
$ rpki-client -vvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa
File: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (raw, json)
Hash identifier: z4cKVwkKHopCzCusKw3/HTDbOMxbEcb0WxL0/PEi5qo=
Subject key identifier: D3:6E:8C:05:81:C7:B4:66:B0:BA:79:07:23:30:CF:44:08:26:F5:05
Certificate issuer: /CN=D8435659F33EE1F7005A21C1387F49D353431808
Certificate serial: 257DC3150AA2BA6C5959A54E11DAEB23821167EC
Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa
Signing time: Sun 03 May 2026 02:52:16 +0000
ROA not before: Sun 03 May 2026 02:47:16 +0000
ROA not after: Sun 02 May 2027 02:52:16 +0000
asID: 131706
IP address blocks: 103.247.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl
rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:7d:c3:15:0a:a2:ba:6c:59:59:a5:4e:11:da:eb:23:82:11:67:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808
Validity
Not Before: May 3 02:47:16 2026 GMT
Not After : May 2 02:52:16 2027 GMT
Subject: CN=D36E8C0581C7B466B0BA79072330CF440826F505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:62:04:79:a4:57:e4:4b:79:58:6f:9b:98:
c7:3e:d4:ee:24:01:80:52:de:1a:67:0b:dc:65:07:
79:7f:ac:e4:bc:38:a8:81:aa:6e:cd:f0:73:9b:a3:
f1:68:f8:7d:47:17:b1:80:25:f7:e9:09:c5:97:8d:
4b:7d:07:3b:5b:ce:27:08:ca:0a:76:d4:f9:7f:5c:
ce:3b:ce:1b:5f:51:75:97:9f:90:1a:31:16:7c:7e:
f5:df:6c:26:08:64:5a:73:df:04:27:d2:3e:68:1d:
ac:8b:a4:07:e4:29:16:d4:cb:72:b0:7d:fe:ec:6b:
d9:02:a5:fa:3f:1c:ad:13:aa:70:3c:af:ba:81:eb:
eb:12:32:a0:26:99:de:f5:b1:f3:cd:9a:6f:56:2f:
39:0a:7f:47:53:91:1b:dd:77:5a:87:b1:36:8f:9b:
78:73:58:af:0b:c7:e5:6e:e3:71:b9:40:31:39:57:
ab:3a:bc:ba:05:f1:7c:50:f6:53:7c:e2:5a:03:63:
2c:47:de:f3:46:96:a3:4a:26:72:e6:72:5d:b8:31:
7c:12:cc:7d:83:dc:5a:c9:c0:08:1d:b6:85:a8:05:
6e:d7:37:de:dc:03:54:83:33:4a:45:11:1d:84:15:
55:ec:ea:ba:a1:9d:ce:46:7e:96:87:c3:e6:8e:0a:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6E:8C:05:81:C7:B4:66:B0:BA:79:07:23:30:CF:44:08:26:F5:05
X509v3 Authority Key Identifier:
keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.13.0/24
Signature Algorithm: sha256WithRSAEncryption
10:48:2f:54:10:4c:11:85:b9:b3:69:a2:6b:03:98:83:bf:05:
07:f5:48:0b:53:6d:c4:71:60:f8:f7:0f:2b:39:da:66:24:0f:
06:94:b9:9f:0f:65:48:d3:23:80:83:24:c7:f4:a4:ad:24:4f:
de:8e:df:8d:6d:ab:ce:c3:13:23:b3:ab:db:d2:b9:d8:23:a1:
21:72:a5:a4:25:fe:ea:e0:dc:73:85:c0:1c:a8:9a:52:f0:e5:
9e:f4:de:1b:ff:22:c5:67:52:19:c3:3d:61:0b:01:77:c0:81:
5c:dc:91:4f:d0:b7:0d:8c:d3:b2:94:55:e1:2d:9e:a9:aa:6d:
ac:42:98:0f:32:a6:6c:04:f6:42:1b:99:33:16:02:bb:61:d5:
f8:a9:a0:c2:4a:bc:44:3b:75:da:10:74:80:4a:63:88:1c:6c:
41:6c:27:28:6e:da:a4:83:df:5b:99:f4:2d:99:ea:87:f5:60:
6b:60:87:d4:47:48:03:33:dc:b7:51:ce:f2:13:31:ea:04:ef:
4a:76:bd:13:0b:19:9a:09:a6:54:8a:ad:87:67:33:be:fa:8b:
ee:eb:05:8c:30:b5:a3:44:c2:ca:3c:d4:cf:5c:fe:72:74:87:
0a:46:be:fd:52:53:d0:a9:0d:fc:f6:6e:22:04:63:77:53:3c:
5d:ff:ee:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:28 2026 by rpki-client