
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa
File: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (raw, json)
Hash identifier: SXi0Pi35nmPr0lYSvyAAC2Fa3aJUqN8WDDIdiAg171E=
Subject key identifier: C5:30:F5:9B:99:73:15:0F:BF:50:BC:7F:9B:8A:48:42:EC:A4:42:79
Certificate issuer: /CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
Certificate serial: 250B777DED9CF9847BB340EA8087DC5124715F7A
Authority key identifier: 3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa
Signing time: Sun 03 May 2026 02:54:37 +0000
ROA not before: Sun 03 May 2026 02:49:37 +0000
ROA not after: Sun 02 May 2027 02:54:37 +0000
asID: 132829
IP address blocks: 103.134.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl
rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:0b:77:7d:ed:9c:f9:84:7b:b3:40:ea:80:87:dc:51:24:71:5f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F62814044EDF8B5E77D2B82095BF6627E136F4B
Validity
Not Before: May 3 02:49:37 2026 GMT
Not After : May 2 02:54:37 2027 GMT
Subject: CN=C530F59B9973150FBF50BC7F9B8A4842ECA44279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:2a:c3:51:fd:b6:84:e9:52:a0:9f:d0:b3:
dc:0b:d5:2e:94:2c:f8:7b:79:f0:05:e1:bb:d6:79:
ee:96:15:a8:d0:72:3b:73:83:68:39:00:96:2e:99:
71:64:3a:a2:5a:77:73:e9:35:b7:14:2d:c8:5a:81:
c2:40:7f:61:a1:13:75:30:44:18:d4:c2:d2:26:f0:
c9:e5:22:50:13:c6:c0:c6:dc:d4:aa:05:59:8a:fc:
13:ae:65:93:9d:94:df:d8:8a:f6:b3:e1:b5:90:da:
ff:c4:a7:52:9f:84:db:20:0a:02:81:71:bd:b6:3e:
60:48:66:8c:72:06:f9:82:50:33:d7:87:3d:ab:9f:
2e:12:71:8b:ec:ee:ba:0f:93:52:39:8c:56:23:8f:
77:75:18:e9:b1:cc:6d:06:e4:b9:88:ef:56:76:af:
c3:d9:61:89:80:92:7b:3a:cb:24:77:23:50:65:69:
3c:36:e9:ca:b6:40:72:56:d6:f7:c1:97:3c:7b:56:
54:04:8e:eb:9e:6e:2a:1b:c1:1e:1c:d4:e3:94:94:
54:db:77:99:eb:f7:83:d1:e5:09:70:e8:48:f9:e4:
b6:a8:b3:58:62:eb:84:f7:6a:ef:b0:38:7f:a3:14:
61:4c:3b:63:09:d3:db:82:b5:41:ce:f6:96:e3:24:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:30:F5:9B:99:73:15:0F:BF:50:BC:7F:9B:8A:48:42:EC:A4:42:79
X509v3 Authority Key Identifier:
keyid:3F:62:81:40:44:ED:F8:B5:E7:7D:2B:82:09:5B:F6:62:7E:13:6F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3F62814044EDF8B5E77D2B82095BF6627E136F4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F62814044EDF8B5E77D2B82095BF6627E136F4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.50.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:57:3b:26:a7:8f:1e:1c:75:a0:bd:10:2d:ea:d7:69:c7:27:
c4:3a:e8:d3:61:4d:11:d0:34:73:65:72:08:6f:a0:05:a9:fb:
03:b0:63:14:f2:80:61:13:57:15:4b:ab:84:20:c6:a4:55:d1:
a5:27:26:4a:90:5f:1b:64:0e:52:b7:67:be:4e:72:01:e0:4e:
73:33:d6:71:99:91:8d:04:4b:e6:3e:a5:e2:a0:c5:53:3f:1a:
5d:2b:bc:3e:69:43:60:e8:c3:e8:13:f1:05:10:8a:1f:84:61:
b7:e1:13:1e:7e:30:6f:7a:e4:14:2d:b1:fc:78:2b:4b:28:65:
c4:a2:3c:f1:f9:33:75:20:dc:dc:db:60:48:ed:20:d0:04:f3:
ee:ed:6a:6f:36:13:e6:2a:ad:54:bf:f0:8d:11:c7:25:e6:11:
81:46:af:66:b5:a4:3d:96:8e:68:b2:2b:9d:9a:2e:1e:37:c5:
76:a6:b3:b0:4c:2e:0a:a7:37:26:7a:70:98:24:8f:be:8d:00:
6d:48:38:49:e9:13:5e:a3:25:8f:01:c1:9b:fb:5b:7d:1a:d8:
5f:3c:07:55:b2:0e:1b:a6:51:80:33:e5:32:bd:53:c0:9b:6b:
7d:de:52:09:fc:73:ba:6a:47:dc:29:05:7a:6b:a5:53:fd:4b:
21:33:3a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:12 2026 by rpki-client