
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa
File: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (raw, json)
Hash identifier: ueytpOIHoXmrHTRXDms0z+mkyIFFMatKweHFitzqnbY=
Subject key identifier: 2C:6C:6F:CC:66:CF:2D:F0:FC:42:07:72:2A:E6:EE:6E:82:FC:62:B3
Certificate issuer: /CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Certificate serial: 2007F7047C712726E37C12F92062C44D31A0154A
Authority key identifier: 9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa
Signing time: Sun 03 May 2026 02:42:39 +0000
ROA not before: Sun 03 May 2026 02:37:39 +0000
ROA not after: Sun 02 May 2027 02:42:39 +0000
asID: 140407
IP address blocks: 103.122.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:07:f7:04:7c:71:27:26:e3:7c:12:f9:20:62:c4:4d:31:a0:15:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Validity
Not Before: May 3 02:37:39 2026 GMT
Not After : May 2 02:42:39 2027 GMT
Subject: CN=2C6C6FCC66CF2DF0FC4207722AE6EE6E82FC62B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f2:44:76:b1:23:5d:54:54:32:4f:d5:bd:0e:
19:5f:33:22:56:63:7c:da:79:01:c6:86:8f:34:72:
55:bc:5e:13:dc:cf:4a:79:52:80:2a:2a:bc:fb:61:
8e:31:fa:7d:9e:d0:62:cf:9a:9f:44:ba:3a:9a:93:
01:c3:4e:fc:21:9a:73:fc:a5:be:47:09:e2:29:c1:
42:e0:8a:79:5a:e9:af:7c:47:00:89:db:a4:8b:7d:
f3:9a:21:d5:f5:4b:5c:97:d3:a2:de:aa:d4:1c:7a:
46:63:ae:b4:27:4c:5b:17:0e:49:70:a6:45:ac:70:
53:7b:9b:0a:55:b5:bc:bd:ba:58:6a:87:d7:28:cc:
3e:e9:3b:a8:3a:56:93:a1:a9:a4:77:3b:09:ad:10:
5f:ae:d3:33:41:8b:f1:a8:46:07:e6:5d:16:1a:d5:
b5:21:72:34:54:0e:f0:fa:16:ea:37:9d:63:e2:8d:
2e:cf:d9:58:91:13:45:4a:f9:f2:27:b0:60:67:06:
73:e0:07:e4:18:86:51:c9:91:40:31:e4:f7:ab:3b:
7d:63:eb:e6:5c:57:71:3c:8d:ad:5e:86:11:64:77:
b6:e8:88:11:e8:0c:85:f6:8f:16:bd:d6:f4:55:2c:
f0:c6:38:08:04:b1:8a:fd:cf:29:eb:9d:7c:99:1d:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6C:6F:CC:66:CF:2D:F0:FC:42:07:72:2A:E6:EE:6E:82:FC:62:B3
X509v3 Authority Key Identifier:
keyid:9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:8c:e9:ee:31:5c:ee:65:e6:45:a6:67:6a:7a:70:67:5b:a8:
67:b7:11:eb:fb:0f:6c:48:27:dc:d3:dc:1a:a5:b1:5a:0c:aa:
d8:6f:bc:10:b0:dc:57:fd:6c:80:e4:80:a9:ce:cd:4e:86:4b:
3e:55:69:bb:c4:b7:f8:23:bc:d0:e1:b4:ac:76:44:47:26:23:
2f:7d:a0:8b:ea:eb:56:25:ec:5b:50:5b:f2:12:31:2a:2a:0b:
72:47:df:58:56:d8:da:60:0a:a1:e3:46:c7:77:e3:73:79:06:
4d:75:d7:f5:97:f4:5f:e1:c6:c6:aa:99:2f:82:6c:be:90:33:
47:a8:25:6c:74:cd:17:d0:95:5f:72:68:18:90:e0:24:ad:c1:
61:87:38:73:86:39:5f:b6:66:49:63:08:30:1e:d8:71:c9:d3:
e2:b8:d3:d1:e9:f3:52:d1:89:95:52:f9:31:a4:5b:27:4b:90:
15:bb:00:1e:c4:78:3a:61:42:67:8b:25:c0:8f:8e:3d:12:1a:
c2:dc:ae:69:31:ae:77:8f:f8:4e:fe:c6:6e:fc:c7:f9:1e:e2:
3e:97:2b:92:7a:c7:b3:77:47:d1:cd:4a:68:42:15:f5:35:af:
08:4d:fd:bb:f1:04:4f:b3:c8:fd:66:15:da:ce:4c:4c:1c:de:
c3:0c:58:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:49 2026 by rpki-client