
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa
File: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (raw, json)
Hash identifier: yfH9V+v7CqjVW6BwpLw/uKH0EvFG6umOPa6WyO7b7X0=
Subject key identifier: 50:B0:FB:6F:AD:D2:EE:A9:3D:10:1D:39:29:F6:CD:6C:AA:CE:87:C2
Certificate issuer: /CN=DDF88B435837261B13DE2248E2A856AB45CECC0B
Certificate serial: 3CC14F4E9078B760C097E0F64EB8327BBBD6BDE8
Authority key identifier: DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa
Signing time: Sun 03 May 2026 02:59:16 +0000
ROA not before: Sun 03 May 2026 02:54:16 +0000
ROA not after: Sun 02 May 2027 02:59:16 +0000
asID: 140423
IP address blocks: 103.191.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl
rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c1:4f:4e:90:78:b7:60:c0:97:e0:f6:4e:b8:32:7b:bb:d6:bd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDF88B435837261B13DE2248E2A856AB45CECC0B
Validity
Not Before: May 3 02:54:16 2026 GMT
Not After : May 2 02:59:16 2027 GMT
Subject: CN=50B0FB6FADD2EEA93D101D3929F6CD6CAACE87C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:7b:ef:eb:c7:f6:77:71:0c:96:91:74:57:
9f:63:99:36:a4:9b:8d:0d:1c:e3:54:de:d1:cd:13:
ef:1f:1f:8e:b1:a1:49:74:91:1a:a0:23:1d:22:f2:
92:cc:7d:e1:8a:80:32:81:a7:52:20:c5:70:67:3a:
98:b0:25:19:37:31:e0:20:d8:ab:99:fa:89:de:46:
d2:56:8c:c6:8a:93:50:91:b6:df:b3:b2:cb:c2:97:
f5:0a:39:64:9b:89:40:97:c9:c1:9b:d4:79:28:0d:
00:b6:d8:77:70:34:55:61:1c:b6:f5:9e:53:27:3a:
20:04:55:61:39:9b:08:be:b2:d9:8e:2d:d1:20:79:
cd:bb:88:bd:f3:eb:5a:69:d8:de:b2:63:d4:19:a1:
42:40:11:9f:d5:ff:9f:46:ca:17:a1:6c:5f:45:35:
16:24:50:45:cc:02:99:fb:70:ce:6f:83:42:49:7f:
c9:a0:d7:9f:ba:05:dc:5c:df:e0:55:ce:e5:cc:c2:
32:15:68:35:53:3b:32:43:ec:d9:20:e8:eb:a4:c8:
a8:85:b0:d6:29:4f:7e:0e:3c:c6:1a:85:28:82:ea:
cc:6d:38:5b:85:c9:64:36:95:bf:d3:49:a0:71:05:
fd:2f:8c:ac:bc:6a:e6:25:09:8f:aa:63:0d:dd:cc:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B0:FB:6F:AD:D2:EE:A9:3D:10:1D:39:29:F6:CD:6C:AA:CE:87:C2
X509v3 Authority Key Identifier:
keyid:DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.60.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:70:9b:2c:10:02:b3:01:c8:4a:40:f3:03:f0:f0:fa:2e:08:
98:d4:62:34:c9:62:71:66:28:13:4f:57:58:5d:1b:b7:18:26:
1e:eb:ff:54:fc:0a:ac:71:4f:74:e2:3e:25:3a:65:b2:c3:9e:
32:b2:27:39:09:48:52:0f:29:3c:0c:31:9c:4d:79:66:89:3f:
e2:93:41:85:b2:14:86:28:e7:79:20:ac:51:6c:f1:8f:1d:83:
d9:ba:cb:65:8b:0d:b3:56:28:b4:25:f3:35:c7:54:c1:ab:97:
23:99:4a:1a:2d:ac:7c:77:0e:90:4d:6b:b7:e9:2f:e2:4b:5b:
c7:a3:4c:0c:b9:23:0f:b2:8c:1a:a1:84:8f:02:e5:54:b2:d9:
5e:f9:fc:c4:ee:1b:65:6a:cf:88:9e:e4:ab:4a:01:84:1b:1c:
e0:ca:60:41:ef:34:62:a5:64:fa:94:15:ce:a4:ee:55:ab:23:
0d:34:6d:9e:fb:70:53:e6:1a:95:c6:be:30:ca:4c:c1:81:5b:
73:bb:bb:c5:a4:16:ae:7c:96:d3:dd:22:1f:db:36:82:1a:cd:
d9:d7:a6:4d:9a:7d:43:38:ad:6e:47:d8:c9:20:d1:c4:92:4e:
97:2b:08:31:c2:9d:bc:ab:df:b1:40:cd:a4:07:08:bf:88:84:
11:c2:2d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:06 2026 by rpki-client