
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa
File: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (raw, json)
Hash identifier: PGq4Tr5WM4VAyh7qw47RLuSMNDSTpWd9mtnYf8tmUA0=
Subject key identifier: D3:E6:CE:D9:F2:0A:22:9E:11:CE:FA:66:0B:18:8F:78:CB:4D:99:9B
Certificate issuer: /CN=872E319F800BA2C6B4EF39E67C02FA78A219796F
Certificate serial: 5FEAC490F3FE2D30BA38A18351A234C6745CDBAA
Authority key identifier: 87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa
Signing time: Sun 03 May 2026 02:42:49 +0000
ROA not before: Sun 03 May 2026 02:37:49 +0000
ROA not after: Sun 02 May 2027 02:42:49 +0000
asID: 149878
IP address blocks: 103.189.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl
rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ea:c4:90:f3:fe:2d:30:ba:38:a1:83:51:a2:34:c6:74:5c:db:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872E319F800BA2C6B4EF39E67C02FA78A219796F
Validity
Not Before: May 3 02:37:49 2026 GMT
Not After : May 2 02:42:49 2027 GMT
Subject: CN=D3E6CED9F20A229E11CEFA660B188F78CB4D999B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ea:47:70:12:5c:cd:37:d4:bb:a1:cd:c5:a6:
d5:be:23:0c:0c:b7:3e:91:8b:a8:e8:9c:a5:09:99:
9f:61:3a:3a:a3:3c:1b:d4:1e:37:d0:ca:f6:58:b1:
f6:cb:25:66:cd:a0:63:43:70:e2:72:bd:36:65:23:
cf:08:71:b6:28:a0:2a:98:15:8b:00:41:c6:02:64:
5e:8a:de:9b:92:71:21:d7:77:c6:41:b4:37:e0:8f:
a8:16:a3:83:e1:40:2d:40:a7:bb:68:04:06:19:33:
a8:0d:d2:cb:9f:4e:15:8b:21:35:47:53:9f:ec:ce:
e1:56:c2:30:aa:f8:72:9e:ea:fc:d5:86:e3:2c:0b:
75:ec:da:f3:90:02:c4:2e:0f:3b:d0:b1:e8:d3:93:
70:77:b6:30:5a:e6:f2:18:66:0f:21:48:d8:59:0e:
5c:22:e8:5a:b4:28:fd:7a:54:21:64:38:30:d7:e1:
30:b9:d7:fe:e5:f9:ea:7e:e2:5a:51:91:ea:59:ad:
1b:b5:57:7e:5c:f9:1e:6a:33:e6:47:00:24:3c:dc:
6f:fa:af:1b:ac:77:4c:23:e3:37:18:84:cd:7f:16:
a3:56:3c:d8:10:f6:c7:fe:63:37:99:bc:d4:97:0c:
f5:17:16:0a:02:2f:91:6e:be:ea:fd:61:8e:98:9f:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E6:CE:D9:F2:0A:22:9E:11:CE:FA:66:0B:18:8F:78:CB:4D:99:9B
X509v3 Authority Key Identifier:
keyid:87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:36:fd:ca:27:9d:32:e1:a2:b5:93:d6:bd:d7:77:89:71:d6:
58:e9:75:3b:3b:10:60:c4:c3:95:81:c2:14:08:2c:1d:42:8a:
5d:6a:21:3f:5f:44:d5:04:77:db:e8:00:5f:c0:71:b0:6a:f9:
eb:12:88:89:86:22:58:5b:20:88:f3:59:a1:b8:e0:f2:06:2b:
30:33:78:c3:56:0f:d8:f7:22:ee:d5:5b:bb:02:6f:61:ad:a4:
01:78:d1:b1:92:57:48:bc:b5:c5:f6:c6:b7:97:0b:28:80:3a:
90:57:e9:ee:32:f7:aa:41:61:8b:db:28:dc:6b:de:f8:50:3b:
25:53:95:e6:9e:d4:5b:64:5a:c4:a5:5a:2d:7c:1b:00:56:35:
19:cf:86:17:b6:b5:50:35:d0:7c:4a:67:66:f9:be:b4:ae:85:
5e:55:b6:f0:41:49:e0:d2:f7:51:c1:8d:84:f7:93:08:83:59:
c7:b9:88:2e:17:ef:72:90:65:88:28:7a:64:0d:01:30:90:1a:
10:6e:5c:ca:61:63:25:ce:50:67:82:6d:22:7b:ae:89:27:e3:
c6:a5:f3:40:b0:4a:37:f5:8e:3e:22:c4:f8:a7:f3:ef:f2:e0:
8f:61:0b:24:63:7c:0a:06:ba:9a:89:af:af:c4:e6:38:01:c4:
3d:fc:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:49 2026 by rpki-client