
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa
File: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (raw, json)
Hash identifier: CRQfQvukFddl9vchPsTgKBPY7+BHd3EPebDgJxEISnw=
Subject key identifier: D4:B3:73:17:8E:DC:A4:9A:07:4E:FE:C2:2D:B4:0A:11:E0:A7:E9:06
Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Certificate serial: 0EDA49541EDDD822A3D99C39909F77FA7636AC5C
Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa
Signing time: Sun 03 May 2026 02:37:18 +0000
ROA not before: Sun 03 May 2026 02:32:18 +0000
ROA not after: Sun 02 May 2027 02:37:18 +0000
asID: 17670
IP address blocks: 103.213.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:da:49:54:1e:dd:d8:22:a3:d9:9c:39:90:9f:77:fa:76:36:ac:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Validity
Not Before: May 3 02:32:18 2026 GMT
Not After : May 2 02:37:18 2027 GMT
Subject: CN=D4B373178EDCA49A074EFEC22DB40A11E0A7E906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:2a:61:f7:5a:ef:ab:f4:ed:f5:3c:b8:d0:
b6:02:94:fb:fc:ff:73:ef:33:26:e5:1b:8a:1b:bd:
1f:95:e2:b3:fd:3e:2e:b3:d2:96:a2:95:ec:2d:86:
d5:de:0d:b6:c1:07:e0:9f:4c:1a:3c:fb:e0:23:fd:
9c:c5:7c:dd:64:d4:e6:9f:22:96:ce:05:1a:26:19:
0a:51:30:fe:bf:2c:a2:15:d6:69:b2:b6:a1:ae:64:
69:ce:55:44:47:bd:9c:8b:c1:98:96:fe:b8:32:d3:
38:fd:d3:7a:19:9b:aa:1e:a6:cf:35:05:3b:5a:ed:
cf:d8:b0:8c:2c:db:e0:bb:31:63:6e:11:00:98:be:
89:df:29:3b:0d:1b:30:c6:b2:a5:bb:f3:d1:94:17:
f2:99:73:7a:84:b5:fd:8b:33:c9:34:2c:b1:53:33:
23:72:9d:42:aa:79:81:00:e1:2e:e4:82:3b:62:be:
bf:af:77:2b:09:22:f7:1d:f7:ae:b4:5d:97:3b:97:
b2:f1:a3:0a:21:b0:1c:8b:2d:89:1a:c3:5f:6d:46:
88:f5:71:5f:48:7e:15:23:e9:8e:73:9b:06:dd:c9:
75:d1:06:74:f7:22:45:a6:e6:63:b0:a2:16:24:89:
c9:38:13:c4:67:0b:b0:a9:0d:a1:27:e4:84:e3:6f:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:73:17:8E:DC:A4:9A:07:4E:FE:C2:2D:B4:0A:11:E0:A7:E9:06
X509v3 Authority Key Identifier:
keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.128.0/22
Signature Algorithm: sha256WithRSAEncryption
86:9a:d9:f5:f7:38:1d:fe:e0:e7:df:3e:a7:db:7a:2c:05:d8:
e4:17:75:32:19:8c:80:df:90:4c:02:35:d4:4b:59:02:e5:c8:
d4:41:9b:13:e5:4d:6b:2f:73:f8:72:e8:79:64:c0:fd:91:8e:
54:dc:07:63:7e:97:36:21:80:74:84:e5:1e:65:65:2c:cc:d7:
67:a5:90:8a:f5:43:a1:b5:cc:db:e9:12:2b:86:5a:15:6c:af:
7c:ee:24:03:39:8e:78:a7:93:f3:02:f7:73:43:7f:fa:62:d7:
70:bb:2f:75:76:cc:49:e7:63:55:23:cd:d2:a6:69:42:f0:24:
71:d2:01:18:b6:de:43:82:2f:a6:54:1a:1d:98:cd:26:d2:69:
98:2c:38:3d:57:97:b5:b4:0f:6f:a2:55:92:b4:4b:cb:bb:a7:
59:ed:16:38:ee:36:0a:12:0e:52:51:b2:18:12:22:1a:c1:27:
9d:fa:60:30:ea:58:b6:6f:41:68:38:68:43:53:6f:ec:0f:0c:
af:c8:7d:ec:39:3a:b0:e8:7c:8d:4a:b0:8b:43:f5:9f:ba:91:
6c:3c:cd:0f:48:3a:a3:3a:44:ad:e4:8f:2f:9e:32:17:a6:ee:
5c:02:ef:5e:d7:6a:13:c4:a2:ea:e6:b6:59:ac:36:21:71:17:
22:82:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:27:35 2026 by rpki-client