
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/3130332e36362e36382e302f32342d3234203d3e20313431363330.roa
File: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (raw, json)
Hash identifier: 8Tzms9UNSztJ38WDL4YreIGGXV9FevurnhZ/GDo4a2o=
Subject key identifier: 9C:A5:59:E1:E0:35:41:6A:5D:4F:D5:90:E9:0A:C7:E1:75:6C:80:66
Certificate issuer: /CN=87D1485E2D8D59808482A339E96F7B631508F371
Certificate serial: 353895622BE3D44B6899DE7BED2EE3EE82D848C3
Authority key identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/3130332e36362e36382e302f32342d3234203d3e20313431363330.roa
Signing time: Sun 03 May 2026 02:56:04 +0000
ROA not before: Sun 03 May 2026 02:51:04 +0000
ROA not after: Sun 02 May 2027 02:56:04 +0000
asID: 141630
IP address blocks: 103.66.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl
rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:38:95:62:2b:e3:d4:4b:68:99:de:7b:ed:2e:e3:ee:82:d8:48:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87D1485E2D8D59808482A339E96F7B631508F371
Validity
Not Before: May 3 02:51:04 2026 GMT
Not After : May 2 02:56:04 2027 GMT
Subject: CN=9CA559E1E035416A5D4FD590E90AC7E1756C8066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:b2:be:3c:32:5f:83:ee:0d:a1:71:88:bf:
06:a7:b5:31:f4:4c:4b:97:8c:20:c3:da:53:7f:c3:
ad:dd:93:88:67:eb:5a:aa:5c:5f:f4:e9:ba:c5:de:
e5:23:c1:0b:b5:6b:1c:6a:98:41:4b:6a:7d:89:7a:
1d:ae:0b:51:09:a8:e9:0b:e0:ad:e5:85:f7:48:65:
19:f3:b7:1a:d5:4d:67:56:c0:43:17:99:75:ba:59:
91:aa:f5:ab:18:be:20:8e:45:02:3b:a6:0b:17:2c:
f2:cf:da:dc:e1:28:7a:a4:b7:e4:b8:b2:ad:3b:9f:
f6:b4:d0:1d:ef:ec:8d:92:ab:17:65:da:aa:88:26:
5e:a0:55:60:eb:f0:ef:56:bb:60:58:5e:b2:8f:20:
bd:ed:de:67:6d:81:71:a4:67:b8:94:05:18:18:fc:
7e:1e:40:c0:e1:f9:7d:fa:28:42:31:1e:09:c7:5c:
4d:14:bf:38:60:b4:12:04:9d:ab:86:56:00:2e:57:
3a:1e:c3:d6:03:d5:d4:29:63:4d:ea:46:72:86:66:
9e:6a:d9:ad:e6:57:59:f7:df:9b:24:08:57:58:26:
b3:c7:61:f0:a3:12:02:77:d3:e8:8c:56:5a:fa:24:
6f:65:a4:f9:04:c0:eb:6f:b2:89:e3:f7:e3:85:ab:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A5:59:E1:E0:35:41:6A:5D:4F:D5:90:E9:0A:C7:E1:75:6C:80:66
X509v3 Authority Key Identifier:
keyid:87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/3130332e36362e36382e302f32342d3234203d3e20313431363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.68.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1c:e1:22:fe:e6:64:5e:79:3a:54:ba:7e:29:aa:eb:76:b6:
d0:2b:82:1c:26:7a:73:00:06:2c:d0:52:67:ba:bb:b9:50:ad:
3e:71:a7:37:26:e8:23:f0:78:be:3a:50:37:45:f6:ea:75:29:
f8:1c:9d:9a:c8:27:e1:fc:d9:c4:ca:f6:d8:9b:82:93:70:75:
d8:15:b6:5d:d3:44:67:2f:a5:59:72:bb:ab:5a:3d:a1:a9:62:
c4:68:54:c3:d7:75:c9:39:c1:2a:6b:ce:ee:31:6a:66:1f:1e:
24:6e:cf:34:de:c0:37:36:34:1d:c2:fe:a4:b2:7a:df:fc:7b:
fa:96:75:0b:af:47:79:93:3f:94:aa:f3:91:ec:be:b6:dd:be:
d7:38:7a:d0:0b:6e:3a:fb:f4:25:a1:8a:d6:ac:4b:6d:97:67:
7d:5e:ba:2e:4d:86:64:95:a8:b3:4f:ed:7a:1c:33:57:f6:98:
6a:29:d9:c5:87:2a:d7:78:e8:86:16:b1:93:77:a2:c5:82:70:
b9:35:ee:7f:ac:59:eb:de:b9:8c:37:c3:e4:fd:06:f4:3b:f3:
16:73:e2:f2:f6:70:2e:9b:3e:e4:12:c7:ad:f8:da:75:f7:00:
ba:20:0e:83:f4:c3:98:b7:f4:1b:5c:04:4e:cf:0d:64:6b:2f:
2e:cd:8c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:13 2026 by rpki-client