
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa
File: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (raw, json)
Hash identifier: l3e6649ftGy/RyoIrij/BvUADN52ueYZyLhMioJKOn8=
Subject key identifier: 7A:56:1E:3A:E9:06:93:AB:42:C2:65:D4:A2:25:0E:F4:87:D4:77:0D
Certificate issuer: /CN=6392804C8E02387641837CC130058F05667A805F
Certificate serial: 255E4B27E2BEF9FDC0B290B4ACB18DA159BD066A
Authority key identifier: 63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa
Signing time: Sun 03 May 2026 02:43:47 +0000
ROA not before: Sun 03 May 2026 02:38:47 +0000
ROA not after: Sun 02 May 2027 02:43:47 +0000
asID: 138062
IP address blocks: 103.129.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl
rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5e:4b:27:e2:be:f9:fd:c0:b2:90:b4:ac:b1:8d:a1:59:bd:06:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6392804C8E02387641837CC130058F05667A805F
Validity
Not Before: May 3 02:38:47 2026 GMT
Not After : May 2 02:43:47 2027 GMT
Subject: CN=7A561E3AE90693AB42C265D4A2250EF487D4770D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:8e:ab:a0:f5:ad:07:d8:77:38:42:88:61:
ce:67:99:29:ae:74:2f:51:56:3b:1e:7b:ea:90:0f:
28:1d:04:55:2d:b1:d0:b5:74:0f:8e:d7:81:e2:2f:
bb:0b:12:df:27:04:e0:f6:e6:68:f4:ac:07:9a:a0:
13:47:0c:6e:c9:a6:1d:5a:dc:7c:ac:ca:76:54:ff:
b5:e0:f9:d9:13:ad:b9:f2:de:af:17:a2:2b:fd:f8:
c6:e6:a2:d7:0d:40:35:2e:f2:99:85:9c:08:bd:35:
d5:4f:bb:34:4c:29:67:47:2e:f2:b4:b0:c9:4d:6f:
3e:51:21:3b:75:4a:a6:2b:ae:4d:01:d5:cb:e4:ab:
78:ec:70:5c:3b:e9:0e:65:ca:ef:a3:0f:6f:05:e3:
06:f1:5d:4a:27:1e:12:4b:37:73:a8:e0:53:f1:85:
05:fb:26:0f:2f:d1:bb:75:92:c0:58:13:73:2b:5c:
79:19:e4:73:e4:bc:46:97:96:df:e8:79:5e:b2:eb:
b8:aa:4c:a0:9e:72:53:ce:52:fe:8b:93:af:d3:b0:
27:3b:48:a6:a3:42:1d:d8:83:1a:af:fb:54:e2:a9:
61:72:36:36:2a:84:fc:cf:71:df:27:5e:72:a1:61:
a9:c6:ad:e4:21:d1:9f:b8:4b:3a:d7:38:38:51:86:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:56:1E:3A:E9:06:93:AB:42:C2:65:D4:A2:25:0E:F4:87:D4:77:0D
X509v3 Authority Key Identifier:
keyid:63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.129.222.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6b:a9:9e:52:fd:7b:5d:3e:31:ca:b1:d2:4a:fa:be:76:8b:
e3:1a:2f:e7:fb:5b:b3:e1:89:16:23:f3:9e:84:9a:2e:b0:49:
c1:c2:80:60:0f:7e:c7:8c:e2:11:3b:a9:88:3a:fe:b2:0d:a8:
8c:1f:64:28:9a:9d:6e:22:2b:06:3e:82:ed:05:5e:73:81:1a:
39:31:44:1a:61:14:2d:c1:97:ec:8e:92:fd:0f:c8:aa:5b:31:
6b:2f:0f:04:97:93:d3:c8:39:c8:bb:ef:fd:3a:94:de:6e:f8:
98:d7:a4:6f:7d:50:99:19:6d:ce:15:11:ec:55:f5:8e:cc:7f:
3e:6e:68:15:e8:95:3a:2b:93:25:cf:e8:a4:82:54:2c:77:6a:
f3:d6:8f:c8:8c:c5:dd:d4:4e:0d:94:58:21:62:57:76:1f:02:
06:ce:95:db:ec:75:8f:c1:64:aa:de:ee:a6:4e:a0:ef:91:55:
db:fa:cf:7a:81:9a:f2:6b:3d:cb:5b:6f:ec:1a:17:fa:6c:51:
b4:1d:b7:5d:fb:58:5a:e6:87:2f:82:73:70:43:0a:05:ce:bf:
17:1a:f7:29:9a:40:ad:05:67:96:e3:e7:b2:8b:97:31:31:ff:
6b:02:f7:da:2c:e5:74:cc:70:0e:4a:39:eb:45:12:98:7b:91:
d8:06:94:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:03 2026 by rpki-client