
$ rpki-client -vvf rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31372e302f32342d3234203d3e20313530353039.roa
File: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (raw, json)
Hash identifier: XtTS/mCdngeqqFjc8wIuybtYZWF8EYN94kDxpI/AJoI=
Subject key identifier: 0D:A9:E6:B5:9E:23:0A:FE:0E:7C:F4:5A:E2:BD:A7:5C:15:5E:F7:E7
Certificate issuer: /CN=6C21F371FCEDD2DE29AE914B353F6951F995079A
Certificate serial: 06397073B1637DF446AA821AB3FE0146D9029D8B
Authority key identifier: 6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31372e302f32342d3234203d3e20313530353039.roa
Signing time: Sun 03 May 2026 02:53:03 +0000
ROA not before: Sun 03 May 2026 02:48:03 +0000
ROA not after: Sun 02 May 2027 02:53:03 +0000
asID: 150509
IP address blocks: 103.61.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl
rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:39:70:73:b1:63:7d:f4:46:aa:82:1a:b3:fe:01:46:d9:02:9d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C21F371FCEDD2DE29AE914B353F6951F995079A
Validity
Not Before: May 3 02:48:03 2026 GMT
Not After : May 2 02:53:03 2027 GMT
Subject: CN=0DA9E6B59E230AFE0E7CF45AE2BDA75C155EF7E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:15:83:77:af:82:92:f9:d5:82:13:bf:69:
e8:15:60:d8:64:ae:5a:48:56:56:e8:44:ae:20:aa:
95:e0:c6:f3:87:59:30:b3:8e:46:5f:b9:5f:ba:89:
b8:45:b1:f4:ab:6f:1b:32:2f:a9:e1:b6:7e:9d:32:
58:5e:f5:8a:15:5e:6b:f3:06:3a:d2:b4:76:19:1f:
bd:29:37:6f:28:3c:d6:5b:2e:17:81:02:bd:c9:bb:
ed:dc:16:d1:b7:22:f1:96:0e:14:85:75:05:8e:83:
8b:30:b5:0a:c5:c1:ff:f6:04:1a:6d:c1:5e:75:ce:
d1:44:5a:7a:d1:61:3b:21:cc:2d:90:d6:82:d9:cc:
8f:f2:82:b9:fe:28:2b:44:08:03:e0:8f:cb:9b:f6:
62:02:bc:88:c5:93:55:01:bd:f8:64:9e:2f:01:06:
f0:3e:0c:75:e9:2d:8f:d7:73:2a:61:90:11:71:e0:
aa:da:ce:48:92:a6:ca:20:6f:b3:cb:d1:89:0c:af:
e5:11:e5:46:ca:8d:fa:ae:ee:16:e5:5c:33:45:40:
51:1c:df:b0:5e:e4:50:16:41:82:ce:de:06:21:84:
c6:49:9e:da:45:5d:e4:68:55:75:78:17:c4:d9:d3:
73:48:fb:a5:cf:61:2a:04:46:e2:f5:7a:33:f7:a7:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A9:E6:B5:9E:23:0A:FE:0E:7C:F4:5A:E2:BD:A7:5C:15:5E:F7:E7
X509v3 Authority Key Identifier:
keyid:6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31372e302f32342d3234203d3e20313530353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.17.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e2:cf:2d:38:65:1d:69:55:95:84:e4:cd:89:bb:f8:0b:25:
91:2d:a8:26:94:47:71:e6:c0:48:3c:d7:5e:ab:f2:91:29:02:
a9:86:73:45:fb:30:f4:cf:5b:ce:e6:49:43:4f:36:32:b1:19:
3d:4e:c2:a2:76:f6:30:b0:f4:2d:cb:3b:c1:c0:de:52:47:29:
41:42:39:66:17:fc:bd:77:9a:5d:5a:29:8c:0a:f3:e1:92:a8:
ce:ce:1b:d0:73:da:82:24:20:be:4f:e9:d1:dc:43:18:2e:6a:
38:36:39:2b:07:79:a3:a8:12:b6:09:03:a7:e6:a9:47:22:2b:
67:76:f9:31:ac:e4:fb:a7:e8:20:60:2b:d7:f4:1e:f2:57:2e:
de:57:5a:a1:53:d9:04:5b:4c:25:2f:f0:c7:67:3c:d7:49:dc:
e9:5e:77:1c:7a:f2:23:bd:e5:1a:51:fa:c1:d3:e0:23:9a:06:
1f:b0:9b:36:8a:80:f5:1c:ea:4a:bc:33:36:05:78:a9:10:29:
fb:bc:82:8c:c1:04:cf:e8:bc:6f:21:fb:d5:81:a3:df:14:e2:
61:59:69:2e:2e:74:69:e9:55:44:c2:9b:f8:56:9d:24:0c:c6:
86:5f:2f:e0:ac:e9:e9:56:fa:3f:bb:a0:ba:b0:3f:21:86:73:
32:f9:45:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:19 2026 by rpki-client