
$ rpki-client -vvf rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa
File: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (raw, json)
Hash identifier: j+lgNwhd7sTPpzvBZDbz7MtwJzwdtzVrzUiO5CTg4C0=
Subject key identifier: 1C:B3:4D:82:DA:FE:66:07:4B:14:6B:7A:10:00:31:1E:C1:B4:72:7C
Certificate issuer: /CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E
Certificate serial: 361057586969D6B2AD2AEE09462F3C2E49C08ACF
Authority key identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa
Signing time: Sun 03 May 2026 02:34:18 +0000
ROA not before: Sun 03 May 2026 02:29:18 +0000
ROA not after: Sun 02 May 2027 02:34:18 +0000
asID: 136087
IP address blocks: 103.87.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl
rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:10:57:58:69:69:d6:b2:ad:2a:ee:09:46:2f:3c:2e:49:c0:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E
Validity
Not Before: May 3 02:29:18 2026 GMT
Not After : May 2 02:34:18 2027 GMT
Subject: CN=1CB34D82DAFE66074B146B7A1000311EC1B4727C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:61:dc:af:18:81:12:00:45:ad:36:1f:94:3c:
e0:c1:cb:35:43:cd:c7:c0:ae:1d:ba:78:3a:74:00:
45:3d:7f:42:aa:70:76:e2:dc:9c:ce:a5:d2:66:4a:
3e:64:39:32:2c:fd:8b:0a:36:6f:7b:27:bb:d6:bc:
a8:43:c2:cb:09:5e:14:89:d7:47:83:4a:d2:e5:a3:
9f:5a:99:8d:41:98:fc:7c:17:93:35:01:94:c6:8e:
05:6a:2a:f9:45:21:db:08:94:d3:6c:c7:9d:b7:48:
3c:bb:d8:38:96:46:4d:d0:0a:a2:01:54:7b:8b:93:
f6:74:66:1c:21:88:d6:1c:05:8f:c9:0f:c6:45:66:
62:2c:89:fb:b3:67:e0:83:a1:d5:99:33:6a:90:4f:
e5:4b:ab:60:0b:94:8a:59:62:b9:d6:4c:ea:e7:45:
83:a3:ee:c7:03:0d:d0:08:b9:ca:07:a2:ed:00:c5:
95:36:60:0a:8f:06:4e:c9:ac:a1:f4:e5:54:98:c1:
18:dd:40:a0:33:11:5e:5b:18:59:b6:af:75:03:28:
60:86:a1:64:c9:8a:7e:16:a8:20:46:7b:d4:4a:32:
1f:6b:81:22:49:fe:0c:0b:ef:c0:51:b9:e4:52:1e:
30:ca:7e:0e:08:38:8a:39:e2:f6:bf:f9:8a:35:20:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B3:4D:82:DA:FE:66:07:4B:14:6B:7A:10:00:31:1E:C1:B4:72:7C
X509v3 Authority Key Identifier:
keyid:8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.198.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ff:e1:13:b0:09:9b:98:2b:a5:e0:c1:73:72:f4:11:7b:f6:
26:00:51:02:6a:34:44:00:b0:0d:65:32:6e:71:6e:e7:38:02:
3e:d6:4c:25:5b:c8:8b:95:a6:69:f5:c4:52:28:af:65:be:04:
80:51:ab:81:89:13:3b:73:1e:12:13:86:15:86:b5:ad:8a:a5:
d1:54:a2:09:3b:35:69:2a:05:ca:56:6b:2a:ca:f4:f4:4a:e1:
01:7e:f6:a3:cc:eb:ac:9e:ca:71:ed:94:a6:d1:19:c4:8c:f2:
76:31:cc:64:c7:a8:49:9b:d9:36:b6:65:b4:32:51:28:84:b6:
dd:0c:ca:39:7f:25:4d:64:b4:68:cb:37:88:53:43:97:e7:90:
b9:3a:4d:11:57:71:1f:ba:c4:bf:18:fc:d4:dc:41:a5:41:32:
fc:29:ec:ef:97:dc:98:9d:4e:48:2c:2e:2f:40:76:84:b9:bf:
6f:36:bc:99:2a:3d:f1:c4:e1:e3:25:b4:e5:15:d1:b0:46:e7:
89:e7:a7:46:13:c8:e5:90:2a:95:34:cd:cc:d5:ee:9a:10:04:
c5:55:84:cf:a4:3b:83:ac:9c:54:5e:09:a8:29:52:99:6d:01:
1a:6d:bc:bd:f5:b3:01:be:68:d6:a7:58:ce:af:20:70:d7:c7:
6e:35:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:32 2026 by rpki-client