
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa
File: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (raw, json)
Hash identifier: tUdw3BfuW7CgYi5yhnOtuV1cioGKd9mwoTP0exuoNhk=
Subject key identifier: 39:DA:87:E7:5D:FD:F1:F1:06:E9:9E:A8:7F:EB:8C:F8:4A:AD:F6:AD
Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB
Certificate serial: 6BBCE7800237B3E98C5D43AA5D091C88B9FB0DD9
Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa
Signing time: Sun 03 May 2026 02:49:32 +0000
ROA not before: Sun 03 May 2026 02:44:32 +0000
ROA not after: Sun 02 May 2027 02:49:32 +0000
asID: 138810
IP address blocks: 103.134.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl
rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:bc:e7:80:02:37:b3:e9:8c:5d:43:aa:5d:09:1c:88:b9:fb:0d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB
Validity
Not Before: May 3 02:44:32 2026 GMT
Not After : May 2 02:49:32 2027 GMT
Subject: CN=39DA87E75DFDF1F106E99EA87FEB8CF84AADF6AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:df:1e:ca:f9:9b:bc:ea:43:35:34:b2:6b:
ff:1e:7c:09:4f:d1:27:cf:16:26:43:e6:50:3d:08:
32:ff:2d:77:1d:82:25:27:50:e6:cc:4e:e1:a2:66:
97:af:0d:ec:c0:be:e5:75:81:31:7e:8e:3d:37:3c:
0f:96:c6:fa:18:fb:57:f1:87:70:62:8a:f4:41:b8:
45:d1:ff:92:83:02:c3:48:65:33:42:9c:c7:3b:a1:
7e:a5:61:47:64:7e:79:de:cf:4a:4e:5b:1a:1e:ea:
d0:15:06:2c:21:70:ba:c7:f9:b0:63:e0:22:3b:e3:
0f:e7:2a:c8:bd:8b:4e:7e:f0:0d:8f:3e:08:d9:3f:
ac:65:28:e8:57:07:cc:da:47:d9:ba:26:89:0d:d2:
e3:ba:e9:99:4e:59:95:33:75:be:14:09:db:d5:0f:
17:9c:3d:fe:b1:2c:c3:f3:33:39:ca:39:93:83:a0:
cb:ae:ce:3f:df:f5:d9:1c:13:6d:70:ea:e1:50:c4:
52:16:1e:96:68:52:d3:85:16:ee:be:27:63:94:f2:
d8:a7:e0:d6:a6:df:83:d0:a5:97:88:ff:76:b5:8e:
ca:5b:f1:4b:fb:53:d0:0d:5b:8f:70:ed:ed:80:0a:
c8:81:7b:19:a4:33:6c:cd:d1:7d:52:18:17:f9:f6:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DA:87:E7:5D:FD:F1:F1:06:E9:9E:A8:7F:EB:8C:F8:4A:AD:F6:AD
X509v3 Authority Key Identifier:
keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5c:4c:0e:8b:2c:84:77:66:0f:9d:5e:0a:25:6b:25:b4:18:
26:0e:9c:e3:5f:03:c2:4e:5d:ec:b0:9e:3e:7d:3a:d7:4b:31:
eb:14:23:83:1b:d5:b4:b4:d4:c3:0d:5d:b5:7f:12:c4:93:f7:
32:74:84:d3:f8:ee:f3:fb:13:90:89:10:de:67:03:f1:04:0e:
3f:8d:c5:58:70:ad:f3:ac:92:1b:35:81:90:6a:da:cb:fe:69:
ff:a4:2f:ed:dc:f7:6f:ca:27:ab:6f:82:19:27:71:a5:aa:ed:
6a:de:59:de:73:87:6f:21:85:7c:4a:27:ec:8d:17:6c:45:c0:
80:13:ad:3b:2a:74:f5:3c:0c:85:35:e0:64:b8:19:e2:f1:c1:
e5:bc:0a:c6:f1:74:8f:b3:75:36:3e:22:d9:fe:5e:9f:7d:20:
41:7e:93:45:ec:ba:77:17:9b:fb:46:6f:ad:17:ab:1a:92:65:
cb:8e:b8:9a:0f:39:b5:2c:d9:7c:9d:b2:a2:b9:9b:be:60:f4:
ec:32:fc:62:f4:be:2b:7b:76:f5:af:2e:f1:42:26:15:c0:97:
03:ce:98:06:10:c1:92:cc:7a:5c:fa:b5:3d:f7:aa:b5:de:cf:
2f:6b:15:b0:20:97:19:c3:e2:a6:9f:52:15:12:44:1e:cc:0f:
ef:e7:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:02 2026 by rpki-client