
$ rpki-client -vvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3130332e34392e3232302e302f32322d3232203d3e203234323131.roa
File: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (raw, json)
Hash identifier: NLB3lY9DFzaCd5CKPizbBhfO5LYHEpYinHrGVDAbCes=
Subject key identifier: 6E:73:D0:9D:A8:DB:55:27:18:C7:F9:C1:82:6B:25:30:08:4C:BE:03
Certificate issuer: /CN=68A727878748F40EF62D744B06303F71A6B3F75C
Certificate serial: 22CF5B782965FBC59B2DAF0F6F9CACCD9A6E7215
Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3130332e34392e3232302e302f32322d3232203d3e203234323131.roa
Signing time: Sun 03 May 2026 02:35:16 +0000
ROA not before: Sun 03 May 2026 02:30:16 +0000
ROA not after: Sun 02 May 2027 02:35:16 +0000
asID: 24211
IP address blocks: 103.49.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:cf:5b:78:29:65:fb:c5:9b:2d:af:0f:6f:9c:ac:cd:9a:6e:72:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C
Validity
Not Before: May 3 02:30:16 2026 GMT
Not After : May 2 02:35:16 2027 GMT
Subject: CN=6E73D09DA8DB552718C7F9C1826B2530084CBE03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:49:77:00:1b:b6:2a:a5:a5:ab:81:13:34:
7b:19:ed:89:8b:1b:dd:f7:53:89:7b:01:91:73:83:
f6:3e:21:99:ff:f7:74:35:9c:27:3f:31:cf:d2:2b:
c7:8e:a4:10:b9:f4:bc:46:0f:50:67:90:dc:a2:95:
5c:9e:1c:aa:83:c1:78:e8:a1:be:9f:29:2f:cc:6c:
03:10:0c:ee:96:f7:2a:36:49:50:a7:ec:8e:8e:92:
ae:01:14:c1:5b:86:04:21:36:e3:3c:c4:13:06:44:
40:aa:ce:cd:18:23:3c:13:79:9e:62:61:3c:ac:05:
e1:5b:6e:ce:1e:39:a9:5d:44:f3:73:1b:22:bd:76:
ae:43:fc:95:e9:97:d7:ee:5a:98:0a:b8:e5:eb:21:
84:d8:9d:04:59:64:2b:d3:bc:cb:62:01:c8:dd:d1:
b2:7d:64:2f:70:33:4b:dc:2b:f6:84:f8:5d:5f:59:
30:ad:55:52:87:e9:db:14:64:d7:bc:a9:a0:6c:f8:
05:9c:cd:74:cf:52:11:b0:4f:27:fb:94:60:df:17:
bc:90:7c:05:6c:27:b5:97:fe:fd:e1:17:1b:57:8e:
79:27:d4:3d:bf:22:bc:93:87:c0:4a:4c:1f:3c:7e:
6f:e5:de:09:3d:81:ff:c1:ff:9a:f3:01:51:08:39:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:D0:9D:A8:DB:55:27:18:C7:F9:C1:82:6B:25:30:08:4C:BE:03
X509v3 Authority Key Identifier:
keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3130332e34392e3232302e302f32322d3232203d3e203234323131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.220.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:77:97:79:7f:83:97:c2:ce:ff:b8:01:f9:7e:45:72:2e:40:
64:b8:d9:8b:c8:44:ad:ea:77:b4:4a:fa:39:2a:48:8e:49:a6:
a5:7c:91:1c:58:85:0f:4b:35:34:68:8a:a6:38:19:6d:af:26:
1c:2a:97:38:96:05:2d:ae:ab:52:75:af:5e:f6:4e:e2:c0:68:
47:bf:11:32:1c:60:39:0a:72:92:43:8c:e3:1f:0f:be:5f:80:
8b:59:a6:cc:16:06:cb:bf:be:4a:5a:8b:a6:0d:4c:42:3a:36:
6f:67:aa:89:b7:cd:b2:2e:42:77:78:ea:9d:9c:e8:56:4b:a7:
e5:00:c7:10:8c:ef:d3:0a:14:80:3b:83:15:b3:5b:86:8e:a4:
bd:5f:1f:8a:27:c1:32:f2:c6:b4:0d:59:22:29:bb:2e:d5:ed:
2e:9d:e8:85:b6:4e:fd:d0:3e:71:d4:56:2c:43:27:be:da:b8:
58:92:6c:89:8e:8a:ca:73:75:6e:6b:0e:af:1f:e6:88:0f:9c:
74:f0:85:6d:a0:d2:b1:76:44:f6:fc:18:13:12:d4:a6:00:ee:
5c:23:f3:0b:68:df:d1:5d:aa:77:c6:b3:f1:01:a5:37:bd:09:
6d:a9:47:36:dc:66:9b:42:e0:1e:00:e9:32:5b:94:d4:8e:d0:
91:68:ab:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:56 2026 by rpki-client