
$ rpki-client -vvf rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa
File: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (raw, json)
Hash identifier: VvKS0B4ZLReXOTrvcAhygsCJwutg9GJIYxL7J1Tdiis=
Subject key identifier: 70:A8:E7:8A:3E:D5:9F:EE:F8:CE:EB:D3:87:5E:69:F3:6E:04:77:B7
Certificate issuer: /CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E
Certificate serial: 0D72420952B5870C8F6EE47629291484D84FFEE6
Authority key identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa
Signing time: Sun 03 May 2026 02:34:18 +0000
ROA not before: Sun 03 May 2026 02:29:18 +0000
ROA not after: Sun 02 May 2027 02:34:18 +0000
asID: 136087
IP address blocks: 103.87.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl
rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:72:42:09:52:b5:87:0c:8f:6e:e4:76:29:29:14:84:d8:4f:fe:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E
Validity
Not Before: May 3 02:29:18 2026 GMT
Not After : May 2 02:34:18 2027 GMT
Subject: CN=70A8E78A3ED59FEEF8CEEBD3875E69F36E0477B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:68:fb:fc:1e:04:b9:0a:7d:f4:cb:6f:f9:
84:e8:e2:55:12:a5:d1:f6:ec:54:85:9d:6b:7e:9f:
ba:0c:68:f5:6f:e7:22:8c:a7:46:45:2c:47:69:9a:
bc:8d:72:11:f7:20:1f:82:17:d2:6b:48:66:66:89:
93:b1:5e:cf:11:5e:61:a9:7a:87:f7:b3:8b:ac:b9:
1b:1e:ec:4d:dd:48:8b:89:c1:cb:97:8e:4c:39:62:
79:d5:e2:ce:51:71:5e:d2:f1:e0:4a:87:9e:6d:21:
db:4b:c0:76:e6:6d:2f:53:7b:7b:6d:9d:2a:0e:b8:
32:d7:86:54:10:2b:f8:fe:3d:32:85:59:02:52:47:
55:e6:ef:54:db:90:41:56:8f:bc:54:f2:f3:5a:31:
11:d5:4b:ee:e8:bf:2d:e5:6e:fa:5d:22:fa:fb:6e:
35:50:84:6a:b2:82:e0:5a:1a:b5:89:9b:92:39:f1:
17:de:36:23:b4:bc:93:84:8a:97:1c:2c:0e:bd:2e:
fe:8e:df:48:fe:65:77:df:bb:33:f7:98:d8:10:81:
85:7a:e7:c7:0c:9c:5b:c7:0c:c3:74:02:62:03:30:
01:2f:46:0e:d0:e3:fc:83:6c:66:0f:18:c1:a5:20:
6c:b2:b8:50:8d:67:52:31:76:38:bc:71:cc:26:fa:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A8:E7:8A:3E:D5:9F:EE:F8:CE:EB:D3:87:5E:69:F3:6E:04:77:B7
X509v3 Authority Key Identifier:
keyid:8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.197.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:27:dd:74:ea:2b:f7:06:ba:81:07:f1:ec:19:0a:39:c4:b0:
c6:7c:d5:f9:bc:c2:35:cb:a2:2d:83:5c:11:f6:5a:96:b6:a5:
5c:c8:7b:ae:12:32:d3:22:52:66:56:a1:7d:3d:77:d7:c3:e4:
a3:e8:78:fe:04:fd:eb:67:d0:5d:71:b1:df:b6:63:78:95:cc:
53:49:4a:19:9c:2d:88:53:0b:bc:1d:b3:d7:2f:3e:1d:ee:53:
51:8c:c6:a7:dd:c0:83:54:6a:10:ac:31:fa:f4:6c:56:e1:5a:
57:ff:80:3e:e3:2c:0d:2c:5f:0e:fd:30:44:a0:e5:f4:bf:c0:
c4:d9:11:c9:2a:68:0d:89:88:79:f8:df:a8:a9:28:10:fd:02:
2d:f8:ca:06:ce:a9:c0:15:20:b5:8c:cc:58:9c:c6:58:76:68:
2c:49:69:25:7e:f7:7a:08:cc:ee:b2:2c:c8:4e:d6:f4:11:91:
ec:58:a5:78:01:00:7b:b0:61:e3:1b:ad:c1:e5:9e:bf:52:8c:
db:f9:7b:ab:dc:4f:9b:46:71:30:b4:97:6c:a9:99:91:e9:e3:
97:4a:0d:dd:f1:c6:30:03:f5:ce:ca:13:48:a5:c2:59:d6:97:
60:56:65:d7:3f:51:c8:69:98:26:10:33:9b:7f:7c:be:12:b9:
2d:69:ea:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:19 2026 by rpki-client