
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa
File: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (raw, json)
Hash identifier: 0iLOUhfmWoIB+lxiDVooYY80mjdqjMFktAq2sVeC4n8=
Subject key identifier: F5:C1:B4:C0:5F:9C:BD:24:58:69:20:04:0E:A4:ED:15:8B:DA:1E:53
Certificate issuer: /CN=C7CDFA6BC067C7A495919AAD0E26180B86353954
Certificate serial: 1DE6251DF9C31266B8FEA2EC2D2D0288D9DEEFC1
Authority key identifier: C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa
Signing time: Sun 03 May 2026 02:41:29 +0000
ROA not before: Sun 03 May 2026 02:36:29 +0000
ROA not after: Sun 02 May 2027 02:41:29 +0000
asID: 141606
IP address blocks: 103.160.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl
rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:52:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e6:25:1d:f9:c3:12:66:b8:fe:a2:ec:2d:2d:02:88:d9:de:ef:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7CDFA6BC067C7A495919AAD0E26180B86353954
Validity
Not Before: May 3 02:36:29 2026 GMT
Not After : May 2 02:41:29 2027 GMT
Subject: CN=F5C1B4C05F9CBD24586920040EA4ED158BDA1E53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:62:ca:6e:52:9e:1c:6d:ca:37:3c:ac:15:
1f:ee:c6:b9:48:25:e1:5c:69:3f:e6:86:04:de:54:
83:03:c4:0c:1f:f0:0a:df:9c:07:5f:9a:e4:7d:c7:
cc:8d:35:a0:66:fc:ce:d9:3a:dd:58:68:d9:e4:81:
b4:c2:df:37:e9:4b:60:87:f5:18:fc:f1:44:15:58:
50:41:ce:4d:1d:9e:f1:42:d4:43:2e:d6:1d:eb:9e:
5e:55:bf:5e:2f:bb:93:61:72:b8:2d:b7:95:44:d3:
d5:41:2b:26:bc:7f:df:14:0b:73:ca:0b:de:9b:9d:
2e:21:32:ca:a6:d5:fc:d0:55:76:26:fe:e8:2e:be:
c1:1c:84:89:47:f7:69:98:69:4e:0e:a2:4d:0f:ed:
8f:bb:9f:36:5f:15:bb:3f:b3:dd:0c:07:6e:d2:25:
e6:cd:0e:68:93:b6:58:fd:82:87:e9:b3:df:c6:1b:
ca:b9:2e:65:7d:2d:62:4c:c9:a6:66:67:10:a8:5b:
45:a4:99:a5:af:2e:f2:81:6b:71:81:c6:62:a2:df:
3a:33:b1:60:c9:46:e2:b2:fa:35:05:3f:1c:ac:77:
f9:0c:f9:dc:ae:68:f3:65:af:b7:a5:b1:4c:b5:e1:
b8:72:da:67:f3:09:3b:04:10:f3:10:20:20:44:d3:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:B4:C0:5F:9C:BD:24:58:69:20:04:0E:A4:ED:15:8B:DA:1E:53
X509v3 Authority Key Identifier:
keyid:C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.202.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:91:29:c3:de:f4:d7:82:4f:db:ec:2c:e3:b1:ed:4e:49:0a:
e8:04:eb:a9:e7:39:de:0e:ae:ae:69:f1:da:13:a9:ef:9a:db:
e2:03:08:fe:83:02:3a:01:58:16:ef:5e:22:8b:0e:75:28:29:
ce:a5:0b:d1:19:90:d7:d4:07:bb:a5:80:b0:4e:b8:d7:18:5b:
96:c2:ea:1f:a4:8d:9d:98:fb:19:9b:78:11:9c:70:93:47:48:
91:65:71:c6:46:b5:71:9f:73:21:82:6e:d7:2d:3a:99:3b:bd:
e5:6d:6d:c1:b8:67:e4:48:9a:3a:81:83:d3:4f:61:95:c3:37:
ae:48:2a:f5:fd:59:d0:bb:b1:f7:68:7b:c3:ce:4b:dc:1d:a2:
82:51:07:2a:60:83:b2:36:06:d0:0d:8e:9f:4d:90:54:c9:2b:
1b:ff:e6:1d:24:b6:27:7b:d9:5c:81:79:3d:79:1b:07:43:71:
f9:d7:e3:c8:a2:af:d1:3d:c0:25:a1:99:3e:10:d4:14:12:77:
1d:22:5d:80:d2:f0:16:44:91:a5:db:1d:3c:fa:7b:59:5b:35:
d1:94:da:8c:9d:72:7f:c6:f3:33:31:9d:ba:7f:a0:1c:5a:c1:
e7:38:0c:20:53:84:a6:de:e2:c2:b9:8e:ba:4f:25:9f:9e:03:
91:1a:97:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:03 2026 by rpki-client