
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa
File: 3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier: N3QuzEKlcEB5QVB6ktu4ie90f+FhLLN7QYnW5ppb+do=
Subject key identifier: 93:19:55:8F:58:F4:01:10:38:0F:3D:00:B8:0A:64:30:CF:A0:9B:DE
Certificate issuer: /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial: 51859562F1D04E0A6FDCCDA9056B1C914A10A391
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa
Signing time: Sun 03 May 2026 02:41:04 +0000
ROA not before: Sun 03 May 2026 02:36:04 +0000
ROA not after: Sun 02 May 2027 02:41:04 +0000
asID: 38515
IP address blocks: 103.107.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:85:95:62:f1:d0:4e:0a:6f:dc:cd:a9:05:6b:1c:91:4a:10:a3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
Validity
Not Before: May 3 02:36:04 2026 GMT
Not After : May 2 02:41:04 2027 GMT
Subject: CN=9319558F58F40110380F3D00B80A6430CFA09BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:b1:2d:5a:4c:af:3c:22:c7:71:a1:68:0a:
e6:a2:a7:dd:47:21:26:a1:84:05:76:23:3b:28:65:
29:78:d5:c3:1d:b9:da:44:f1:8d:b4:cd:fe:18:69:
bf:fb:90:08:98:17:00:b9:c0:8b:46:97:50:7e:9b:
cb:9c:b9:40:0f:d5:dc:d4:a2:6b:60:91:2b:a3:b4:
2d:2c:46:0d:c3:b9:c2:2e:88:e2:ef:84:e7:26:94:
3e:43:4b:37:61:f2:ca:3f:cb:7a:bf:47:08:12:bb:
33:bf:c4:ac:22:f5:9a:08:8c:4e:e7:3a:48:99:b3:
23:fd:62:1f:b8:fb:af:48:42:18:d1:b6:40:9f:c9:
b0:0d:61:6b:ae:95:39:36:b0:ca:f5:15:e0:95:ea:
4f:41:72:d1:92:8c:93:5f:b7:a9:31:f0:fe:92:02:
e3:22:39:a5:3a:a3:1b:81:cc:ae:c1:f8:de:c1:aa:
5c:86:c9:c6:dd:05:3d:08:91:df:5b:71:29:a2:5d:
c7:f9:03:dd:46:af:38:00:6b:ae:0e:7a:af:45:0c:
ec:03:5d:bd:41:56:ab:0b:00:87:12:0d:bc:bf:3f:
08:83:16:82:25:12:e4:b2:d8:8c:5c:69:f1:c7:12:
d1:ef:ea:af:ef:9b:e6:46:5e:eb:8f:f0:a5:a4:2b:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:55:8F:58:F4:01:10:38:0F:3D:00:B8:0A:64:30:CF:A0:9B:DE
X509v3 Authority Key Identifier:
keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.251.0/24
Signature Algorithm: sha256WithRSAEncryption
62:95:12:af:03:93:d6:d9:17:31:0e:60:90:58:59:0c:d6:f4:
50:39:37:32:27:f4:3e:26:3d:80:b4:ae:cc:87:8f:d2:f0:73:
74:1b:78:b6:8b:59:70:de:7e:70:54:15:c2:23:f1:4d:7c:e6:
12:0f:3e:9d:49:ae:4f:b9:38:bd:d3:3c:d9:90:39:57:46:30:
b2:00:fc:00:dd:22:43:cc:80:e6:c9:52:fb:56:07:ef:7a:0e:
93:32:38:50:5b:db:58:9e:1d:5c:a2:5c:59:1a:ea:7d:aa:0b:
ce:d9:4d:91:5c:c9:3a:96:06:86:cc:df:bc:88:da:ac:a7:a4:
fd:89:f2:00:e2:5f:d0:4c:22:75:c2:92:2a:d4:8c:38:89:c1:
56:cb:cf:5d:ce:1f:f7:94:bb:d7:3d:f6:83:a2:6f:e4:52:60:
50:63:ed:c6:ff:e0:a6:4e:37:76:8f:17:78:e4:6f:94:ab:ff:
bc:07:b5:b9:8f:8b:8f:08:07:0f:21:fb:22:79:96:c9:1c:34:
8b:75:99:2c:a7:c9:4e:30:20:ee:b4:34:08:95:4b:33:7c:1d:
33:78:a3:47:21:6d:fb:c4:b8:3a:c1:70:ab:43:9e:9c:a0:fd:
40:21:c6:bd:19:83:e0:a3:3e:f3:1c:75:02:bd:27:3d:58:c7:
22:9e:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:44 2026 by rpki-client