
$ rpki-client -vvf rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/3130332e38362e3132382e302f32332d3234203d3e2034383030.roa
File: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier: 60R7X56SozCA5mIN8nGG4Hjmryhwz60xWHs0HKmGlWc=
Subject key identifier: F9:7F:1E:50:1F:A3:7E:C1:A5:55:69:5E:98:46:E3:73:9E:CA:FD:39
Certificate issuer: /CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF
Certificate serial: 4577FECBD9B89CB97DE44E0C17CACA974C0BFB98
Authority key identifier: 2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/3130332e38362e3132382e302f32332d3234203d3e2034383030.roa
Signing time: Sun 03 May 2026 02:53:30 +0000
ROA not before: Sun 03 May 2026 02:48:30 +0000
ROA not after: Sun 02 May 2027 02:53:30 +0000
asID: 4800
IP address blocks: 103.86.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl
rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:77:fe:cb:d9:b8:9c:b9:7d:e4:4e:0c:17:ca:ca:97:4c:0b:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF
Validity
Not Before: May 3 02:48:30 2026 GMT
Not After : May 2 02:53:30 2027 GMT
Subject: CN=F97F1E501FA37EC1A555695E9846E3739ECAFD39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:72:12:65:a8:d2:15:71:43:0e:40:8f:29:
1a:91:e7:b3:5e:c1:e0:c7:d4:07:b9:61:23:01:14:
32:fa:3a:8c:c7:37:51:86:d2:76:c9:34:7b:84:a2:
d2:9b:d3:a3:fc:f7:6a:37:ae:70:44:fc:f8:de:1c:
9f:43:63:8c:ca:aa:0b:8a:54:b6:db:7e:8d:c5:06:
3a:44:11:f8:db:43:04:fb:80:0a:c1:8c:67:f9:7d:
a5:ad:de:05:ae:1e:ed:fc:06:36:06:85:fb:74:dc:
1c:4c:6e:22:4f:a3:b4:a4:40:0a:57:7b:c3:3d:c9:
4d:2b:2d:95:fd:96:2a:fe:ef:0e:4d:a5:55:5f:5e:
c2:b7:e8:f5:8d:ab:b5:95:56:3e:1f:15:ac:43:5a:
1d:a9:2d:07:29:d7:c8:53:af:2c:f7:52:5a:e1:24:
30:c6:c1:d9:97:ae:b7:f4:93:68:2e:c8:37:29:aa:
97:98:7a:05:89:dc:67:aa:e2:ad:91:40:e9:de:69:
09:bc:52:0d:aa:ad:94:27:70:d2:5c:4b:64:af:dd:
9b:11:54:b5:f1:64:69:88:77:c2:6f:81:05:48:af:
9f:1f:aa:f1:53:9a:21:8f:07:25:b6:5d:e0:a9:9c:
88:c0:3d:f0:04:de:a4:8d:51:90:22:c8:ba:05:8d:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7F:1E:50:1F:A3:7E:C1:A5:55:69:5E:98:46:E3:73:9E:CA:FD:39
X509v3 Authority Key Identifier:
keyid:2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/3130332e38362e3132382e302f32332d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.128.0/23
Signature Algorithm: sha256WithRSAEncryption
10:3b:3c:b1:de:07:49:4b:c7:4c:65:ad:14:9e:9d:83:8b:15:
38:50:f0:ac:47:cd:57:c0:8d:14:9a:93:9a:9a:5f:4e:e9:52:
4e:f2:b2:2d:1b:2f:6d:97:fa:e9:77:44:87:1e:32:be:12:91:
e7:77:d2:94:22:95:a6:17:b3:32:38:17:b9:a5:35:09:d5:7c:
4b:72:0b:ff:c8:90:fd:4c:ab:d9:43:80:34:9c:28:ac:40:96:
67:fb:ad:2d:60:c2:de:18:6f:03:52:5e:7a:81:2e:71:69:f9:
6e:76:60:07:d5:cb:cb:c6:0e:ae:f2:be:89:16:ee:f4:9f:25:
fd:c0:00:e3:b2:13:bb:bf:d9:19:2b:47:95:9e:e0:e9:ae:79:
39:c1:aa:64:22:19:b7:f2:31:d6:cc:b3:4d:e3:e0:81:8e:a8:
79:7e:da:da:44:08:ea:41:ef:b7:d9:bd:d9:2f:53:02:76:60:
40:8e:54:a2:96:73:20:f7:bc:85:71:23:5e:b8:c8:0f:60:21:
f0:bd:ad:9f:24:d3:e2:d5:bd:03:08:97:2e:8f:bb:88:aa:2f:
9c:64:66:43:ca:1f:1b:cf:64:6b:cc:e6:2a:fa:a0:03:bd:34:
b5:b2:0d:f3:70:44:eb:12:7a:d2:a1:08:8d:fa:8c:e8:4f:50:
4b:ef:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:28:49 2026 by rpki-client