
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39302e302f32332d3234203d3e20313530323232.roa
File: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (raw, json)
Hash identifier: 5G6XAET+caX5D5iq/eeLuuKJnzS42MWuIS/Pcw9kNp0=
Subject key identifier: 3E:7F:4D:48:41:FF:10:8F:07:70:4B:CC:08:2A:A6:D3:24:4B:F9:DC
Certificate issuer: /CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C
Certificate serial: 3C68142191691822FFBCAAB809342FBE51D2F81D
Authority key identifier: BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39302e302f32332d3234203d3e20313530323232.roa
Signing time: Sun 03 May 2026 02:46:13 +0000
ROA not before: Sun 03 May 2026 02:41:13 +0000
ROA not after: Sun 02 May 2027 02:46:13 +0000
asID: 150222
IP address blocks: 103.88.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl
rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:68:14:21:91:69:18:22:ff:bc:aa:b8:09:34:2f:be:51:d2:f8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C
Validity
Not Before: May 3 02:41:13 2026 GMT
Not After : May 2 02:46:13 2027 GMT
Subject: CN=3E7F4D4841FF108F07704BCC082AA6D3244BF9DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:7f:2b:8c:fa:22:83:7e:45:ab:62:c3:d4:
c4:2a:62:72:a2:8f:63:05:f3:3a:07:a1:e5:fb:9f:
95:0b:50:76:3f:5a:bd:d8:30:98:e7:31:00:3d:c2:
f9:2b:6a:12:6c:28:9c:d1:a5:36:e8:e9:55:72:ff:
bc:a5:db:63:fb:19:bd:88:14:00:3e:7f:75:7b:ff:
dc:1c:a1:28:9d:25:f1:31:1a:7a:37:cd:d0:77:59:
d6:18:6f:69:85:8c:71:33:77:29:e1:d8:03:fa:4f:
27:c1:14:f8:c0:66:64:1e:93:31:d5:85:f4:1a:6b:
a1:66:1a:f4:d3:7d:57:7d:35:47:8f:ac:ab:24:4d:
5f:93:60:02:4d:9b:fc:9e:22:e9:30:33:ab:b2:b5:
a5:fd:2f:09:32:e7:6a:14:65:a1:c2:a5:9f:11:ae:
b7:b7:0c:39:a7:8a:d8:d1:2d:f2:ff:6e:52:87:bc:
21:5b:4a:2a:7a:3e:cf:34:fb:c3:94:80:58:e8:93:
3f:c2:31:62:4f:6e:b6:e9:fc:82:67:49:e0:9e:17:
00:d7:88:bb:da:75:6a:ce:b5:55:ac:bf:23:00:cb:
bf:be:8b:9c:38:18:3c:a0:9b:33:ce:e5:18:d4:8f:
ac:ea:a1:59:7d:ab:29:11:0c:04:e7:06:6e:cd:ea:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7F:4D:48:41:FF:10:8F:07:70:4B:CC:08:2A:A6:D3:24:4B:F9:DC
X509v3 Authority Key Identifier:
keyid:BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39302e302f32332d3234203d3e20313530323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.88.90.0/23
Signature Algorithm: sha256WithRSAEncryption
25:0b:03:3d:ad:fa:bd:d2:f7:ee:df:6e:de:8c:ba:3b:8b:10:
d7:1d:17:88:7f:c0:1a:4e:78:ef:d9:05:47:1a:8f:cf:3c:a1:
04:3b:63:c4:f9:cc:20:7d:5c:1f:5f:dc:29:ea:f3:0d:37:37:
0b:44:eb:b4:54:7c:53:d6:e0:98:89:10:60:a3:70:cc:0b:21:
69:9b:93:13:be:c4:2e:1c:bc:8f:fe:37:23:ab:2f:6a:8e:39:
fa:1a:fc:d1:0d:ff:33:2f:6d:80:70:37:c4:b4:fc:14:29:70:
19:16:3f:15:90:8c:4e:1d:26:46:4d:8d:c4:fc:a4:40:9e:e9:
05:8d:8c:f6:16:40:6b:54:ef:87:88:b8:f1:d4:b4:2f:c4:85:
3b:d5:15:41:c1:08:f8:fb:28:ce:1a:c0:aa:01:93:8e:08:5e:
04:b7:41:6a:8f:95:7b:6b:ed:92:00:58:56:27:8d:4d:8b:e4:
00:2b:57:a6:f5:e4:55:83:3d:1e:18:92:e1:98:96:f6:eb:31:
14:fa:71:ae:87:41:bf:9e:dc:4e:1b:06:1c:e7:43:c1:ff:04:
0c:27:90:f9:50:26:dd:eb:61:eb:45:38:40:19:5f:7e:a3:20:
8c:b8:fc:69:8f:65:5d:90:f5:11:83:dc:40:d2:b8:7e:6c:22:
9d:d3:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:06 2026 by rpki-client