
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38392e302f32342d3234203d3e20313531353732.roa
File: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (raw, json)
Hash identifier: bOv9UB+jH3yIgez1h0+9f0ARyXLXbtpazjPu+Jy6jyY=
Subject key identifier: 9C:ED:6B:78:58:85:6B:22:0F:3F:1D:0F:68:59:2F:B9:46:84:48:08
Certificate issuer: /CN=0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6
Certificate serial: 72EB03F1F0D008A60CCFBB194697FBDAD9E4D299
Authority key identifier: 0B:6D:FC:81:F6:A5:A4:C5:1C:93:36:05:0C:F9:C6:7E:BE:28:F2:F6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38392e302f32342d3234203d3e20313531353732.roa
Signing time: Sun 03 May 2026 02:34:25 +0000
ROA not before: Sun 03 May 2026 02:29:25 +0000
ROA not after: Sun 02 May 2027 02:34:25 +0000
asID: 151572
IP address blocks: 103.60.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl
rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:eb:03:f1:f0:d0:08:a6:0c:cf:bb:19:46:97:fb:da:d9:e4:d2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6
Validity
Not Before: May 3 02:29:25 2026 GMT
Not After : May 2 02:34:25 2027 GMT
Subject: CN=9CED6B7858856B220F3F1D0F68592FB946844808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:f7:c1:0c:cb:3c:2d:71:9c:54:dc:24:06:
3e:2a:de:b6:b7:05:21:d1:71:37:7c:cd:91:1d:45:
86:14:53:d7:d4:14:0c:34:1f:2f:a5:c3:b0:a7:d7:
bd:a8:5b:9b:42:fd:a4:54:85:19:1e:05:ee:88:ed:
e8:94:ba:9e:6a:e9:68:3a:60:57:a8:db:c9:e0:d9:
6b:a6:14:93:8b:c3:2c:ef:fb:a5:cc:d7:e8:65:23:
75:c2:8a:3b:50:8d:ed:ad:f7:d8:72:7a:77:a2:83:
43:2c:f5:71:20:d9:20:51:fa:08:74:09:70:9a:43:
9c:0a:41:3f:49:11:18:79:a1:c0:9a:b3:23:de:8b:
2a:7d:1d:7d:1e:6d:d6:68:f0:f3:80:cd:aa:20:d7:
b0:02:f7:81:98:84:6f:fd:b6:ab:4c:f9:57:f1:c5:
07:ac:37:d9:7d:4d:66:84:c2:de:14:cc:e9:fd:ef:
93:7a:86:8a:54:d3:ff:f0:c2:3a:b6:f5:63:1c:a0:
f8:b5:bd:41:dc:82:88:59:a4:db:19:23:0b:ba:43:
38:73:f3:9e:d3:f0:4f:20:ec:04:70:19:9f:06:d8:
c2:d1:69:63:ab:c6:10:c8:c5:68:7c:26:10:6d:cc:
fb:a7:46:e5:f8:aa:b2:f9:d2:ab:08:a5:90:1a:c2:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:ED:6B:78:58:85:6B:22:0F:3F:1D:0F:68:59:2F:B9:46:84:48:08
X509v3 Authority Key Identifier:
keyid:0B:6D:FC:81:F6:A5:A4:C5:1C:93:36:05:0C:F9:C6:7E:BE:28:F2:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38392e302f32342d3234203d3e20313531353732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.89.0/24
Signature Algorithm: sha256WithRSAEncryption
92:94:01:f2:04:34:43:82:39:e8:d8:2d:d0:97:65:58:e8:88:
54:65:b6:22:7c:f0:b1:ac:66:78:ca:8f:29:84:55:00:49:60:
7a:f7:ac:d5:6f:c8:2c:3b:c8:df:86:7f:b4:f0:80:24:10:e2:
ca:a2:09:be:92:50:3d:c2:0f:75:08:e3:d3:fc:9d:f6:92:89:
83:67:bb:82:53:69:2f:53:da:16:b5:b2:85:70:f8:f3:f0:6a:
54:09:99:da:1f:4f:83:d9:82:7a:da:dc:ec:c0:41:11:e2:74:
f5:14:8e:03:a1:51:d5:d3:2c:8c:34:74:a9:ff:7e:60:e1:2b:
f0:ae:b8:4b:83:4b:bc:d4:4e:86:23:ac:86:01:83:30:26:5b:
da:8a:f5:f1:91:a8:7b:a0:7e:27:73:b1:51:b1:56:a2:5b:98:
58:0c:a9:4d:ce:aa:4f:35:11:56:42:37:5f:a3:ee:23:b9:e1:
90:f0:94:50:2d:20:1e:c3:49:af:cc:6d:0a:33:f9:d1:f8:4d:
b5:58:4d:10:93:69:1e:ec:7e:68:f9:cb:76:5a:5e:87:fe:13:
a7:a4:b3:1c:c1:3a:98:98:8d:8e:f5:4c:58:01:04:60:8f:47:
52:74:34:39:8a:c8:2b:7c:a9:a5:bf:30:0a:06:52:45:fd:2e:
00:50:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:33 2026 by rpki-client