
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa
File: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier: bR+rHQrh2BbDBIEXZD76jtCgM3z29GB3K8OSA3PHxZ8=
Subject key identifier: 97:06:DE:90:5D:56:D1:DD:50:E8:7D:98:A4:EF:E1:8D:9A:6E:CF:58
Certificate issuer: /CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524
Certificate serial: 2600F22FC86E9494D711A62A284DC0F177F37ED2
Authority key identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa
Signing time: Sun 03 May 2026 02:44:59 +0000
ROA not before: Sun 03 May 2026 02:39:59 +0000
ROA not after: Sun 02 May 2027 02:44:59 +0000
asID: 140389
IP address blocks: 103.150.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl
rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:00:f2:2f:c8:6e:94:94:d7:11:a6:2a:28:4d:c0:f1:77:f3:7e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524
Validity
Not Before: May 3 02:39:59 2026 GMT
Not After : May 2 02:44:59 2027 GMT
Subject: CN=9706DE905D56D1DD50E87D98A4EFE18D9A6ECF58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:a2:09:7e:d9:48:56:24:19:c3:4e:6e:e4:
28:fc:0f:c0:c9:b8:30:f7:12:6e:25:ac:ce:32:65:
48:29:25:cb:26:bc:7b:22:31:75:be:29:94:45:d3:
5d:d6:7e:32:76:87:4a:64:46:13:e4:41:c5:1f:4c:
2c:85:42:d8:19:b2:9d:ee:d2:48:1e:9e:aa:d4:06:
b1:12:c6:77:a0:ad:51:bc:27:0e:ab:d6:2f:d0:e2:
af:a6:04:5a:c5:ea:ac:47:a1:b3:43:05:16:b1:85:
b7:dd:ed:45:75:dd:93:22:13:77:48:8f:9d:9d:b4:
f7:27:7a:06:a2:82:fb:9b:ac:17:87:09:9e:34:e4:
81:9c:c4:25:20:3d:ad:8e:87:81:5c:91:34:d1:64:
16:f1:d1:8c:8c:e1:0d:8c:5e:a6:d1:b4:98:2c:70:
30:d0:10:19:59:c4:a7:d2:d9:9f:15:ce:f2:bb:55:
28:19:b1:ae:71:7b:79:1f:c7:84:21:31:9d:46:18:
32:88:17:03:ef:14:28:09:9d:40:4a:ba:ba:2d:af:
e8:41:0f:ca:1c:3b:83:ad:88:ca:37:af:9d:96:07:
f1:fa:a9:6d:ce:3a:9f:d5:e3:55:00:16:26:46:0d:
41:47:44:0e:ef:ad:52:7d:21:b6:f4:a5:4b:80:97:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:06:DE:90:5D:56:D1:DD:50:E8:7D:98:A4:EF:E1:8D:9A:6E:CF:58
X509v3 Authority Key Identifier:
keyid:D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.60.0/24
Signature Algorithm: sha256WithRSAEncryption
43:95:f2:90:06:72:3f:83:42:66:93:09:77:38:b2:bd:85:1c:
8d:dd:78:24:be:d3:dd:7c:4a:ea:da:fd:2b:30:fa:de:9e:4e:
8d:07:f1:f7:ae:9a:e3:60:d8:1a:85:fa:13:00:85:36:8c:ad:
84:c4:d1:23:3b:bc:ea:fb:30:bc:34:e3:5c:b6:8c:9c:80:12:
ab:d7:33:90:4c:20:75:07:f9:07:bc:8b:ae:79:69:f7:97:6e:
15:a2:92:2a:de:cf:5a:de:d7:f8:6f:3c:fe:98:ba:de:5a:f0:
d1:ad:de:63:d5:2b:5b:82:51:04:ab:7a:b1:a8:70:97:e3:98:
9e:b8:5a:45:fc:ad:c7:01:b8:03:d0:35:3c:de:6e:ed:ab:d7:
8e:89:d5:a5:b8:cc:5a:27:f4:a8:6b:0e:85:24:4a:89:9f:9b:
31:c4:cd:5f:83:b3:03:63:e8:6c:44:0d:ab:bb:45:8d:87:21:
49:8d:e3:c5:26:9e:5d:b4:a1:73:43:f1:66:e2:33:f0:9a:44:
31:a4:f2:bc:94:29:29:df:72:d9:ea:3e:d7:44:cb:ff:18:eb:
24:7c:88:32:9f:d8:1a:03:8d:4a:84:f0:fc:f0:d8:db:0c:46:
96:08:69:f1:19:7f:71:00:86:9a:15:32:fe:9a:fc:1e:67:db:
0e:ee:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:18 2026 by rpki-client