
$ rpki-client -vvf rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130362e302f32342d3234203d3e20313338313030.roa
File: 3130332e3132352e3130362e302f32342d3234203d3e20313338313030.roa (raw, json)
Hash identifier: F+YbRAk+0CxM0DS0hqXRpMyQpkrAk0n0dHGfND3TquE=
Subject key identifier: 85:C1:B0:EB:8C:86:7A:60:C4:2C:99:E0:D8:4D:4D:2C:69:B9:E2:74
Certificate issuer: /CN=E48354BE9F141988ABFB54173029C4000CF9B18B
Certificate serial: 17995F5465EF9D3417EA72C10B0850E4E34B0EF9
Authority key identifier: E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130362e302f32342d3234203d3e20313338313030.roa
Signing time: Sun 03 May 2026 02:48:53 +0000
ROA not before: Sun 03 May 2026 02:43:53 +0000
ROA not after: Sun 02 May 2027 02:48:53 +0000
asID: 138100
IP address blocks: 103.125.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.crl
rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:99:5f:54:65:ef:9d:34:17:ea:72:c1:0b:08:50:e4:e3:4b:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E48354BE9F141988ABFB54173029C4000CF9B18B
Validity
Not Before: May 3 02:43:53 2026 GMT
Not After : May 2 02:48:53 2027 GMT
Subject: CN=85C1B0EB8C867A60C42C99E0D84D4D2C69B9E274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:c6:e8:71:d6:ba:91:a6:33:e8:7d:3d:d1:
c4:39:ce:b9:1b:45:7e:38:e4:69:06:15:bb:4f:46:
d2:b7:3b:f1:d9:1a:f2:e7:72:53:c3:fa:c9:4f:2b:
d4:3a:ee:27:66:0d:ee:20:92:cd:4f:cf:a6:26:cb:
18:81:52:cf:e3:2a:11:75:1e:0d:9a:48:2a:a6:bc:
d1:06:f6:77:16:e6:c9:dc:bd:06:26:d6:80:fb:33:
db:24:1c:54:30:5b:f0:74:74:5c:4d:c5:65:4e:0a:
fe:58:0f:b8:56:80:5c:d2:d1:dd:9b:11:e9:a6:9f:
d1:24:7b:00:47:e9:b2:77:01:73:85:1b:fa:c3:6f:
0c:b6:8c:1c:fa:d1:3b:cf:8c:83:bd:91:24:90:e3:
d1:4b:61:6c:6c:14:3d:16:1c:c7:83:c7:43:38:9b:
30:c0:a8:e2:5a:5f:10:cc:87:33:60:79:cf:06:f0:
dc:3d:a9:6e:83:21:08:d8:62:3b:54:f2:0d:d6:c8:
6b:c9:a8:2e:b3:86:3d:ac:ac:82:c5:65:d5:92:d0:
16:11:90:6d:35:24:c9:0f:ad:fb:80:d4:6c:a2:f7:
71:e5:a0:a6:14:b9:e1:f6:9a:09:49:b6:82:97:21:
ab:5d:47:51:45:4e:29:2a:bc:cc:57:dc:70:3d:c1:
b7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C1:B0:EB:8C:86:7A:60:C4:2C:99:E0:D8:4D:4D:2C:69:B9:E2:74
X509v3 Authority Key Identifier:
keyid:E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130362e302f32342d3234203d3e20313338313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.106.0/24
Signature Algorithm: sha256WithRSAEncryption
10:38:5f:8a:64:27:b0:0f:19:ce:7c:6e:d4:03:65:15:8d:6b:
5b:ab:e2:a6:60:5e:7a:06:04:e8:66:5a:af:9b:c0:a3:83:b2:
fe:f9:27:53:e4:fd:64:00:4c:2e:8b:09:1d:30:dd:66:e4:39:
cf:53:4c:ed:dd:91:6b:fb:e7:62:71:ac:71:8d:ba:ac:2a:9b:
7f:c1:36:40:e5:6e:57:39:38:6a:3f:7e:b6:da:dd:07:30:0d:
4e:ae:e3:e5:49:d1:c7:b6:6b:d3:34:14:c9:90:0f:d2:ce:86:
5f:7d:2f:0c:b4:59:f7:21:b5:ba:56:b5:ef:83:be:bc:3f:11:
67:ba:94:c0:13:8d:af:01:c1:8a:49:49:07:89:2a:92:63:36:
4d:3d:01:15:6c:dd:ed:16:67:bf:3d:7f:2e:8f:63:c2:9d:c8:
6b:dc:00:23:16:19:80:b4:28:12:f2:5b:64:3c:db:5e:f5:02:
5f:79:cd:76:50:d9:7b:8b:50:2e:f0:67:d3:55:f3:54:f8:42:
6e:40:9d:f2:5e:27:59:6a:4b:f8:57:ac:86:2e:e8:3b:30:4f:
35:f1:20:d1:9b:48:4d:3d:7b:93:cd:47:37:18:c0:f2:06:f5:
ea:fd:5f:0c:27:3f:2b:7b:0d:cc:bf:c5:0c:76:18:91:3a:28:
16:6e:95:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:41 2026 by rpki-client