
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa
File: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (raw, json)
Hash identifier: wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=
Subject key identifier: E3:8C:B5:B8:67:6F:A0:1C:E7:03:70:6A:50:A2:7E:55:3C:49:27:93
Certificate issuer: /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D
Certificate serial: 6F2CB27C84D8A9AF49681856829E615B21F5DC3B
Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa
Signing time: Sun 03 May 2026 02:45:01 +0000
ROA not before: Sun 03 May 2026 02:40:01 +0000
ROA not after: Sun 02 May 2027 02:45:01 +0000
asID: 142360
IP address blocks: 103.170.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl
rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2c:b2:7c:84:d8:a9:af:49:68:18:56:82:9e:61:5b:21:f5:dc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D
Validity
Not Before: May 3 02:40:01 2026 GMT
Not After : May 2 02:45:01 2027 GMT
Subject: CN=E38CB5B8676FA01CE703706A50A27E553C492793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:e6:5b:fa:27:d4:13:2d:ae:98:dd:99:6f:
b5:1b:94:ab:c6:f3:01:ab:ef:68:e5:01:bb:7b:18:
07:81:f7:72:ae:cb:e6:bf:de:c7:30:5c:5e:e4:d0:
b7:ff:f0:89:fe:88:03:b4:85:84:6f:54:d4:0d:cf:
4e:36:d7:ce:b7:59:9c:05:a9:3a:4c:63:b1:30:5a:
9d:41:4b:3a:4a:b8:9f:38:c2:a9:98:b5:86:5b:e1:
13:56:84:e9:b0:97:7e:61:c7:f2:6e:a0:15:32:94:
3a:d7:6f:e3:09:ec:20:35:69:dd:a6:1c:6f:fd:55:
cb:ef:36:20:6f:91:2c:ab:d9:88:97:59:11:28:78:
fb:9e:2a:9d:e0:c5:1d:1e:30:39:dc:fe:51:6f:87:
31:b2:19:8f:ed:a8:ab:db:b3:89:12:be:a9:41:fc:
47:29:c0:82:22:4b:95:00:a2:b1:ab:e3:02:a3:6a:
17:74:7f:38:e8:c4:ed:d5:94:7d:d0:93:1c:6a:6d:
5c:1d:e0:0f:92:dc:93:7b:ac:70:63:5a:85:d3:f2:
fa:c1:1a:26:6f:56:fd:76:0e:60:07:34:49:5e:3c:
39:be:96:67:61:24:d3:f9:b6:8b:12:1d:84:1f:bd:
c6:b3:ca:36:c8:36:56:db:ef:ad:1c:2f:2b:d7:90:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8C:B5:B8:67:6F:A0:1C:E7:03:70:6A:50:A2:7E:55:3C:49:27:93
X509v3 Authority Key Identifier:
keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.24.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:ff:e4:5f:03:9b:7b:25:a3:c5:0b:8f:14:93:77:81:7a:0e:
dd:9d:df:fd:8e:1f:7c:0a:70:eb:25:f9:18:3e:25:ab:56:5c:
c0:50:63:79:42:8d:2a:d6:d0:32:a7:43:53:8c:96:a9:d5:86:
92:c3:c9:96:d4:58:de:a1:f5:1e:30:4e:1c:78:f3:2a:c8:8a:
57:2b:7c:fe:af:24:6a:2d:7e:ef:ba:a5:43:4d:95:9f:0c:f7:
8f:ba:3b:24:0f:a0:3d:ac:72:a9:63:07:31:9e:85:de:d3:3f:
24:5a:3a:ef:6c:a2:28:a7:00:43:89:be:65:9e:8c:8f:c6:ca:
dd:d1:ab:95:80:81:bc:2e:e5:68:c7:3b:34:b1:64:8b:e1:06:
66:50:13:25:4a:68:29:5a:86:1b:79:a8:a7:9c:4d:9c:1b:7c:
25:74:d4:d7:de:0a:97:50:f3:72:0a:35:b2:8c:f7:72:ef:eb:
83:ab:b7:b9:f3:16:b2:42:96:bf:84:68:e3:cb:d2:cb:1b:cc:
60:4a:54:db:46:ef:31:35:0c:6e:ab:86:cf:c7:12:d7:4a:c7:
65:fe:c6:5e:16:26:c9:44:39:af:1f:54:b0:ce:8b:44:8d:cf:
99:99:4d:da:07:f6:25:e5:d6:4b:96:ef:2d:ec:f0:ed:25:90:
81:30:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:33 2026 by rpki-client