
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa
File: 3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa (raw, json)
Hash identifier: F8rn8naCPvDCkUhjOQElNO8VO2STo0GIaHG7gs8zRHY=
Subject key identifier: F0:5B:DC:89:B1:6D:06:4B:A3:D4:62:BB:B3:25:E6:F6:BD:3B:BA:4B
Certificate issuer: /CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
Certificate serial: 643046FF7037D01C806FFE5D8D5EB7DC206A4E84
Authority key identifier: BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa
Signing time: Sun 03 May 2026 02:58:21 +0000
ROA not before: Sun 03 May 2026 02:53:21 +0000
ROA not after: Sun 02 May 2027 02:58:21 +0000
asID: 142361
IP address blocks: 103.170.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl
rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:30:46:ff:70:37:d0:1c:80:6f:fe:5d:8d:5e:b7:dc:20:6a:4e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
Validity
Not Before: May 3 02:53:21 2026 GMT
Not After : May 2 02:58:21 2027 GMT
Subject: CN=F05BDC89B16D064BA3D462BBB325E6F6BD3BBA4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:2e:8c:26:35:21:14:fa:85:e8:e9:98:fd:
38:72:7a:33:93:27:a8:01:3c:7e:5a:cd:f6:ed:b8:
1f:0d:f9:3c:99:f7:29:79:2f:7f:2f:5b:51:6e:91:
42:12:4a:6c:68:79:6e:a7:cf:1e:f5:e2:30:78:e9:
21:cb:8e:14:54:0b:b6:b9:31:7b:9b:90:ef:e2:13:
26:5a:d6:c6:6e:8b:34:84:3d:63:ad:b4:6f:56:b0:
fc:a9:f7:29:2e:44:52:6b:dd:49:ee:20:e7:ae:38:
28:a9:b5:d1:35:13:40:9c:92:02:cb:c6:41:4a:9a:
be:3e:f5:71:fe:b1:ec:e5:de:e7:de:c6:0d:fd:88:
9e:15:0c:f8:b2:be:33:cd:d5:76:2c:5a:56:9a:26:
7f:17:e7:b0:94:5d:8c:73:8c:2d:3a:f1:54:bd:bb:
a6:16:35:34:90:a7:43:8e:51:80:e3:0f:e6:5e:c5:
01:45:3d:e1:64:94:b7:8b:58:e8:5b:fc:5e:6e:c5:
a2:08:a1:96:fd:65:fa:7e:b8:c2:24:4a:ea:24:b3:
c5:fb:62:ef:95:89:b8:22:99:14:c1:ee:df:44:68:
9c:ff:81:24:4b:e8:99:18:cd:ac:0e:f6:5d:68:c3:
49:e3:08:7c:7d:97:6d:78:5f:d5:54:60:d2:75:55:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5B:DC:89:B1:6D:06:4B:A3:D4:62:BB:B3:25:E6:F6:BD:3B:BA:4B
X509v3 Authority Key Identifier:
keyid:BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.32.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:74:2f:81:b3:56:94:60:e9:8a:86:51:73:56:f9:86:6d:fd:
ad:89:28:64:72:32:65:31:56:92:20:9d:55:72:57:b6:26:28:
03:c2:a7:46:c7:be:04:0b:64:32:c3:da:e7:18:a0:4c:e7:0b:
2b:f1:bf:d0:8d:b5:93:3e:95:3b:7d:00:53:5b:c4:f1:40:64:
19:48:1e:c6:b3:f1:54:02:9d:42:77:cf:b3:ca:7b:1e:4b:9a:
41:23:ba:0a:02:f1:3c:66:59:cd:89:40:93:ed:78:7e:1a:57:
91:cc:8f:92:ac:48:98:ab:40:e7:4a:35:19:23:ca:82:e1:e2:
92:8d:43:12:a9:43:2f:b6:a6:9d:54:16:b0:d7:a9:20:b3:33:
b0:6a:fc:0f:32:9b:85:79:b3:d8:c4:db:2d:db:8d:47:66:0a:
1d:0f:f2:7c:23:41:1e:dc:99:ae:00:dc:51:36:56:a3:0e:64:
55:65:c0:c9:e7:8c:62:e7:6e:e9:85:bf:58:3c:33:ea:20:58:
40:e4:27:ee:bf:79:9e:fa:85:d4:c2:ca:93:6a:11:6c:8f:7a:
64:0f:4e:27:33:71:00:8a:f9:5d:f4:2b:81:3d:8b:ed:e4:de:
d7:90:fb:89:66:19:7f:02:42:2b:c0:de:2a:05:4a:3c:43:15:
c3:db:8c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:56 2026 by rpki-client