
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa
File: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (raw, json)
Hash identifier: NrcqksrmsSbHeL16ugEy8PBgZElc8n2NevcNzHFW6Sc=
Subject key identifier: EE:8E:22:65:FD:C9:CB:75:CB:14:5D:60:0E:59:27:5D:C9:7C:70:36
Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45
Certificate serial: 7DD2F4AC8123CB525278B53FDB2ABE44F914895F
Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa
Signing time: Sun 03 May 2026 02:57:23 +0000
ROA not before: Sun 03 May 2026 02:52:23 +0000
ROA not after: Sun 02 May 2027 02:57:23 +0000
asID: 142366
IP address blocks: 103.170.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl
rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d2:f4:ac:81:23:cb:52:52:78:b5:3f:db:2a:be:44:f9:14:89:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45
Validity
Not Before: May 3 02:52:23 2026 GMT
Not After : May 2 02:57:23 2027 GMT
Subject: CN=EE8E2265FDC9CB75CB145D600E59275DC97C7036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:6b:c3:b6:ba:b1:d8:11:00:ff:b2:3a:23:
55:27:af:fb:54:f1:b3:c8:ba:fd:12:0e:89:83:a2:
29:2d:a1:26:10:06:4e:72:27:6e:08:bd:55:de:fe:
cc:b8:f1:b5:2d:ae:05:bb:1c:1b:9f:f6:a2:86:06:
42:dd:ca:8b:92:3c:b4:43:4a:f8:03:a9:4c:63:22:
23:e2:8e:1c:c2:17:75:72:92:d0:e9:d5:88:db:96:
1b:d1:9f:bb:d8:90:1c:d3:3e:ee:6b:f4:df:ab:48:
b7:65:30:74:cd:f9:8f:16:43:03:ad:f5:8f:ed:80:
04:11:45:5e:de:7d:db:59:25:55:8e:2d:25:69:bf:
99:19:7c:1c:07:c7:f5:53:03:53:a1:9f:f4:ec:d4:
04:75:5e:1e:d9:8f:b0:25:19:ca:5a:f5:52:98:dd:
cc:57:92:1f:35:3e:95:2f:e7:15:1b:2f:be:0a:be:
32:7e:26:db:e2:a6:27:a3:4f:25:73:15:78:2c:f2:
4e:6a:e8:6b:7c:1f:fe:ef:49:bf:9e:fc:37:f1:b7:
c3:55:ca:5c:46:05:31:ac:7f:90:1c:38:ed:fe:17:
50:d3:ad:6d:82:9a:60:ef:ab:84:9b:3d:f9:f8:b0:
b3:1c:b2:e6:18:df:55:7d:ca:bf:49:21:31:e7:48:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8E:22:65:FD:C9:CB:75:CB:14:5D:60:0E:59:27:5D:C9:7C:70:36
X509v3 Authority Key Identifier:
keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.31.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0d:8e:28:8a:44:6d:98:81:50:ce:f1:bd:d5:7b:a7:9d:b6:
b1:32:95:7b:23:5f:6c:e1:89:c1:95:7c:e7:83:cf:a6:d8:f7:
51:6e:99:10:18:83:3e:b5:3f:a3:5b:c3:a7:1b:df:df:19:f3:
af:5c:fe:31:16:d1:40:62:fc:cd:49:c3:86:42:57:8d:01:9c:
e3:92:92:f5:c6:63:6b:66:4d:e9:8b:5a:ed:a8:63:e5:cc:66:
98:6b:ad:27:51:9f:9c:73:e5:7e:6f:47:20:b1:fa:03:82:75:
ce:68:e9:01:42:45:94:79:16:cd:8f:ee:84:8f:5f:8a:b0:73:
6a:6c:01:fe:5c:8d:10:c2:28:59:32:82:d0:3a:58:46:c6:34:
6b:da:f5:7b:16:e9:71:a7:b4:18:14:6a:39:c1:7c:4d:af:1e:
06:4f:fe:d1:a7:00:2c:89:e9:ec:90:d2:46:6f:a4:9b:31:8c:
83:3b:f3:9a:28:e1:8f:42:63:5f:2a:2d:67:32:39:31:85:9d:
19:68:ac:a6:3a:f8:f9:d4:dd:e6:0b:ab:d6:71:f5:ad:23:96:
75:14:40:1b:d5:23:cc:74:07:26:b5:3e:fd:e8:c3:bb:fb:34:
35:57:d0:ef:97:7b:a3:1e:0c:33:05:63:0c:c9:95:ce:cf:80:
b1:fc:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:56 2026 by rpki-client