
$ rpki-client -vvf rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/3130332e36392e36302e302f32342d3234203d3e20313530353239.roa
File: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (raw, json)
Hash identifier: JiRJdm1oFhxxxMsJqGXfYKhPIquMJhUAFsZ9oA78Y3M=
Subject key identifier: A8:A2:F5:80:44:36:36:D0:43:27:8B:85:0B:73:EA:26:11:99:AA:75
Certificate issuer: /CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07
Certificate serial: 2F8A07B4A685230F3301319775FE34835C28BB9C
Authority key identifier: 60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/3130332e36392e36302e302f32342d3234203d3e20313530353239.roa
Signing time: Sun 03 May 2026 02:47:44 +0000
ROA not before: Sun 03 May 2026 02:42:44 +0000
ROA not after: Sun 02 May 2027 02:47:44 +0000
asID: 150529
IP address blocks: 103.69.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl
rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:8a:07:b4:a6:85:23:0f:33:01:31:97:75:fe:34:83:5c:28:bb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07
Validity
Not Before: May 3 02:42:44 2026 GMT
Not After : May 2 02:47:44 2027 GMT
Subject: CN=A8A2F580443636D043278B850B73EA261199AA75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:31:d5:26:d0:12:63:43:c7:42:22:7e:44:
90:db:97:c9:21:9f:be:4a:79:ca:a5:0c:40:7b:2f:
9e:2e:e5:38:62:e7:45:8e:5a:e5:7a:47:0e:b9:c5:
a6:3e:2d:dc:7b:ec:c6:5f:85:2b:50:87:b2:4b:6b:
48:b3:de:dc:03:d6:2e:98:d5:cd:58:25:62:d6:5f:
94:05:38:d7:a5:d3:40:1b:56:89:d1:55:e4:05:58:
d3:76:aa:4a:18:2b:44:9d:b9:2a:ec:05:7f:d7:d5:
bf:2d:cc:73:4c:7a:af:79:43:ab:eb:31:18:3f:d7:
07:60:bd:13:aa:b5:c8:3c:0b:32:fd:69:b6:0c:f8:
a8:a7:94:06:63:c0:67:99:5e:ae:30:ed:b4:15:e9:
10:61:4b:71:f3:dc:75:c7:62:3e:fc:29:9c:17:51:
e3:0c:19:35:53:da:f3:ec:37:df:0e:d9:08:58:0a:
14:3a:71:da:09:59:ae:b9:2a:2e:7f:20:0c:d8:bd:
b1:b7:28:10:c5:8e:10:62:f8:34:04:de:df:67:05:
cc:f5:77:11:8f:2f:f2:8c:c6:ba:b1:94:52:d2:7d:
57:86:11:56:a9:52:45:4a:ed:97:39:05:aa:17:ff:
3b:b2:18:db:d8:95:27:be:a4:48:c8:00:6c:94:fc:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:F5:80:44:36:36:D0:43:27:8B:85:0B:73:EA:26:11:99:AA:75
X509v3 Authority Key Identifier:
keyid:60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/3130332e36392e36302e302f32342d3234203d3e20313530353239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e8:4f:3e:72:17:8b:ef:6d:6b:23:14:de:e3:f2:65:e7:1a:
df:3b:8f:c7:6e:d5:aa:f6:51:94:25:56:5f:01:72:2b:a9:67:
ed:21:53:a7:ab:86:86:28:af:c0:59:a4:44:a0:03:af:ab:31:
45:01:7d:59:f6:a0:4c:13:42:9e:32:d3:52:d5:1d:2d:ea:64:
6f:22:d0:c4:a4:af:e7:38:ad:3a:bd:8a:69:1c:c4:98:c8:f5:
22:9c:f0:a7:47:51:47:f6:52:13:b4:60:e1:0e:5f:d0:6d:10:
63:ce:ff:36:3b:77:2c:0b:1f:c8:16:b8:fc:fe:fd:1d:be:e2:
dd:af:16:a0:40:e9:db:df:35:48:14:d5:cb:df:e0:49:5c:ca:
56:63:5f:9b:b8:b9:87:ef:2e:d4:25:b0:f0:00:48:64:96:62:
85:8e:d0:4f:44:5c:8a:5b:cc:44:ba:5e:e4:09:0c:ce:8a:0e:
5a:07:a3:4b:44:b7:18:53:79:a1:ad:46:cc:b3:73:30:7c:69:
7d:3d:2e:fe:13:ac:ce:8d:4e:f4:5f:6c:8a:06:1f:1c:26:e2:
66:34:e5:be:e1:be:3b:6b:15:67:71:29:d0:93:2f:85:43:74:
ff:f0:e7:22:ee:a0:7d:aa:de:35:c1:9b:db:58:0a:4b:2e:f3:
29:fe:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:47 2026 by rpki-client