
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
File: 3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (raw, json)
Hash identifier: K7PbjaFE0zSsIAVA9HPV3S0+MEAkd6bF/CX8cBvwHhQ=
Subject key identifier: 9D:A6:EC:B6:0B:D1:F2:DC:C8:69:6F:F3:1B:56:A3:79:A4:96:10:49
Certificate issuer: /CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740
Certificate serial: 68713CB98D129EC62141AF3DB240909E4EFE1F1F
Authority key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
Signing time: Sun 03 May 2026 02:44:55 +0000
ROA not before: Sun 03 May 2026 02:39:55 +0000
ROA not after: Sun 02 May 2027 02:44:55 +0000
asID: 150232
IP address blocks: 103.13.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl
rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:71:3c:b9:8d:12:9e:c6:21:41:af:3d:b2:40:90:9e:4e:fe:1f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740
Validity
Not Before: May 3 02:39:55 2026 GMT
Not After : May 2 02:44:55 2027 GMT
Subject: CN=9DA6ECB60BD1F2DCC8696FF31B56A379A4961049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:f9:60:0f:32:d8:6f:a1:29:db:12:54:42:
e9:84:1a:0d:e9:b4:7b:fe:8c:8b:1f:1d:e6:fa:58:
4e:a5:61:89:3f:fe:ad:8b:5c:a7:9a:39:e7:83:e6:
0e:b1:90:fa:d9:59:62:81:3b:37:21:4a:c0:9b:34:
bf:5d:0e:59:0b:47:d9:ea:5d:1b:15:8e:10:17:e1:
d4:11:b9:2c:34:e7:be:b4:dd:7d:43:6c:2e:53:f5:
b3:13:ee:4d:b4:11:0a:7b:d9:d4:00:f6:3f:d2:27:
92:b5:bb:11:d1:be:e1:75:28:69:ec:81:a7:5b:a2:
1f:0b:e0:1b:58:81:17:f4:ae:72:36:83:99:1c:40:
c7:d1:51:3f:42:ed:49:ec:89:42:27:d7:01:ab:15:
8a:6d:0a:89:c3:ef:f6:be:82:47:ee:5e:0c:da:87:
a5:6d:68:3f:bf:34:52:31:8a:fb:d0:c8:4e:1a:44:
48:72:77:90:45:d8:fd:58:6c:e5:c3:78:7f:bf:26:
95:1c:e3:8c:82:63:9f:30:79:7c:8c:1e:d2:b6:e7:
a4:76:eb:60:2b:93:83:d8:4f:32:01:d5:50:c2:e4:
39:63:1a:d6:b7:72:6f:94:0c:6c:9a:fd:62:7c:5a:
78:3b:82:8b:37:15:c8:bc:2a:db:c8:ed:cb:75:a7:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A6:EC:B6:0B:D1:F2:DC:C8:69:6F:F3:1B:56:A3:79:A4:96:10:49
X509v3 Authority Key Identifier:
keyid:C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.234.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:47:cb:ac:2f:a7:ba:09:2b:40:63:bd:72:2e:da:9e:0a:02:
3c:75:0f:82:50:15:b7:bf:23:77:13:33:30:36:62:a2:a3:6b:
d0:b7:f1:1a:8a:b1:5a:77:c7:fb:a3:4b:6f:a3:fe:de:fa:3d:
80:18:6d:bb:cc:a9:6f:29:72:0d:45:29:b7:5a:f2:c2:2d:76:
41:8e:81:46:63:55:73:de:ca:58:df:b4:41:e0:2a:6a:10:44:
b4:84:ff:f6:bb:e2:5e:55:43:57:2e:81:2a:53:3d:93:c9:89:
b5:50:49:8b:31:2a:c5:9b:26:f1:ac:a9:8e:7f:9c:6d:86:be:
18:e5:08:ed:b0:37:2a:21:20:19:1f:2e:b8:2c:37:6d:81:29:
f7:0e:6e:bc:d6:1b:2c:f9:79:a6:6a:f3:7b:a2:df:bf:63:b3:
0d:3c:31:60:43:e9:91:ac:c4:70:72:ae:03:00:18:1f:05:94:
39:06:ec:6e:dc:69:c5:b5:c2:d1:ba:a7:85:4a:25:51:9e:ac:
fd:d7:27:d3:4f:af:91:9f:1b:9c:2e:3a:b2:b3:1f:dd:e1:09:
01:8e:db:24:b8:11:fe:02:59:63:ec:ed:ed:a4:f9:cb:ad:55:
eb:01:59:78:88:21:d2:33:36:ed:e6:b6:f1:f1:9d:5e:91:2e:
3e:9a:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:11 2026 by rpki-client