
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/3130332e36362e36392e302f32342d3234203d3e203535363835.roa
File: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier: 0zJp7D5P7Wx8cncwvGTwfIjodHDRc8ua2EztHY2Ul18=
Subject key identifier: 3F:E1:77:D6:8B:37:5D:2D:5F:6B:FC:2C:44:11:5F:6A:9A:1C:4F:B1
Certificate issuer: /CN=87D1485E2D8D59808482A339E96F7B631508F371
Certificate serial: 0280F74A447EA2CA57CA9E885B8A3C796DC3EBCA
Authority key identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/3130332e36362e36392e302f32342d3234203d3e203535363835.roa
Signing time: Sun 03 May 2026 02:56:04 +0000
ROA not before: Sun 03 May 2026 02:51:04 +0000
ROA not after: Sun 02 May 2027 02:56:04 +0000
asID: 55685
IP address blocks: 103.66.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl
rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:80:f7:4a:44:7e:a2:ca:57:ca:9e:88:5b:8a:3c:79:6d:c3:eb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87D1485E2D8D59808482A339E96F7B631508F371
Validity
Not Before: May 3 02:51:04 2026 GMT
Not After : May 2 02:56:04 2027 GMT
Subject: CN=3FE177D68B375D2D5F6BFC2C44115F6A9A1C4FB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:25:d8:e3:e3:cd:76:b1:4f:66:4a:93:10:
94:5b:25:1c:80:14:ec:39:20:8b:16:88:59:4b:15:
56:e3:a4:4e:6b:93:8a:6e:a0:95:8f:b9:d6:e2:08:
39:ae:de:78:d8:5d:d6:4e:d3:37:a5:eb:9c:5c:90:
a0:8f:e5:87:ed:e5:ca:1a:07:d6:ea:b6:5c:4b:6d:
66:30:3d:e8:0e:e0:25:36:06:96:d2:d9:40:35:25:
cd:14:b6:1a:ab:e3:30:5b:b3:cd:2c:02:7b:6b:61:
20:47:73:43:df:d3:74:e0:c1:52:57:7b:1d:46:02:
0b:83:db:6c:4f:75:d4:58:a4:8a:41:b3:25:d6:65:
f1:46:67:1c:fd:4d:47:fd:14:fa:33:24:a2:87:03:
7f:55:96:21:4e:a2:0a:a1:14:81:4c:dd:0f:04:d1:
00:9c:bc:ad:b8:be:d7:0d:0e:1e:4a:3d:f9:13:ea:
c1:06:64:06:b8:ef:63:a9:91:63:e7:91:e6:55:23:
db:cd:d1:b5:01:d1:d4:9f:4a:00:fa:3b:8e:f0:ed:
cf:44:ec:a4:8d:f5:47:14:e5:78:8e:f9:8e:9e:db:
c6:99:1b:7f:e5:71:a8:87:ef:58:a1:46:d8:0e:40:
34:2a:c5:3f:29:c6:26:ec:59:4e:43:69:41:b9:65:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E1:77:D6:8B:37:5D:2D:5F:6B:FC:2C:44:11:5F:6A:9A:1C:4F:B1
X509v3 Authority Key Identifier:
keyid:87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/3130332e36362e36392e302f32342d3234203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e0:fa:46:f1:9d:18:10:49:95:b6:58:5e:03:47:82:99:04:
34:81:2a:ce:8a:09:54:e6:d7:64:d7:fa:37:0a:2e:00:fe:b6:
ee:78:15:cd:cc:9b:0e:c2:14:a5:3f:f9:1d:a3:c4:a6:15:24:
7f:4c:db:ac:28:4c:b4:96:fd:eb:17:41:69:b3:99:af:3d:ef:
63:4c:a2:7c:1c:1b:a4:63:93:c7:bc:b0:92:bc:ac:44:7f:80:
f5:7f:79:43:7f:25:5a:ae:37:bf:31:0d:8e:47:48:9c:37:76:
44:07:ab:db:28:41:bd:08:78:c1:40:cb:9a:bc:1a:1c:94:4e:
5b:97:02:b0:69:ca:5d:85:34:21:75:e9:d5:9f:e9:72:43:a1:
c8:b5:42:1d:e2:f0:c7:b4:95:05:5a:0e:97:fa:bd:94:eb:8a:
88:fe:3f:6c:ba:31:fb:9d:0b:15:24:3a:53:74:fc:00:15:fd:
48:17:ff:44:c3:bd:ca:33:49:89:94:1e:34:e3:ed:a1:9e:25:
0d:f8:30:b2:b3:df:7d:66:48:5b:f0:42:ab:06:ad:ed:a2:91:
cc:7f:05:3e:bc:7d:21:92:42:0a:0f:00:30:dd:33:02:3e:90:
00:f6:a1:62:23:5b:0a:67:83:c3:f5:58:ac:04:68:97:b1:0a:
77:99:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:32 2026 by rpki-client