
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/3130332e35362e37302e302f32342d3234203d3e20313333383235.roa
File: 3130332e35362e37302e302f32342d3234203d3e20313333383235.roa (raw, json)
Hash identifier: JLbpK2d50OThZ/uHUQbD7meiPhgU3JckSJnTiY2q/0s=
Subject key identifier: 47:40:94:5A:21:A0:26:87:C2:65:F3:1F:60:33:F9:54:32:F5:B3:60
Certificate issuer: /CN=721B7A4BF48265E289B51932234579B2D9D38CF7
Certificate serial: 7532D1F41ECB763AC904AFDE64D1AEBDCC2F8985
Authority key identifier: 72:1B:7A:4B:F4:82:65:E2:89:B5:19:32:23:45:79:B2:D9:D3:8C:F7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/721B7A4BF48265E289B51932234579B2D9D38CF7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/3130332e35362e37302e302f32342d3234203d3e20313333383235.roa
Signing time: Sun 03 May 2026 02:38:00 +0000
ROA not before: Sun 03 May 2026 02:33:00 +0000
ROA not after: Sun 02 May 2027 02:38:00 +0000
asID: 133825
IP address blocks: 103.56.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.crl
rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/721B7A4BF48265E289B51932234579B2D9D38CF7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:32:d1:f4:1e:cb:76:3a:c9:04:af:de:64:d1:ae:bd:cc:2f:89:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721B7A4BF48265E289B51932234579B2D9D38CF7
Validity
Not Before: May 3 02:33:00 2026 GMT
Not After : May 2 02:38:00 2027 GMT
Subject: CN=4740945A21A02687C265F31F6033F95432F5B360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:04:20:3a:40:75:35:16:83:8f:95:e0:5c:
3f:97:a7:07:08:62:98:b7:ed:fe:ab:c7:75:ea:75:
56:c5:da:d7:4f:60:fa:dd:95:9b:4a:f1:ee:bb:51:
0f:f9:96:cb:cb:3d:5b:2e:4b:52:53:c0:48:67:50:
9d:26:91:13:e3:0c:1b:93:fb:38:40:08:26:ff:3f:
bf:45:d8:e4:a8:a8:11:f2:6a:d2:c2:a4:b0:c7:33:
b3:79:9a:ff:76:9f:a7:af:f9:d6:c9:49:b9:2e:42:
57:4c:ca:9a:00:84:e2:ad:81:f6:3e:13:a4:e3:70:
8a:26:c2:36:19:87:00:7a:1a:34:27:c0:08:49:3d:
c1:c6:b5:4c:d1:19:11:4e:ac:2d:b2:e8:ef:04:37:
5e:a7:4f:06:eb:44:de:df:97:b4:c3:52:2b:b0:67:
ca:5e:0d:a4:23:79:ed:62:48:2a:d9:ab:c6:1c:2f:
50:58:c8:95:32:e5:67:8a:ec:39:a6:e9:4e:fe:b8:
4a:c8:fa:17:eb:2c:69:55:76:f2:51:cb:c2:c6:a1:
18:92:b1:d3:82:65:5f:7d:97:74:b4:dd:1a:57:7b:
f4:19:fc:ff:7d:ea:63:95:a3:8c:45:cd:2d:aa:34:
a8:74:17:cc:20:4e:f3:ad:52:b9:22:50:4a:d4:a6:
5e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:40:94:5A:21:A0:26:87:C2:65:F3:1F:60:33:F9:54:32:F5:B3:60
X509v3 Authority Key Identifier:
keyid:72:1B:7A:4B:F4:82:65:E2:89:B5:19:32:23:45:79:B2:D9:D3:8C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/721B7A4BF48265E289B51932234579B2D9D38CF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/3130332e35362e37302e302f32342d3234203d3e20313333383235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.70.0/24
Signature Algorithm: sha256WithRSAEncryption
51:8d:0d:76:dd:57:1d:35:63:5f:60:64:a1:1a:e8:b2:11:df:
0a:8f:67:59:77:21:4d:f7:6d:6b:de:8f:42:b5:7d:43:56:2a:
90:39:11:1b:df:7a:27:fa:0d:6c:7e:04:4e:7a:9f:07:3b:bd:
4e:b7:9e:b4:53:e8:7e:0e:5b:03:8e:ab:12:76:d1:c1:f7:71:
53:15:48:81:50:b4:cb:b3:81:3a:bd:a6:66:90:93:60:aa:02:
87:90:71:0c:11:89:c7:7f:71:98:49:74:7f:f9:e3:38:d7:c5:
0d:eb:77:0a:a8:d0:6c:db:75:13:2c:b5:5b:db:6d:ea:e8:f0:
1e:48:89:b9:9c:f9:fd:e2:6d:b8:66:66:82:fc:49:f4:1f:d8:
00:fc:e4:dd:58:3e:8b:71:c1:2f:a4:3b:73:05:35:d3:95:f3:
a0:1c:e5:6a:30:40:86:5d:57:07:13:6b:10:4d:ca:49:25:e4:
e7:ad:ea:d8:e4:a9:09:73:c8:7d:00:cb:46:c8:bd:35:e4:37:
9f:a1:01:83:c2:e5:6f:9b:6e:4f:41:84:fa:08:33:27:f9:af:
a7:fb:4e:ea:aa:db:0d:3c:ba:4e:b8:07:a3:74:e4:cd:5f:ee:
9a:9b:30:34:b3:4f:a6:61:f4:d1:bb:6d:eb:6f:17:9f:4a:db:
24:1a:e8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:42 2026 by rpki-client