
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa
File: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (raw, json)
Hash identifier: Om/3/8RVQVP4CmrlSjOFvYcq6slIyV0KgfonhTO00tc=
Subject key identifier: 84:7F:D5:E7:3F:E0:FD:85:99:8F:76:C0:8A:EE:85:6C:11:D2:51:FA
Certificate issuer: /CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39
Certificate serial: 4F816F737D49EB8B6BAACD08C8EB4AC0F95B54A8
Authority key identifier: CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa
Signing time: Sun 03 May 2026 02:54:51 +0000
ROA not before: Sun 03 May 2026 02:49:51 +0000
ROA not after: Sun 02 May 2027 02:54:51 +0000
asID: 150478
IP address blocks: 103.117.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl
rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:81:6f:73:7d:49:eb:8b:6b:aa:cd:08:c8:eb:4a:c0:f9:5b:54:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39
Validity
Not Before: May 3 02:49:51 2026 GMT
Not After : May 2 02:54:51 2027 GMT
Subject: CN=847FD5E73FE0FD85998F76C08AEE856C11D251FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:aa:85:6d:76:9f:6a:ee:59:db:48:eb:ae:d3:
fc:59:7c:09:93:40:70:d5:1f:5c:73:1d:97:8b:1a:
65:c1:58:ef:ed:72:30:9f:a4:6e:e6:dd:12:f7:44:
19:de:9f:43:da:23:ae:1f:13:d7:66:63:1b:09:9d:
42:82:47:82:ce:f8:36:27:4f:71:72:72:f0:f9:0a:
38:6a:9f:20:a2:c2:58:05:89:9c:d1:eb:04:cc:25:
4f:25:bd:61:e7:e8:8a:e8:57:2f:00:ac:25:ed:0c:
40:78:e1:b0:fb:91:f1:12:23:5d:3e:99:f2:93:eb:
f6:b7:f2:36:bd:eb:da:5d:03:96:6f:29:70:a0:d1:
f9:2c:99:c8:59:8d:70:89:04:ad:ae:e2:54:fd:da:
45:f7:ec:84:19:ab:ad:40:31:71:e2:ca:2a:c8:6b:
aa:d2:0f:dd:16:d9:a2:15:5f:94:af:6c:7c:b2:15:
91:e5:ef:89:da:ba:59:32:05:f9:11:d5:c0:54:7e:
2f:a3:34:c9:82:db:f1:19:61:88:5b:ca:5f:b7:d6:
ac:90:c8:6a:6e:2b:89:0e:95:dd:28:c5:0a:7f:e5:
cd:56:07:96:85:b3:08:34:50:0f:69:cd:87:36:70:
84:d6:93:6a:19:12:5c:ea:7c:af:07:53:93:a7:5e:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:D5:E7:3F:E0:FD:85:99:8F:76:C0:8A:EE:85:6C:11:D2:51:FA
X509v3 Authority Key Identifier:
keyid:CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.117.10.0/24
Signature Algorithm: sha256WithRSAEncryption
79:28:5c:33:d6:bd:be:f6:c3:c2:70:85:bd:76:5a:c3:a7:08:
0f:04:93:f1:42:78:c0:81:7a:ff:ea:57:15:1f:94:94:90:16:
6c:b7:a5:da:ee:b5:70:5b:17:1a:b3:d4:e6:3b:f5:99:05:ce:
bb:a8:df:54:ee:da:98:8c:12:25:c8:95:7a:70:56:6f:51:2c:
ae:c6:8d:19:57:d1:d7:ea:b4:2f:39:be:f3:d2:90:be:e6:48:
79:46:24:8d:a8:ec:fd:2a:fe:63:04:38:b2:53:c0:c7:33:f6:
57:66:fb:19:c7:c5:86:06:ac:52:a5:a4:9e:22:5b:f5:a3:5c:
05:12:f7:93:99:d4:9d:50:b4:af:94:58:e7:d3:68:97:6b:20:
8d:d6:6b:11:d5:3a:0c:d2:9f:d6:06:4d:7b:ec:0d:c0:c4:28:
63:93:fe:21:87:5a:a9:13:34:a2:82:b5:d5:16:4c:5c:9e:0a:
9c:b2:5d:a2:cc:0b:62:84:00:25:17:b8:62:91:d7:29:58:05:
34:a3:fa:84:59:fc:74:df:d1:6b:d2:7e:b4:39:a3:80:aa:82:
10:26:8c:8e:9b:37:5b:47:e0:30:4e:7f:22:65:f9:eb:33:e3:
4a:17:e1:bc:a5:48:ab:93:f7:a8:8c:7d:16:f7:32:ea:cf:19:
a8:49:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:28 2026 by rpki-client