
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: UGzAJ2L7c0+3TG5jr3kCTMBiqyH8xnVKmBzm3Kbw5NI=
Subject key identifier: F6:89:EB:8D:B4:BD:53:FA:B3:87:E1:16:0A:DD:E9:61:1E:F1:59:E9
Certificate issuer: /CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B
Certificate serial: 56F26273A25539C381311D172D23C397D04AC313
Authority key identifier: DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa
Signing time: Sun 03 May 2026 02:54:19 +0000
ROA not before: Sun 03 May 2026 02:49:19 +0000
ROA not after: Sun 02 May 2027 02:54:19 +0000
asID: 135478
IP address blocks: 103.121.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl
rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f2:62:73:a2:55:39:c3:81:31:1d:17:2d:23:c3:97:d0:4a:c3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B
Validity
Not Before: May 3 02:49:19 2026 GMT
Not After : May 2 02:54:19 2027 GMT
Subject: CN=F689EB8DB4BD53FAB387E1160ADDE9611EF159E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:bf:96:5c:bf:4d:22:3b:e3:f4:93:3c:72:
29:2a:a3:c3:53:6b:0f:84:42:ed:c7:d6:14:c6:44:
e4:57:45:30:6a:e8:2b:db:1c:a9:a4:de:64:48:48:
9d:88:71:bb:48:05:a5:58:18:84:df:df:da:f2:36:
0e:92:28:91:1e:fd:62:09:df:4d:96:06:98:d8:f3:
1a:6d:0d:d4:28:74:8f:a2:f9:ae:5d:37:1b:8b:4a:
b3:82:ad:e7:f5:94:8d:ae:e0:91:78:4a:8a:45:11:
90:37:42:28:99:56:b3:31:6c:6a:5c:bd:da:40:32:
04:ca:14:2e:ec:88:e7:11:33:4a:f5:80:96:05:d9:
40:c0:29:e5:36:e6:c6:c7:b1:0e:ba:62:01:e2:6f:
98:c9:38:fc:a5:07:36:4e:da:4c:1b:4e:00:46:0e:
ab:55:aa:36:87:ce:0a:10:37:a3:63:89:ff:48:8c:
eb:9f:ad:7a:7e:26:f2:2e:e2:7e:f0:9c:80:21:4a:
e5:2a:cc:61:65:3d:49:41:ab:fa:bc:a6:f3:0e:0f:
1a:b5:82:07:8e:b2:3a:23:2b:86:92:1d:21:31:42:
e8:54:71:e9:13:1a:7f:09:6e:b0:41:32:3b:a4:fa:
4e:14:41:5e:08:3b:8c:7a:b7:25:47:07:bc:e7:7c:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:89:EB:8D:B4:BD:53:FA:B3:87:E1:16:0A:DD:E9:61:1E:F1:59:E9
X509v3 Authority Key Identifier:
keyid:DD:7F:02:C2:99:05:58:E5:14:DC:3B:1B:7A:7E:2B:AE:03:1A:3F:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DD7F02C2990558E514DC3B1B7A7E2BAE031A3F5B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.134.0/23
Signature Algorithm: sha256WithRSAEncryption
37:cc:d9:10:ad:35:67:35:bc:e5:1d:3f:ac:ca:d8:b2:e2:2e:
0c:18:2b:dd:70:a8:5e:13:0e:35:f1:a9:78:d7:44:22:7d:6e:
b6:8b:61:63:8d:b4:09:a9:44:5c:86:cd:a8:28:f6:86:af:dc:
95:9b:73:f3:2a:0f:43:da:63:68:1f:b8:cc:7c:46:c7:d8:05:
7d:7b:a1:f9:b9:ef:b6:eb:94:88:dd:60:67:4e:b5:88:d0:a7:
5d:12:85:51:4f:ea:a8:14:ce:f6:83:71:15:0e:af:85:d2:47:
8a:4b:3e:86:9c:15:89:5a:15:38:e0:14:cb:73:78:d2:fd:a2:
71:6d:10:0e:09:eb:a0:6a:dc:c1:bd:80:79:93:3e:50:9b:ad:
c6:fb:e1:f7:fe:8d:c0:67:16:bd:e0:89:5c:c4:94:23:11:52:
dd:10:dd:f2:8c:f2:b5:11:50:6d:37:bf:2a:b6:6c:b2:88:a8:
3e:2f:68:82:d3:37:1d:84:8f:7c:a4:75:19:ff:3d:ce:cd:6a:
bc:aa:6f:f5:aa:50:0e:80:8d:d8:d4:56:bd:b0:07:91:39:ad:
d3:92:e0:95:95:57:74:43:a6:d2:60:83:8e:60:b3:4a:40:c2:
43:95:69:b4:37:3b:18:5b:e7:c6:52:b8:cd:90:b1:68:ff:74:
2d:cd:6f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:00:50 2026 by rpki-client