
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa
File: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (raw, json)
Hash identifier: cU8IKTQYAlAkRanMKTbONUbw8P9tsvK8RuAPiO2VrzE=
Subject key identifier: C0:08:F7:68:72:DB:3B:9B:61:C9:29:67:3E:42:56:5E:3E:8C:1F:5C
Certificate issuer: /CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF
Certificate serial: 7D3874BAB49B8F2D1A5101D229BE17E8CD931D9C
Authority key identifier: 12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa
Signing time: Sun 03 May 2026 02:47:07 +0000
ROA not before: Sun 03 May 2026 02:42:07 +0000
ROA not after: Sun 02 May 2027 02:47:07 +0000
asID: 138077
IP address blocks: 103.242.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl
rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:38:74:ba:b4:9b:8f:2d:1a:51:01:d2:29:be:17:e8:cd:93:1d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF
Validity
Not Before: May 3 02:42:07 2026 GMT
Not After : May 2 02:47:07 2027 GMT
Subject: CN=C008F76872DB3B9B61C929673E42565E3E8C1F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:7a:1f:c0:9c:c8:05:0c:fa:0d:6a:ec:b2:
8c:2c:64:6d:d7:cc:d1:03:3a:b4:f1:90:06:e9:50:
34:a0:98:fb:b6:80:8e:5d:d4:ae:24:5a:09:be:df:
6c:ba:69:40:b7:85:f9:2b:89:5b:da:a6:ef:38:08:
02:6b:6e:23:b4:17:ee:cf:70:c0:43:50:ea:3c:4e:
4a:e4:cd:95:e5:a4:e9:5d:ce:80:c5:58:16:49:da:
e1:39:5b:b0:6c:c8:e1:53:c7:04:aa:91:20:14:5f:
e8:3e:d3:2b:2a:0a:b1:f1:30:bc:1b:90:0d:36:2c:
bd:17:51:a0:20:54:63:cc:38:5c:8b:ef:de:19:ef:
9f:9d:12:a1:38:e8:96:4b:b1:1e:49:41:83:11:79:
0e:53:c3:a1:3c:57:f8:38:31:40:52:a7:e2:3c:4e:
22:c8:6a:4a:1f:47:c9:ed:16:ec:80:ef:be:9e:f4:
c0:24:99:3e:71:89:f8:22:82:aa:1d:62:27:44:ac:
37:ca:fe:a5:9f:4b:5a:6f:31:fa:b5:99:40:ef:ca:
12:3b:82:22:d2:d1:29:09:a1:da:bb:4c:7d:4b:4d:
fe:7e:df:8f:38:aa:d7:40:10:86:7b:0b:12:99:66:
5d:da:98:86:3f:6b:01:46:2f:96:87:df:bd:87:e8:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:08:F7:68:72:DB:3B:9B:61:C9:29:67:3E:42:56:5E:3E:8C:1F:5C
X509v3 Authority Key Identifier:
keyid:12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.242.76.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5a:58:f5:47:b2:25:c7:9a:04:c4:73:f6:87:64:06:fa:3c:
ed:e2:20:d6:aa:07:7e:d5:02:bc:aa:53:03:71:35:94:46:7d:
d3:7d:5b:fa:28:ee:b0:9b:73:2e:0e:3e:20:58:29:83:18:e5:
4e:bb:e9:0f:46:38:35:21:22:2b:97:28:1a:37:85:fb:ea:35:
eb:81:5f:41:75:04:7e:3a:f0:08:e7:fb:c9:19:21:54:da:cd:
bf:32:db:c4:99:71:a7:3b:6d:05:6f:1b:ed:75:fc:c2:50:3f:
1b:21:3d:83:f0:82:b2:23:b2:b7:50:8c:6f:69:e2:94:ec:46:
77:9f:3b:6f:10:72:47:8f:31:25:a2:1d:b5:82:a7:5f:a2:d1:
0e:ba:26:88:c5:a6:de:f5:8e:01:26:0a:f6:bf:71:a9:e7:f0:
69:e7:6c:34:40:d7:66:dc:37:16:4b:91:8f:71:18:55:95:93:
1b:e4:bf:e4:e6:dc:e1:2d:8a:67:12:7a:9b:c2:b1:3f:36:9c:
eb:09:1f:91:59:52:06:af:58:5c:6e:8e:20:d6:6c:ad:f0:e3:
d1:c7:2b:ac:7e:27:39:d1:09:8b:2b:5f:32:5d:a0:6a:95:5a:
fb:09:0b:07:f5:eb:ac:12:d0:fd:3d:4d:01:b9:c7:89:e5:83:
2c:f3:15:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:36 2026 by rpki-client