
$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa
File: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (raw, json)
Hash identifier: 7tVf8gGpMSKXIGs5t/hRwc2QOWzsG/fnuruBADT3qTU=
Subject key identifier: 8B:15:95:2F:A8:DD:B2:A3:85:CC:99:48:61:01:A9:53:30:37:70:A5
Certificate issuer: /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial: 1D00EBAD30337F2DB09FAD1B8AE67B1EE707BA5F
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa
Signing time: Sun 03 May 2026 02:42:35 +0000
ROA not before: Sun 03 May 2026 02:37:35 +0000
ROA not after: Sun 02 May 2027 02:42:35 +0000
asID: 38750
IP address blocks: 103.213.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:00:eb:ad:30:33:7f:2d:b0:9f:ad:1b:8a:e6:7b:1e:e7:07:ba:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Validity
Not Before: May 3 02:37:35 2026 GMT
Not After : May 2 02:42:35 2027 GMT
Subject: CN=8B15952FA8DDB2A385CC99486101A953303770A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:8f:92:de:82:4e:a4:56:4f:2c:f4:08:c2:
2d:90:76:1e:44:3e:8b:86:5a:89:83:cf:30:8b:3a:
24:69:e3:3c:5c:d8:4c:3f:4d:be:43:7e:c4:7b:c8:
9b:b8:be:10:55:41:07:dc:66:e4:5f:4d:7c:cd:6d:
3b:38:26:cb:1e:a6:d1:e9:eb:03:9d:15:fe:3a:a8:
b8:0d:d6:dc:27:62:b0:0d:b3:18:27:c2:86:24:fd:
1a:5c:a4:c9:51:0e:e6:18:62:a4:63:f4:2e:b8:46:
9d:41:00:2d:da:b9:3c:24:43:01:b9:7f:80:e4:67:
96:6f:8d:7e:3e:75:86:cf:d6:7b:03:00:5b:5a:a6:
9e:53:b4:8c:5a:2a:29:11:eb:4e:a8:69:5c:38:0f:
ac:ec:77:90:d1:8d:80:71:cc:9a:58:9b:e1:9d:bb:
63:f8:30:22:3a:e5:36:02:ec:bc:f8:9e:e6:2c:45:
c1:ef:a6:ec:a0:d2:af:bc:8c:de:84:76:0b:ac:e8:
bf:eb:cf:e1:b8:15:46:bf:e2:e4:6a:d6:da:b4:a0:
ae:c4:16:51:dd:3f:ca:b1:df:75:a4:4d:d9:ea:51:
c5:b0:37:ca:e9:84:b0:3c:c4:b8:16:05:49:90:6e:
4c:1f:df:ea:d3:b7:86:0e:b9:b6:b9:88:0f:0d:be:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:15:95:2F:A8:DD:B2:A3:85:CC:99:48:61:01:A9:53:30:37:70:A5
X509v3 Authority Key Identifier:
keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:83:73:b4:4f:14:06:ec:f9:7f:9f:23:ac:97:48:7f:e9:f6:
09:2a:48:7d:f0:ca:28:6a:89:5f:b4:12:c8:f9:46:b6:a3:f2:
8a:0e:c8:e7:04:ef:cd:b9:ce:ed:a4:51:3a:f0:36:ce:d0:37:
bf:50:f9:0e:7e:00:f2:de:be:8e:00:a2:7f:6d:4e:4e:ad:1a:
fb:44:c7:94:0d:09:33:2d:e1:ae:b3:51:28:55:40:69:13:5a:
a7:35:36:45:5e:04:d1:c3:e3:ac:46:7f:e9:a1:6f:24:94:4c:
20:1b:2c:4f:75:ff:94:7a:7d:3b:a5:be:e2:56:f9:aa:95:61:
81:41:a1:c9:6d:1a:04:5b:a5:d7:58:07:84:ce:54:0b:b4:ad:
f3:79:57:1e:1f:b6:4e:70:de:83:59:ce:38:01:4b:f7:92:bb:
60:73:7e:d4:41:49:c4:0c:4e:4d:f7:a1:3a:3d:e8:60:1a:e4:
29:12:19:b5:60:9b:0b:64:88:68:64:91:50:91:03:57:63:9f:
1d:0f:81:e6:02:b3:62:8f:35:a7:65:3c:42:2c:1b:62:6c:75:
9b:d9:f8:7e:f6:15:8f:8a:b4:8f:35:9a:6c:2b:08:07:dd:9d:
d8:bc:09:36:77:59:d0:c3:f8:75:b4:1e:0a:8a:03:ef:92:ba:
eb:ef:e9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:47 2026 by rpki-client