
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa
File: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: 9UBNZ+h1G8mek9LcljhEKysiSZO7TUe9p8xzWKxJS+I=
Subject key identifier: 81:B9:3C:5D:10:25:DE:23:57:A9:C1:FB:CF:A4:EB:82:96:7E:E5:9D
Certificate issuer: /CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
Certificate serial: 496D7314AFAB92455248413612673BA321DFB843
Authority key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa
Signing time: Sun 03 May 2026 02:38:13 +0000
ROA not before: Sun 03 May 2026 02:33:13 +0000
ROA not after: Sun 02 May 2027 02:38:13 +0000
asID: 133800
IP address blocks: 103.94.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl
rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6d:73:14:af:ab:92:45:52:48:41:36:12:67:3b:a3:21:df:b8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
Validity
Not Before: May 3 02:33:13 2026 GMT
Not After : May 2 02:38:13 2027 GMT
Subject: CN=81B93C5D1025DE2357A9C1FBCFA4EB82967EE59D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:7b:3c:65:22:4a:a6:fc:f8:45:76:b3:02:
fe:d6:61:7d:d0:c4:e8:b6:c2:b7:a5:90:7f:3a:2a:
67:c6:17:d9:b8:0f:68:f0:c2:62:4f:04:c6:6f:a8:
7c:b1:ff:27:6f:6b:5a:a2:fc:5f:ed:ca:58:83:89:
7b:5e:f5:1d:2d:08:81:d3:94:f7:30:53:23:6c:67:
d4:a8:e4:71:1b:92:92:62:e0:d1:9b:4e:fa:fc:bf:
da:f2:53:d9:da:9c:e1:29:56:34:b8:0d:c8:9c:55:
bb:d3:6f:3f:04:93:b0:49:f8:be:b0:cc:8b:52:0f:
ca:45:35:06:9f:3e:11:00:e5:47:9a:99:c0:28:34:
eb:05:64:e9:ab:a2:12:e2:2d:a2:14:03:18:99:bb:
54:5a:02:8b:42:a4:21:1b:24:e8:41:d8:75:25:68:
32:cc:1a:ee:cc:1f:b1:42:cf:80:4d:cd:c0:1a:00:
c7:e1:ee:35:38:e1:ed:28:d1:0c:3b:70:7e:fe:0b:
01:fd:94:ad:29:b5:a8:02:ce:ec:40:be:83:b2:dd:
06:fb:8e:29:fc:a4:29:3d:18:a6:34:16:29:cb:c7:
db:04:5a:32:a7:a1:ac:7c:dc:ab:81:ca:4b:25:33:
97:81:d3:79:6c:98:8f:8f:72:cd:7f:94:a6:21:c6:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:3C:5D:10:25:DE:23:57:A9:C1:FB:CF:A4:EB:82:96:7E:E5:9D
X509v3 Authority Key Identifier:
keyid:FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.94.238.0/23
Signature Algorithm: sha256WithRSAEncryption
69:fa:63:2a:42:88:eb:f5:0c:2b:9b:a4:15:cb:c6:c2:23:8d:
71:14:14:46:0e:4a:f1:a3:b3:e1:dc:77:8f:16:1f:72:5c:91:
5c:de:06:1e:b0:e9:84:4a:bc:0c:dd:54:4f:30:45:b9:75:62:
15:4b:89:17:bd:6b:cd:c1:fc:45:cf:52:1f:dc:72:7b:99:83:
30:b9:60:97:78:7d:a6:1a:b4:95:c3:ef:ed:7a:9a:26:6d:e5:
39:39:90:19:b5:3e:a2:c6:d7:71:c5:6e:e0:88:91:b7:9d:12:
25:b2:19:82:be:8a:2c:d5:92:d5:70:7f:b9:ca:0c:82:68:92:
58:ca:20:8d:26:81:96:92:dc:89:a9:fc:f8:08:41:e0:d5:8f:
56:74:62:ab:2f:52:71:a6:ad:70:cb:d1:43:ad:45:38:50:12:
cb:d5:b7:c8:14:58:b4:18:5a:f3:90:11:e4:68:0f:bc:9d:0a:
ec:48:44:ca:69:6f:72:cd:d5:41:a3:29:5d:a4:7b:d5:ad:4a:
ef:79:ef:70:63:fc:64:10:55:ea:1a:12:f3:55:8e:15:58:26:
85:17:2c:28:42:4a:7f:c2:93:d2:9a:65:e2:54:64:59:8a:ac:
0b:1d:47:03:ca:8e:24:4d:a4:bb:75:b2:5c:7a:3e:c8:d6:2d:
81:df:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:49 2026 by rpki-client