
$ rpki-client -vvf rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3233203d3e203338353131.roa
File: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (raw, json)
Hash identifier: mf3IPyVMZfES2LPj/qKW1uxRQxXFsgdbVk4fq7bhazg=
Subject key identifier: 75:AB:12:06:04:9E:23:56:AC:94:0E:CC:D5:EF:5A:4D:66:69:02:B2
Certificate issuer: /CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1
Certificate serial: 3C86D1C4EF08223FA1FB746897F82A5183EC0A1B
Authority key identifier: E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3233203d3e203338353131.roa
Signing time: Sun 03 May 2026 02:52:37 +0000
ROA not before: Sun 03 May 2026 02:47:37 +0000
ROA not after: Sun 02 May 2027 02:52:37 +0000
asID: 38511
IP address blocks: 103.68.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl
rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:86:d1:c4:ef:08:22:3f:a1:fb:74:68:97:f8:2a:51:83:ec:0a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E97D24062E3E8091388E0E26DFE825A3AE0F5EC1
Validity
Not Before: May 3 02:47:37 2026 GMT
Not After : May 2 02:52:37 2027 GMT
Subject: CN=75AB1206049E2356AC940ECCD5EF5A4D666902B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:88:2f:5d:13:bb:05:d2:ac:74:2d:63:1c:bd:
e8:64:df:75:43:b1:8d:4b:8a:18:29:41:de:43:e7:
ed:f8:3e:5c:5e:cc:03:14:7d:a8:20:65:1f:5d:d4:
eb:3b:d1:82:26:0c:f2:8a:59:51:99:f6:3f:99:ca:
f9:12:bc:2a:36:d1:04:5e:83:5a:05:41:65:ba:21:
bb:e6:1b:43:f5:0c:15:a0:be:90:c7:33:bb:81:6c:
16:3a:c7:43:0c:02:6c:11:0d:54:31:b7:8d:96:97:
14:28:23:aa:2f:2e:c0:6e:73:4b:13:2d:b8:60:3e:
b5:7a:54:b9:53:39:0d:7d:7e:b2:b9:0d:cb:03:86:
4a:01:48:94:39:eb:3f:6b:6c:85:a8:21:db:5b:54:
6d:ed:1c:69:d9:bf:7b:04:01:67:90:3a:90:22:54:
5c:22:74:2b:ab:a5:17:a9:71:77:5b:81:0d:15:df:
5a:ac:91:45:91:ac:66:d6:09:9c:cd:0a:5e:a1:bd:
35:36:bc:bb:d9:df:87:20:e9:8e:6b:3d:3e:d2:c5:
f8:ed:ba:e2:0f:9a:03:cf:dc:cc:f2:3f:04:48:c0:
7f:e8:f9:6b:bb:30:50:59:07:36:45:70:53:87:ab:
c8:22:21:e3:b1:91:77:86:af:5c:c2:06:50:8a:44:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AB:12:06:04:9E:23:56:AC:94:0E:CC:D5:EF:5A:4D:66:69:02:B2
X509v3 Authority Key Identifier:
keyid:E9:7D:24:06:2E:3E:80:91:38:8E:0E:26:DF:E8:25:A3:AE:0F:5E:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97D24062E3E8091388E0E26DFE825A3AE0F5EC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3233203d3e203338353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.136.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:32:88:1a:4f:9e:d0:22:47:f8:48:18:9d:78:46:77:9d:d7:
25:81:28:6c:85:15:55:73:23:c9:11:d3:6b:74:aa:2b:6b:ab:
94:ba:4b:c9:9c:93:44:b7:92:3d:43:5c:88:fb:a5:0f:7c:90:
dd:c2:19:8e:17:3e:e1:aa:5d:1a:95:2a:c1:50:4f:e8:8c:48:
4c:33:01:5a:82:db:96:cb:93:c8:12:ef:16:fa:27:d0:cd:50:
56:09:2b:af:62:62:71:c9:3c:e9:26:93:3c:fb:2b:34:31:d9:
a8:f2:a7:cc:c1:60:59:e3:da:d6:50:90:be:a0:d2:72:51:a9:
3b:69:ff:35:34:1a:8e:9b:0b:b1:1c:3e:66:03:a9:63:58:75:
8f:ab:55:c0:7e:64:ca:8b:80:45:ee:44:ee:22:4e:d2:d8:33:
a2:b7:9d:c8:2c:bd:8e:95:1b:f3:eb:ba:c5:16:5d:ec:f0:01:
57:a6:c0:94:0e:45:37:bd:f5:2f:59:52:dc:e3:bf:ab:29:3d:
de:74:95:55:8b:a6:cb:c6:e8:7e:10:5d:94:0b:c9:98:ce:c9:
d4:35:77:3f:8f:20:05:76:2f:d5:a3:cb:77:11:92:0d:78:e2:
a3:c6:c5:b7:6e:01:af:0a:87:c2:fb:69:12:2d:ff:36:3b:0a:
2e:6c:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:18 2026 by rpki-client