
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa
File: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (raw, json)
Hash identifier: IhRU7xqMF7ymzp1jTbklUO54eBcVkN56coUh2E855Uc=
Subject key identifier: FA:4B:2E:18:70:A0:90:94:BB:80:64:66:79:6F:68:6F:C0:EA:B4:CC
Certificate issuer: /CN=00BA333E1070BAC4039454B475BAA9D7802B83D6
Certificate serial: 6CBE5629751918218581A79EAC340D2635845EA6
Authority key identifier: 00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa
Signing time: Sun 03 May 2026 02:46:51 +0000
ROA not before: Sun 03 May 2026 02:41:51 +0000
ROA not after: Sun 02 May 2027 02:46:51 +0000
asID: 151542
IP address blocks: 103.244.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl
rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:be:56:29:75:19:18:21:85:81:a7:9e:ac:34:0d:26:35:84:5e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00BA333E1070BAC4039454B475BAA9D7802B83D6
Validity
Not Before: May 3 02:41:51 2026 GMT
Not After : May 2 02:46:51 2027 GMT
Subject: CN=FA4B2E1870A09094BB806466796F686FC0EAB4CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:b0:22:bd:c4:5e:e6:6a:ad:50:dc:9e:20:
65:70:bb:83:95:bf:e2:d2:7f:20:9f:c2:30:fa:b3:
d1:03:15:f0:61:ec:a1:a3:bb:e0:dd:c3:dc:4a:7b:
56:ca:5d:1a:82:f3:8f:3c:2c:bf:52:98:e6:dd:e0:
7c:34:f9:f0:e1:4c:bd:12:e0:99:7a:6c:a9:82:8b:
cd:aa:92:b6:44:cd:a8:b3:4a:43:1f:6a:4f:05:9d:
dc:22:88:80:3b:d5:81:fb:c0:01:f5:c7:40:43:9a:
31:be:c0:1c:7d:6d:a5:8c:77:c8:6c:c8:bf:54:d1:
74:45:9c:7e:76:08:74:5c:94:7c:15:f5:98:e7:35:
d1:cf:0f:fb:2b:9d:22:1e:e3:e6:84:66:1d:aa:70:
38:65:e7:b1:e4:95:65:f9:d3:f9:96:aa:a3:5a:2c:
d4:95:00:21:b0:ec:8a:d7:5e:cd:30:07:e7:1d:f6:
15:d1:b6:90:bf:94:4f:ca:3a:b1:6e:dc:60:d1:e3:
e0:3e:7c:16:1a:55:13:3d:cc:99:08:65:fe:8e:ea:
6a:60:99:ae:eb:30:53:1a:93:59:0d:c9:cf:76:a7:
fb:1d:6b:69:d9:41:fd:78:8b:c6:e2:d3:f6:4a:ba:
14:5f:0d:7f:df:58:2a:64:ca:5b:0c:e8:a5:51:24:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4B:2E:18:70:A0:90:94:BB:80:64:66:79:6F:68:6F:C0:EA:B4:CC
X509v3 Authority Key Identifier:
keyid:00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.107.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2f:69:72:1e:60:f5:ac:c6:b9:02:6b:45:28:14:14:bf:90:
00:2d:d6:c3:b4:00:53:62:db:ac:2b:6d:aa:13:e6:e5:f9:1d:
29:07:58:5c:e1:7c:85:24:fc:68:1d:87:35:ba:7c:07:d9:ba:
d5:36:4f:10:54:79:38:db:8f:33:d7:2f:4a:6e:19:bf:e6:c3:
f2:e0:4a:8d:34:eb:fa:ba:39:ab:c5:10:44:cf:1c:6c:3e:47:
ac:33:d9:30:8d:44:1b:e0:9f:89:0d:e6:ff:ab:6a:e8:c9:aa:
74:e4:77:84:ac:f8:a6:4e:5b:f8:c5:2f:76:2e:99:5e:21:08:
7b:96:4f:c7:57:7e:d5:74:fa:f2:6e:f4:b3:4e:4c:97:40:80:
17:e4:27:35:72:5d:90:d3:06:9b:b0:7e:49:55:15:c4:a5:05:
e0:c1:e0:10:f9:4d:5e:df:2e:ee:ae:a4:36:47:d7:58:4f:06:
33:da:3c:ed:d7:69:1e:9c:cc:5a:58:b8:18:a2:bb:c7:87:e2:
ec:c3:80:e0:e2:80:5f:ca:c1:a4:32:7e:44:0c:c2:6a:00:fa:
ac:f7:0b:3b:6b:5e:fa:05:f2:8d:34:ad:8a:e9:fe:de:11:d2:
82:e1:5c:9f:78:d4:dc:28:02:6c:ef:6e:76:89:63:8c:4c:41:
72:60:93:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:25 2026 by rpki-client