
$ rpki-client -vvf rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa
File: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: a/D2rVaWkVN5pmkQwkGcUtFXfVxfJlNH614eeRJToo8=
Subject key identifier: 56:B2:A6:A8:D8:7D:5B:4F:89:59:45:80:C9:00:6E:A9:6F:06:A2:50
Certificate issuer: /CN=7C6942D9E39D2E0708854282CB6A37230729EB7C
Certificate serial: 0B3D2E78E2DC5B208CF35F81FD7A5781FB94C00D
Authority key identifier: 7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:48:23 +0000
ROA not before: Sun 03 May 2026 02:43:23 +0000
ROA not after: Sun 02 May 2027 02:48:23 +0000
asID: 58369
IP address blocks: 103.188.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl
rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3d:2e:78:e2:dc:5b:20:8c:f3:5f:81:fd:7a:57:81:fb:94:c0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C6942D9E39D2E0708854282CB6A37230729EB7C
Validity
Not Before: May 3 02:43:23 2026 GMT
Not After : May 2 02:48:23 2027 GMT
Subject: CN=56B2A6A8D87D5B4F89594580C9006EA96F06A250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:28:f1:76:2d:6f:16:c5:48:1c:be:e0:c6:
bf:00:4b:15:a2:d9:06:64:45:9d:0c:55:95:27:b3:
b3:ba:9b:23:5b:29:d7:6f:d8:49:88:d2:74:19:d6:
fd:4b:83:43:4b:48:f9:bb:1d:13:a7:3d:e6:3b:0d:
21:49:69:e2:55:af:5b:6e:aa:93:7d:a9:2f:a5:56:
84:90:f1:dd:32:5b:0d:07:17:ca:d7:d5:e9:2b:3f:
7a:60:75:6c:b2:b2:30:92:73:1f:b4:ef:b6:38:6c:
2a:07:1b:1b:b2:45:08:28:c6:a8:2f:a1:5f:1c:10:
aa:a8:3a:3b:d9:4a:e8:5a:37:8a:48:26:ae:ae:d8:
7e:a1:8b:4a:c1:6f:cf:aa:de:14:53:b6:e6:81:ee:
4d:70:4e:3b:36:74:13:01:9d:a9:f8:8e:84:9a:cd:
f4:62:51:a3:74:7f:a1:56:ae:3f:21:17:47:e1:58:
d0:aa:ad:1b:dc:c7:b8:af:59:30:94:2b:0c:28:02:
0f:21:a4:45:09:65:57:0a:6c:2b:e2:35:e0:0f:12:
27:d9:c4:c4:ab:0f:0d:51:9e:a1:96:67:92:9a:4f:
f0:de:08:0f:a3:29:e2:a4:da:bb:83:bb:51:f0:5a:
4f:1a:20:d3:5e:bd:61:cb:68:4b:46:c7:c3:13:b2:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B2:A6:A8:D8:7D:5B:4F:89:59:45:80:C9:00:6E:A9:6F:06:A2:50
X509v3 Authority Key Identifier:
keyid:7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:a9:ce:a3:36:d5:a9:3f:7f:37:d4:9d:5e:7f:ef:e2:e8:83:
1a:b9:a3:05:cc:0a:d1:48:21:43:ed:c6:b8:98:04:27:a8:71:
90:58:e1:41:d5:df:64:36:b3:f1:01:32:94:a8:06:15:3a:d7:
79:03:75:31:d2:64:2c:a6:da:e7:bb:5f:89:f8:23:0e:55:ae:
a2:10:4d:76:1e:bc:ee:cc:79:d0:e8:12:a2:ab:a6:90:76:d5:
7f:00:d4:a5:ee:38:ff:94:85:21:aa:ba:25:2a:0d:85:ae:f4:
7d:97:ae:76:62:da:21:70:14:35:d3:ec:ed:fa:4c:d9:78:1b:
8f:f7:4a:b6:da:00:5d:d9:ac:0c:1d:50:08:7f:5d:14:cb:12:
50:e0:4a:5b:7b:6e:a9:33:bf:10:1a:b0:a3:9c:48:4a:8b:85:
ef:c9:52:ad:4b:d5:94:1a:17:6d:61:f3:b9:2f:7f:f0:f7:09:
4c:1d:7a:e1:61:b7:0b:6c:b0:f6:8e:66:9e:fd:eb:8a:5c:8a:
00:b0:c3:5f:af:fa:97:36:0b:c7:5b:fd:a1:a7:00:b7:d0:66:
a0:6b:13:e6:6b:2d:be:99:b2:0c:6d:af:ae:e6:0b:ed:0a:bd:
24:d7:e9:d3:e3:db:19:57:27:63:02:c9:d2:44:aa:a6:1f:09:
1f:71:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:45 2026 by rpki-client