
$ rpki-client -vvf rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa
File: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (raw, json)
Hash identifier: ezj7o418kHVsUpxHI+JsvUw+jteTe5LJOavPTf4FP1A=
Subject key identifier: 14:50:AC:45:CE:68:6F:7B:49:64:50:FA:15:CC:B1:8E:AB:27:A1:2B
Certificate issuer: /CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA
Certificate serial: 7FFEC76E5CFCA424B36673E76BA3BF2446192989
Authority key identifier: 78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa
Signing time: Sun 03 May 2026 02:48:26 +0000
ROA not before: Sun 03 May 2026 02:43:26 +0000
ROA not after: Sun 02 May 2027 02:48:26 +0000
asID: 137366
IP address blocks: 103.116.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl
rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:59:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:fe:c7:6e:5c:fc:a4:24:b3:66:73:e7:6b:a3:bf:24:46:19:29:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA
Validity
Not Before: May 3 02:43:26 2026 GMT
Not After : May 2 02:48:26 2027 GMT
Subject: CN=1450AC45CE686F7B496450FA15CCB18EAB27A12B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:99:da:6a:8a:2a:7f:fb:03:0b:1c:47:22:
39:4d:23:2b:2b:fb:26:7a:1a:55:af:47:fa:02:17:
e1:b2:fc:3e:67:97:62:88:d3:01:04:fd:ea:54:fd:
fc:92:d6:0b:8c:63:5f:c8:94:52:a5:7b:19:99:ec:
6b:a7:83:29:29:42:4a:6e:15:75:b1:ae:5a:27:ec:
70:62:5b:eb:9b:0c:41:c5:58:6c:c9:e3:c8:cf:f8:
bb:09:fb:0f:77:59:a2:d4:d2:2e:fb:01:31:fd:2c:
7b:50:73:69:06:a5:92:3f:a3:c9:49:09:4d:23:ca:
01:55:9d:a5:fb:e4:ae:9e:47:29:ed:91:e9:54:52:
07:3a:60:77:59:9f:c6:bb:94:f7:8f:a2:9f:49:f0:
68:53:f5:7e:e6:57:4a:16:38:bc:f3:41:64:e8:3e:
e2:b6:f8:df:15:4a:eb:95:76:51:9f:9b:37:00:5f:
c5:2b:4a:18:10:44:88:47:92:47:66:56:4c:93:7d:
6e:ab:a4:22:51:94:11:b4:20:f6:02:15:71:8d:0d:
aa:d8:6d:b3:eb:36:77:0f:74:7a:2c:cd:2b:32:a2:
63:1b:55:14:27:d6:de:54:9c:88:cd:b0:9f:ff:3b:
01:4c:da:af:ed:7b:43:c7:10:13:a8:dd:7b:8d:37:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:50:AC:45:CE:68:6F:7B:49:64:50:FA:15:CC:B1:8E:AB:27:A1:2B
X509v3 Authority Key Identifier:
keyid:78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.217.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d6:3b:c1:c0:30:48:ae:4f:a8:44:35:15:f2:72:2b:d9:f0:
99:24:bc:73:f2:24:a0:3f:d4:ba:49:57:b4:ad:1b:4a:67:fe:
05:11:34:f6:14:d8:d1:06:7a:ac:fa:25:20:58:82:a1:83:be:
1e:0d:f2:d2:a7:31:9f:40:fe:b0:82:80:6e:d8:00:e2:0b:9b:
2f:ba:8c:11:91:ab:c5:3a:75:ff:3e:de:61:69:45:cb:b2:a1:
2a:8b:45:df:ec:4b:38:7d:5f:32:e4:b2:e4:e7:4a:3f:19:01:
b5:20:4b:5c:75:94:f4:da:cd:fa:cd:c1:9b:bf:be:63:ab:f1:
f6:2b:40:7f:f0:f6:2e:22:e2:dd:7f:b2:f6:ac:c2:e3:28:f2:
bb:2e:44:d5:ed:b4:02:6c:a3:5a:7a:e7:9e:1c:7a:82:fc:00:
20:8a:c2:8f:56:6d:21:2e:8a:02:22:46:83:bc:40:4c:12:fc:
08:9d:0f:10:a2:d5:73:70:f3:40:0e:7b:e6:06:19:9c:56:ba:
33:7e:96:b3:9a:4f:0f:ec:00:7a:47:45:58:f4:03:ea:07:8c:
20:58:c1:b2:e0:22:ee:47:a5:15:0a:4e:a6:9a:95:bf:64:4b:
46:e0:d4:ef:c9:29:8c:d9:07:dd:07:ea:fd:9f:81:0d:bc:a7:
c4:6e:8d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:46 2026 by rpki-client