May 2027 02:32:58 +0000
asID: 38768
IP address blocks: 103.234.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl
rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:0c:0f:29:a5:18:fe:e0:aa:66:66:b3:d0:85:20:62:0c:db:c3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753
Validity
Not Before: May 3 02:27:58 2026 GMT
Not After : May 2 02:32:58 2027 GMT
Subject: CN=7F9F0C1ABC15EE8DD2BFFBC73F8AFAF572C6A936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:5f:61:df:21:e8:b7:ef:de:99:7b:6d:cf:
c0:d2:01:93:20:a6:3d:2b:e4:70:be:d4:ed:b3:81:
f9:48:f5:78:ab:35:f4:76:88:cb:e7:13:3d:f1:77:
5c:15:ef:14:93:14:2f:a2:95:83:e8:27:b7:64:d1:
82:68:38:d4:8c:03:2d:64:fb:06:5d:c4:ad:4c:5b:
75:1d:18:4e:e8:38:31:ac:e4:02:c7:f2:95:1c:92:
42:bc:23:51:03:f2:92:04:85:b4:15:4b:1e:0e:b5:
bb:36:aa:67:bb:46:f5:47:12:f5:f6:fe:30:1f:2b:
ff:d9:6b:5f:7f:bf:59:55:6b:8b:23:0b:37:3d:5c:
b9:12:62:a7:21:14:8b:6e:74:35:bd:e1:bf:fd:be:
59:44:3d:27:ae:f1:6d:9f:1d:c5:0b:e4:c5:fb:fa:
9f:cc:21:1c:a2:8a:20:e0:27:1d:fe:01:31:63:fa:
8c:56:41:09:11:89:c5:03:59:f4:28:76:c2:05:17:
f6:78:bb:56:bd:14:ae:cb:f2:0f:9f:6f:8a:3f:f6:
75:92:8f:70:44:5b:a6:0f:34:bd:55:0a:e6:ae:29:
df:b5:50:12:f1:0e:21:cc:b4:9d:f7:2d:a6:e3:cb:
cb:12:60:72:12:8d:a0:6b:64:72:09:ec:87:66:73:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9F:0C:1A:BC:15:EE:8D:D2:BF:FB:C7:3F:8A:FA:F5:72:C6:A9:36
X509v3 Authority Key Identifier:
keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.234.218.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9f:cc:9c:35:a7:23:e0:86:78:1d:f4:68:1d:d8:dd:c9:2d:
52:f3:4b:15:48:e2:3e:aa:f4:36:4d:e1:51:26:ba:14:8a:70:
eb:3c:43:6e:de:83:cf:fe:e8:8b:41:e6:cb:25:4e:53:22:32:
5e:22:2a:df:bc:15:73:dd:1a:fa:83:08:40:14:2c:d4:93:57:
bb:59:3f:a7:47:cb:91:34:9a:b7:ef:df:09:7e:fb:b7:5f:e5:
42:fc:cb:15:fb:a8:75:35:0a:48:03:02:4c:c0:dc:75:9d:86:
23:48:6a:b0:bc:b4:ea:4f:74:fb:f5:7a:b7:2a:65:d0:02:52:
d7:8d:44:af:cd:80:b2:fe:bf:da:c3:06:af:b1:1b:91:76:18:
b8:8a:ff:1b:f6:63:c0:6f:37:90:bb:c4:cb:d7:2c:99:d8:81:
a3:61:f8:6c:3a:05:b7:20:e4:3b:66:5a:24:2b:b4:d8:e8:e8:
75:98:16:d0:97:54:af:bc:93:83:c6:c4:16:0d:9a:be:4e:19:
b4:86:01:4a:79:56:38:d9:ac:ea:d6:48:ea:1d:b5:ab:9f:70:
8c:41:bb:68:a7:98:35:04:39:db:95:95:85:a2:50:89:f7:bd:
ae:6b:23:19:14:91:59:f2:a5:1b:fd:ce:10:2d:48:25:cc:c9:
ef:dd:ee:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:11 2026 by rpki-client