
$ rpki-client -vvf rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa
File: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (raw, json)
Hash identifier: NdF7z4Axz0mBE/lC0pc0IGrEEOoXFiCSmtcjnukP0y4=
Subject key identifier: FF:16:AA:61:F7:23:B1:6C:96:2F:8A:E2:C7:B3:18:82:75:2C:61:80
Certificate issuer: /CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7
Certificate serial: 7A687D8A30A86EA492AABBE6E6A970C66E9E2E9C
Authority key identifier: 8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa
Signing time: Sun 03 May 2026 02:33:24 +0000
ROA not before: Sun 03 May 2026 02:28:24 +0000
ROA not after: Sun 02 May 2027 02:33:24 +0000
asID: 150980
IP address blocks: 103.70.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl
rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:68:7d:8a:30:a8:6e:a4:92:aa:bb:e6:e6:a9:70:c6:6e:9e:2e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7
Validity
Not Before: May 3 02:28:24 2026 GMT
Not After : May 2 02:33:24 2027 GMT
Subject: CN=FF16AA61F723B16C962F8AE2C7B31882752C6180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:10:a5:4c:6a:ed:41:17:58:21:47:ed:43:4a:
81:89:fc:2c:ce:8a:ae:25:72:b6:96:e1:c8:91:62:
5f:ef:c2:69:90:9c:0d:d5:0c:a7:ac:74:fd:c9:54:
49:1a:27:0a:b8:99:a5:a7:87:f8:2e:1f:20:33:9e:
20:68:69:43:c2:67:81:e1:ba:3a:d2:e3:88:f0:6d:
4a:60:03:9a:83:0c:2a:3e:2e:96:82:80:4a:29:0e:
f4:26:74:3f:7e:2c:c9:ac:46:2e:dd:cf:6b:8e:c4:
e1:75:01:f6:56:96:38:00:9d:c7:ef:b2:7c:d3:3b:
b7:9c:0e:6e:bb:93:34:e1:74:1e:52:6b:22:b4:61:
20:02:37:40:16:0f:e1:bc:92:8d:c7:e1:8e:03:ba:
68:20:b7:51:76:81:58:57:4c:45:e7:b9:d7:51:ba:
0e:5c:28:f7:2d:bd:84:ae:a9:c1:c0:32:22:45:4f:
c3:26:b6:22:52:9a:ac:56:90:b1:b8:46:89:af:d8:
f7:f1:0c:36:a7:9b:4b:a9:b8:25:8c:fb:1b:51:16:
36:02:2f:90:9a:9d:36:b9:20:be:1b:b1:8d:ce:ba:
35:ef:75:a9:9b:b7:d5:27:13:19:e4:83:67:7b:35:
20:67:91:8e:ac:b5:93:96:72:2e:36:5f:88:7b:24:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:16:AA:61:F7:23:B1:6C:96:2F:8A:E2:C7:B3:18:82:75:2C:61:80
X509v3 Authority Key Identifier:
keyid:8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.70.122.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:35:08:42:11:91:8c:e0:18:02:80:2c:a2:46:66:8c:a4:25:
6c:6b:d4:ca:2e:cf:35:4e:a7:c9:66:47:c0:36:49:5b:47:78:
49:46:55:2f:21:9f:0c:9f:60:27:e1:69:4b:bb:ca:2e:c6:46:
db:14:bd:0a:ea:73:33:89:3a:f6:e4:d2:0f:fd:46:66:f4:4e:
5c:3e:da:b3:cd:57:9b:42:34:ac:7b:ab:a6:be:88:b8:40:bb:
dc:7b:06:e6:b3:4c:40:a1:7c:f9:ab:34:41:30:04:24:8e:8b:
0e:a4:07:67:31:a5:e2:14:6c:9e:93:ba:ee:68:e2:1a:c6:63:
ea:a2:12:06:31:90:be:01:00:7a:32:f0:00:39:bd:59:64:6a:
66:e2:81:9c:a8:8b:0e:d8:c9:fe:c5:38:70:f6:25:a1:53:65:
ed:12:96:52:05:54:74:88:ef:f6:cc:2c:6b:d8:33:63:1a:3d:
fd:fb:68:c4:be:de:6f:56:f7:2e:62:f8:73:89:97:60:6d:95:
39:56:1c:e8:b1:a2:c8:84:62:16:5b:26:ac:fb:87:5d:19:59:
35:7c:16:f5:e4:72:e5:cf:84:c9:63:8c:77:d8:fc:64:7e:b3:
c0:a8:73:dd:11:26:69:32:29:7c:33:28:37:eb:91:42:d9:b3:
47:24:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:38 2026 by rpki-client