
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa
File: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (raw, json)
Hash identifier: u58hGkofFGWAycHfS2yt+5KkCwu1d003TmCn4MuzF24=
Subject key identifier: 8C:B1:19:0F:D3:38:CC:03:5D:C8:A7:87:9C:A4:C1:47:B2:21:FB:9A
Certificate issuer: /CN=00BA333E1070BAC4039454B475BAA9D7802B83D6
Certificate serial: 5FD9349A782A303DA54ACFBAF896FD6D8E682099
Authority key identifier: 00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa
Signing time: Sun 03 May 2026 02:46:51 +0000
ROA not before: Sun 03 May 2026 02:41:51 +0000
ROA not after: Sun 02 May 2027 02:46:51 +0000
asID: 151542
IP address blocks: 103.244.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl
rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:d9:34:9a:78:2a:30:3d:a5:4a:cf:ba:f8:96:fd:6d:8e:68:20:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00BA333E1070BAC4039454B475BAA9D7802B83D6
Validity
Not Before: May 3 02:41:51 2026 GMT
Not After : May 2 02:46:51 2027 GMT
Subject: CN=8CB1190FD338CC035DC8A7879CA4C147B221FB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:8d:d7:6b:3e:69:b6:63:cf:2e:c0:e7:c9:
e0:7c:28:fd:f4:46:1d:52:f0:7d:a6:ac:6c:f6:9b:
fb:f9:9e:52:c1:9d:cf:0a:b2:e8:50:03:f2:28:5b:
2c:71:99:51:27:fd:a5:47:0e:d2:f4:48:b1:75:87:
0d:70:2e:2b:81:40:d5:03:d7:5b:34:ea:15:41:c5:
b4:8b:cc:04:8c:0c:4e:ec:c5:19:43:c6:42:c4:b7:
ea:f7:75:f9:0a:6b:3e:89:d5:11:43:0f:92:9d:a8:
e7:f9:74:b2:cc:50:b1:6d:56:1b:f5:5d:45:5a:19:
9a:9a:d7:54:c2:85:61:ab:ed:18:77:c2:d1:eb:14:
92:c2:ae:08:a8:02:80:be:b9:74:68:ce:32:36:5c:
81:a2:26:c6:01:af:21:1a:b0:9d:0d:04:5f:bb:b3:
7b:4e:c5:0a:58:2e:d6:de:ff:e2:fb:7c:9b:84:86:
b2:36:7b:fe:9e:6d:26:3a:0a:f1:79:5a:f4:e1:47:
bc:ef:9c:be:1d:79:fb:85:b1:4e:a4:e3:aa:4c:da:
a5:a0:09:9a:33:ff:fd:ef:37:48:e0:2d:ac:40:1e:
17:e6:83:89:ea:c1:ad:47:fc:b0:10:d5:c5:cc:7c:
b4:de:12:54:88:cd:b9:a9:da:15:ca:e0:65:03:8f:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B1:19:0F:D3:38:CC:03:5D:C8:A7:87:9C:A4:C1:47:B2:21:FB:9A
X509v3 Authority Key Identifier:
keyid:00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.106.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0e:72:04:5a:3b:f4:b2:e8:d4:39:da:4f:1f:d9:7c:72:f9:
11:cf:0b:eb:c0:c9:cd:90:a5:71:57:9c:fa:70:fd:07:9b:a5:
61:01:4e:46:99:96:05:60:67:7a:ca:64:87:07:be:88:96:e2:
fe:17:a3:ae:5c:a0:d9:d0:6c:d6:d5:66:b7:14:c0:4e:cd:df:
23:4c:02:85:98:e5:de:16:a9:fc:e1:42:91:af:75:6a:84:f7:
5d:ce:9e:ea:df:0b:0d:63:a2:f2:8b:d1:73:44:56:0e:e7:f4:
26:e0:52:e5:5c:16:5f:98:0a:46:97:38:2b:f4:49:79:53:08:
c2:eb:64:6a:61:c9:bf:a0:a0:4f:de:d1:14:fa:15:0f:6f:91:
8a:2f:76:0a:1f:3c:80:64:a2:53:3e:1e:31:82:35:aa:b9:b4:
0c:28:a2:86:4e:30:ff:46:87:5a:50:b0:67:37:37:4b:f8:ea:
9f:cd:6f:93:81:13:8c:30:ee:f7:96:cb:a0:79:8f:a9:15:a3:
52:48:6f:5a:07:44:98:dd:e1:11:e1:d5:18:9f:ca:62:d9:2c:
af:45:35:8e:f3:98:a9:7a:4b:68:5c:82:42:60:4b:67:92:4c:
39:8f:c9:23:7e:b7:7f:56:66:c0:e8:d1:04:18:aa:e0:b4:47:
a0:42:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:26 2026 by rpki-client