
$ rpki-client -vvf rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa
File: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (raw, json)
Hash identifier: Hn5EuMtGipfFtFBXzkyifRq2Ky/xfbDimmF9AiNLLbY=
Subject key identifier: 84:EC:D1:96:62:DF:6C:F7:B0:AB:5C:0A:C6:0E:8C:52:8F:11:0B:38
Certificate issuer: /CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506
Certificate serial: 4E4EE2E7E18D823BB9560D3FFE8D20CF2F969FF8
Authority key identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa
Signing time: Sun 03 May 2026 02:48:08 +0000
ROA not before: Sun 03 May 2026 02:43:08 +0000
ROA not after: Sun 02 May 2027 02:48:08 +0000
asID: 64027
IP address blocks: 103.214.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl
rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:4e:e2:e7:e1:8d:82:3b:b9:56:0d:3f:fe:8d:20:cf:2f:96:9f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506
Validity
Not Before: May 3 02:43:08 2026 GMT
Not After : May 2 02:48:08 2027 GMT
Subject: CN=84ECD19662DF6CF7B0AB5C0AC60E8C528F110B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:6a:ac:ff:39:20:e5:6a:0f:b7:fa:5f:01:
22:6d:c6:27:e2:ce:77:22:66:e8:92:65:44:b8:83:
da:e9:05:48:24:f8:0e:5f:c8:fd:a4:20:20:1c:43:
93:52:aa:90:89:2d:05:df:11:d9:68:8f:23:d3:09:
ac:a5:de:7b:9a:ac:17:5d:04:c4:be:f4:22:eb:66:
8f:ef:54:4b:5f:8a:2a:ca:35:13:0f:0f:6f:7d:48:
68:c0:d5:ae:5e:f0:e8:b8:80:7b:d8:f8:0a:ff:33:
65:7c:62:0c:5f:ce:39:8e:48:ab:5f:98:cd:8b:50:
3c:4d:d4:c3:48:1e:4c:df:29:d7:60:78:18:2f:63:
4b:0b:d8:11:7a:96:50:b2:fa:e2:9d:54:c6:a0:fa:
32:12:57:e5:66:e9:34:c0:05:60:4a:6e:bf:39:b4:
38:8b:d8:f0:dd:5e:f9:3b:79:31:f4:c3:b2:ef:72:
fc:d0:1d:c0:8a:52:c2:c7:32:28:c3:6f:94:48:0e:
49:39:ce:88:32:4f:66:ec:ca:a0:fe:25:33:91:95:
e3:0e:49:62:c8:47:f4:90:b6:8e:c9:bd:23:a9:82:
33:0d:c0:62:78:35:b2:da:6c:47:cb:e1:be:30:31:
96:1a:33:ce:e3:fb:c5:76:d7:b6:55:df:05:f6:9a:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EC:D1:96:62:DF:6C:F7:B0:AB:5C:0A:C6:0E:8C:52:8F:11:0B:38
X509v3 Authority Key Identifier:
keyid:7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.102.0/24
Signature Algorithm: sha256WithRSAEncryption
10:50:4c:1d:1c:df:5a:da:36:ec:5d:1e:00:97:ed:30:a4:43:
cc:b2:5b:c4:be:91:f2:a0:2a:8c:bf:c5:43:a7:b2:3d:3b:cb:
e4:bd:88:d8:a4:6a:e9:20:ff:1d:0b:be:08:9c:67:24:6e:05:
5c:f6:c4:4c:b3:ae:f1:af:14:6d:ea:c5:c2:77:ae:48:f5:22:
ae:1f:32:4b:6d:50:5b:e9:9b:d5:90:f7:08:06:2f:fe:90:1f:
ea:b5:5d:31:37:71:a9:48:7a:de:5b:e9:6d:23:64:fb:6d:b1:
93:e5:17:1c:71:94:69:12:a7:7f:79:db:a9:31:1f:e9:f6:d9:
61:c3:e8:4c:db:be:4c:e2:d0:8f:84:eb:a5:50:09:60:35:3b:
a4:ac:4b:68:04:32:14:f5:83:91:40:5c:ae:da:29:02:ae:0d:
63:66:16:1d:9a:c3:f9:55:39:99:fb:dd:63:3a:9a:52:0d:b2:
e3:5c:4a:bb:d7:7f:b2:8b:c1:06:9d:4e:c8:c7:5c:83:46:7a:
7f:5a:be:7c:d8:ad:e1:83:a8:fb:d4:e3:a8:06:28:7e:d6:41:
62:57:90:40:3e:dc:9d:28:e0:39:14:59:53:7e:b0:7f:dc:52:
49:18:af:04:72:cf:12:58:2d:52:53:6c:1b:fc:1e:1f:13:c2:
42:4c:37:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:47 2026 by rpki-client