
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa
File: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (raw, json)
Hash identifier: e4+bi848oD/+O01Mx0cjiGiYFl4mEZMFhTrqMTZt/js=
Subject key identifier: EC:4D:69:35:7F:58:4A:13:B3:C8:A8:BA:AC:B4:03:0D:19:72:B9:FD
Certificate issuer: /CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4
Certificate serial: 7906A9F84A16D4C34D159AC4FDEF5C3263EE6C9B
Authority key identifier: DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa
Signing time: Sun 03 May 2026 02:40:59 +0000
ROA not before: Sun 03 May 2026 02:35:59 +0000
ROA not after: Sun 02 May 2027 02:40:59 +0000
asID: 138855
IP address blocks: 103.170.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl
rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:06:a9:f8:4a:16:d4:c3:4d:15:9a:c4:fd:ef:5c:32:63:ee:6c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4
Validity
Not Before: May 3 02:35:59 2026 GMT
Not After : May 2 02:40:59 2027 GMT
Subject: CN=EC4D69357F584A13B3C8A8BAACB4030D1972B9FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:6d:8a:93:7e:ea:b1:a5:7c:60:f4:d6:d2:
03:93:b5:db:0e:65:5f:c8:44:92:8d:17:f7:a1:35:
53:8e:7a:8a:ff:e9:84:79:8e:29:83:33:4a:50:e8:
b3:50:26:0c:98:3f:3c:48:09:ca:d3:0d:d3:ad:a6:
55:70:2d:2e:2b:47:21:e7:56:12:96:47:f1:5c:53:
aa:a1:ea:eb:48:bc:93:bc:24:60:f0:ad:d6:2f:90:
f9:40:44:0b:4d:bd:75:21:99:08:50:07:ba:80:a0:
c4:65:91:aa:b8:c2:b9:6a:37:8e:cf:8c:a3:0f:89:
f0:36:93:c1:f0:a5:0a:9c:3f:3b:58:a2:55:a8:84:
9a:76:5d:05:95:0b:d8:70:58:18:bb:83:8c:08:9a:
7e:a3:b1:84:06:00:f5:35:b7:f3:41:8a:89:5a:ae:
88:00:07:17:fc:68:dd:7b:04:40:c3:4d:89:09:e3:
3b:ea:4b:cb:5e:47:de:18:9f:25:22:fc:2e:60:da:
7a:81:c6:a7:78:16:dd:91:b0:fe:e7:c3:95:6d:81:
80:af:dd:3c:6a:6f:bc:1b:cf:14:a8:08:94:cf:fc:
06:90:45:e6:28:eb:d1:60:58:b4:5d:c9:7b:05:4c:
82:92:f3:ae:94:56:eb:03:e7:09:07:87:87:19:2f:
c6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4D:69:35:7F:58:4A:13:B3:C8:A8:BA:AC:B4:03:0D:19:72:B9:FD
X509v3 Authority Key Identifier:
keyid:DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.236.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:4f:96:e2:e2:5e:fe:18:3e:8a:bf:60:25:51:60:8c:ec:bd:
3e:32:78:16:71:f8:c0:4f:6a:df:7f:b3:15:ec:1e:55:1f:f3:
01:8a:4f:18:37:49:bf:df:33:0c:18:87:0b:8b:ac:81:fd:8c:
f1:1c:1f:4e:aa:5d:6f:c8:93:fe:73:85:bd:73:63:34:0e:39:
08:ff:53:96:9c:58:f6:d3:ea:5d:5d:cb:13:7b:b6:58:ba:85:
8e:09:e2:46:c2:c9:da:ea:9e:a6:f3:b1:1a:8a:5b:5d:0f:e5:
ae:76:98:d2:32:cc:fb:97:3e:e8:e6:66:97:5d:43:7d:7a:f0:
03:f5:9a:ad:43:20:6f:16:aa:68:4b:b4:cd:a8:8b:dd:d0:8d:
14:3b:74:45:cc:b1:28:45:84:e9:0d:56:5e:f4:05:b1:93:e2:
eb:47:35:41:1f:3d:37:4a:8c:dd:ae:e6:e0:23:ea:c7:81:01:
4f:a3:da:f1:6e:cf:b6:54:50:05:2e:28:95:67:50:cb:77:3e:
15:79:8d:29:dc:1c:23:eb:e9:0f:45:c2:a9:61:70:61:03:1d:
31:f4:96:77:0d:ae:cc:85:00:7d:b1:d6:35:e0:48:dd:60:70:
37:be:ed:e1:92:18:8a:fa:a5:82:b0:76:ae:0e:6d:43:8d:45:
65:56:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:47 2026 by rpki-client