
$ rpki-client -vvf rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa
File: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (raw, json)
Hash identifier: feHp+VgvlrJlDWnbvgKdK3q5FY7GJ/3YIOlQqsX2zUs=
Subject key identifier: FF:C0:82:0E:BB:45:85:13:2A:2C:10:02:E6:77:DC:EE:A0:D0:5B:96
Certificate issuer: /CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C
Certificate serial: 017FD169DDE694C1EDC9EC68EC239D70806AECF7
Authority key identifier: 8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa
Signing time: Sun 03 May 2026 02:49:08 +0000
ROA not before: Sun 03 May 2026 02:44:08 +0000
ROA not after: Sun 02 May 2027 02:49:08 +0000
asID: 150978
IP address blocks: 103.126.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl
rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:7f:d1:69:dd:e6:94:c1:ed:c9:ec:68:ec:23:9d:70:80:6a:ec:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C
Validity
Not Before: May 3 02:44:08 2026 GMT
Not After : May 2 02:49:08 2027 GMT
Subject: CN=FFC0820EBB4585132A2C1002E677DCEEA0D05B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:1c:68:8a:af:de:df:a0:69:fc:05:19:1a:
91:3e:46:1a:b6:e4:df:13:62:a3:36:4c:6e:71:bf:
78:e4:1f:28:5b:fa:ae:d2:3d:1f:41:c5:f8:8d:94:
8f:be:9a:b9:26:b0:6b:a0:a6:8f:23:3b:ba:10:0c:
9c:a4:14:76:a2:9b:46:ee:7d:5e:bd:0c:e6:7e:02:
00:d4:a2:34:c4:a9:98:69:bf:b9:55:dd:1f:10:20:
34:3a:0b:32:32:eb:5c:bf:80:55:d5:87:d8:54:f7:
5f:ac:73:35:c5:86:a8:e0:6e:fa:b5:2d:97:06:74:
66:87:ad:99:7f:97:ea:53:fd:d8:5a:25:53:d2:ef:
81:6d:cf:4d:72:d6:2b:ad:2d:45:47:a9:b9:36:c2:
c6:bd:a1:1a:a5:ab:0d:f8:22:0c:e3:2d:14:d0:9d:
2d:ec:d1:09:de:6a:58:12:00:0c:31:20:11:86:3d:
ab:64:cc:fa:c0:26:ee:42:45:84:ce:ce:5f:fa:37:
81:cf:c7:59:ae:d9:bb:09:e9:35:bc:79:4e:99:36:
66:72:70:a1:55:cd:c9:18:b9:11:db:c5:ff:3f:55:
87:c1:2f:81:84:f4:9b:ba:80:d9:1f:1d:d5:ee:8e:
fb:68:20:8f:41:11:eb:a0:71:b7:ac:17:0d:23:6b:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C0:82:0E:BB:45:85:13:2A:2C:10:02:E6:77:DC:EE:A0:D0:5B:96
X509v3 Authority Key Identifier:
keyid:8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.126.233.0/24
Signature Algorithm: sha256WithRSAEncryption
56:70:af:1e:42:4c:6b:59:60:fc:7f:c6:68:74:e8:0d:98:a6:
8a:e9:35:dc:b3:2a:23:67:e1:5b:f8:15:a8:20:86:30:a1:f4:
9e:fd:0b:8e:2a:08:32:6c:be:47:27:c1:1f:3f:01:16:f6:f9:
eb:a5:c1:6e:ed:68:aa:66:49:19:48:36:3e:35:90:1c:24:84:
8f:d2:80:83:0c:df:e3:32:2f:c8:73:03:16:43:47:48:c1:c8:
9c:8c:0e:34:5a:69:bb:6b:5c:4c:14:cb:35:64:74:7f:f5:d1:
0e:8a:ea:a1:18:91:14:39:97:6b:99:ba:c1:3c:bd:ec:78:a9:
ff:e8:2c:b9:23:b9:40:0a:7a:f8:e7:68:1e:b7:da:19:b3:3c:
d0:87:2f:d3:18:2b:e3:64:75:e3:c6:22:fb:df:4d:fe:73:79:
75:c4:0e:12:d1:f0:6d:fa:ec:e8:80:73:5c:93:52:78:e2:e1:
01:dd:26:f1:12:28:09:cd:85:c5:0b:98:a8:c0:9d:95:68:90:
5b:3a:2c:a6:85:a5:eb:ea:98:76:c1:71:d3:92:a5:52:b3:5d:
2f:d3:eb:5d:a8:a6:02:08:4b:4b:4e:b7:93:92:3c:19:b3:d8:
81:a7:5e:82:53:4b:ca:d7:47:a7:65:10:39:32:ee:5d:3b:02:
30:98:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:12 2026 by rpki-client