
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa
File: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (raw, json)
Hash identifier: CNqZtOi2G7stcR7KpWbtX7pHl0DtOjDNuPcEVY0GuK4=
Subject key identifier: 8C:87:CA:70:55:E3:53:A4:4D:93:41:50:88:E2:1C:7F:68:1E:45:3C
Certificate issuer: /CN=3C38CDC785C4C8B22E60377271E55409582CCE11
Certificate serial: 58A1EB4AB747C722C0C962B8E939BCE31E476A48
Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa
Signing time: Sun 03 May 2026 02:36:49 +0000
ROA not before: Sun 03 May 2026 02:31:49 +0000
ROA not after: Sun 02 May 2027 02:36:49 +0000
asID: 138143
IP address blocks: 103.134.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl
rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a1:eb:4a:b7:47:c7:22:c0:c9:62:b8:e9:39:bc:e3:1e:47:6a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11
Validity
Not Before: May 3 02:31:49 2026 GMT
Not After : May 2 02:36:49 2027 GMT
Subject: CN=8C87CA7055E353A44D93415088E21C7F681E453C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:9b:3c:70:d0:23:6e:5a:45:8f:b6:51:4e:
bd:54:4b:bf:6c:3f:99:bc:86:55:8b:34:3e:32:e0:
9f:20:46:fd:4e:84:ff:cc:4c:89:f5:55:e5:d5:2f:
15:5d:a5:04:c7:02:75:a2:42:73:29:38:16:ad:68:
41:e1:79:a4:00:f1:18:6b:51:44:ef:2d:13:58:58:
9f:1a:58:86:a4:78:79:69:22:0f:01:ef:ec:ff:e9:
4e:2e:1c:30:ae:4d:b8:ce:19:da:be:11:fe:6c:23:
13:4d:cb:c8:6c:b9:bb:e3:f8:a7:fe:61:0a:7a:66:
d3:37:cd:60:7f:32:25:95:72:80:60:87:7e:e0:f4:
4f:d2:ce:10:42:7f:33:87:c8:05:6d:9c:64:9c:31:
7c:e1:f4:66:c8:07:15:2a:ba:cf:7f:c8:f8:0d:bf:
d2:41:df:5c:e7:e5:71:34:e9:13:84:48:53:2c:4b:
f5:3d:13:ad:6c:50:d2:86:44:4b:aa:26:23:2d:02:
ff:b3:5f:05:fa:82:88:d3:1e:76:4e:d4:ce:02:04:
13:7d:65:fd:9b:bb:b7:94:30:0d:c1:dc:a2:67:bb:
be:78:b1:af:36:9e:45:af:bb:01:01:68:00:ef:6e:
3c:a0:77:43:e1:49:1d:0f:4a:43:f2:ad:68:3e:c4:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:87:CA:70:55:E3:53:A4:4D:93:41:50:88:E2:1C:7F:68:1E:45:3C
X509v3 Authority Key Identifier:
keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.79.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e2:fe:ed:5c:41:f8:e2:96:3c:be:c0:1d:7c:0d:c4:98:57:
53:f9:59:d8:e2:d0:20:80:7b:17:a2:1d:6a:d6:c4:5d:fb:71:
13:8d:62:b5:b6:19:d5:bd:fd:fb:88:c2:41:4b:e1:5d:3d:3a:
2b:1e:17:50:13:35:69:04:07:0a:01:a1:c4:15:91:dd:fe:e0:
6d:af:44:f1:39:fe:09:fc:70:d3:be:8e:c7:0a:bf:b7:15:26:
70:56:15:76:a6:35:bd:12:81:ad:13:4f:8b:bb:21:06:af:eb:
59:f4:25:da:d5:44:e0:3b:47:da:79:94:f3:f7:52:42:42:a8:
0f:5f:e5:c9:60:3e:0d:e7:ae:96:c2:52:6d:66:a7:3a:c4:14:
87:ff:79:ff:9b:a3:bb:95:9d:e6:2b:f5:90:cc:12:41:a5:7f:
33:fa:6a:d8:86:74:3f:13:7f:5e:89:53:e0:94:34:0a:a4:3d:
9c:a9:f4:fa:0b:51:2f:25:01:c9:3f:6c:60:05:e4:59:d7:61:
ae:3c:a8:5b:8a:14:d7:21:ef:ff:c3:95:e8:3a:ed:42:8b:7f:
50:da:b9:7a:6e:36:f4:f5:7a:0e:bb:0e:0c:51:2a:78:80:a2:
0a:d0:d9:55:8f:8c:07:32:2f:12:75:dd:e0:5c:98:f4:9a:f2:
af:42:d3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:56 2026 by rpki-client