
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3233203d3e20313333383030.roa
File: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (raw, json)
Hash identifier: d1I2cfM8y0iXKHnaVDBSnW1smn5NlaaQccmGLXMsCLs=
Subject key identifier: 8E:D1:6E:4B:FE:42:3B:2F:4E:09:F0:B7:2F:B5:09:DB:F1:67:52:72
Certificate issuer: /CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
Certificate serial: 4F9C3444F36E72D06B36AF34C4DC52AA26A3C9A1
Authority key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3233203d3e20313333383030.roa
Signing time: Sun 03 May 2026 02:38:13 +0000
ROA not before: Sun 03 May 2026 02:33:13 +0000
ROA not after: Sun 02 May 2027 02:38:13 +0000
asID: 133800
IP address blocks: 103.87.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl
rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:9c:34:44:f3:6e:72:d0:6b:36:af:34:c4:dc:52:aa:26:a3:c9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
Validity
Not Before: May 3 02:33:13 2026 GMT
Not After : May 2 02:38:13 2027 GMT
Subject: CN=8ED16E4BFE423B2F4E09F0B72FB509DBF1675272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:32:bc:17:91:1a:a0:1d:e1:14:b5:9a:a7:
cd:0c:48:cc:0a:ee:ab:14:c3:f8:ad:15:f1:5b:d3:
aa:9e:e3:23:b5:55:18:f8:e6:0b:a4:b3:d1:78:ee:
86:02:55:9a:0d:fc:f6:87:10:50:12:cb:df:f8:17:
c5:e4:72:3b:ca:98:67:8b:ec:99:56:c4:09:8e:f8:
7d:7a:24:d7:f6:16:e9:16:69:5c:5b:01:46:3a:16:
f7:50:33:88:c7:93:07:5f:d1:ee:2b:71:cf:d7:33:
f1:70:5e:21:5c:bb:27:10:a7:8e:62:ac:c2:e8:3d:
89:d3:a8:86:3c:b8:c2:df:60:0d:a3:d7:27:a0:4c:
94:f8:4d:44:77:da:5e:ff:58:06:4f:ae:97:d7:eb:
01:f4:38:70:e4:7e:ab:05:53:5e:4f:61:cf:9c:b7:
fd:72:29:8f:de:58:ed:77:4d:68:2a:bf:0d:c8:cb:
42:44:37:69:48:93:b7:b1:ec:5e:e5:57:d4:20:1b:
8d:a3:6e:65:29:bf:59:d8:dc:66:b2:01:13:7a:f9:
01:d6:28:80:73:c0:03:2f:0c:c6:64:dc:a0:b6:b1:
56:38:5f:d6:99:24:1d:fe:1b:86:9a:a6:78:bd:5b:
5a:89:7e:21:9a:48:f4:f7:86:55:24:dc:cc:03:b4:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D1:6E:4B:FE:42:3B:2F:4E:09:F0:B7:2F:B5:09:DB:F1:67:52:72
X509v3 Authority Key Identifier:
keyid:FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3233203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.66.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:b0:2f:29:44:9b:8c:51:7b:7a:1b:22:75:73:98:51:04:6c:
8c:3a:92:4e:fd:94:df:78:a9:19:79:fd:6d:bd:ff:99:21:ac:
f0:f2:e4:49:1d:f4:71:72:da:a2:4d:2b:1f:aa:e8:4a:a4:f9:
33:ef:30:d4:f0:b6:f3:16:4d:92:c3:42:00:45:63:b0:59:21:
82:09:84:92:89:54:66:50:6b:d6:d6:d4:d1:65:41:ef:18:4e:
9d:92:f5:d4:f1:34:38:c0:ed:01:7a:64:dd:b4:a6:88:38:ca:
4c:f9:db:57:29:db:d5:7d:e6:78:c6:b7:1f:10:76:63:b2:d4:
8d:98:1f:ff:47:be:df:fc:58:04:65:1c:05:49:13:82:fe:44:
00:48:3b:c8:15:3d:2a:36:13:8e:af:2b:b3:fe:71:61:8a:95:
ee:b9:fb:79:c8:7d:c2:4d:fd:78:5c:e6:c6:74:cf:34:79:c0:
aa:32:37:74:bf:03:c5:f5:a4:2e:c6:a7:eb:65:f6:87:3d:6b:
87:ce:c3:75:b7:52:24:cb:00:26:97:79:3e:30:df:45:56:4a:
9c:77:e9:b9:f6:cb:39:fa:9d:e1:ea:37:1c:8e:92:28:4c:53:
a7:35:83:f4:81:fd:9a:74:01:40:07:b9:0d:13:33:86:1e:89:
1c:73:a3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:46 2026 by rpki-client