
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa
File: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (raw, json)
Hash identifier: edm1TV/7umFF7e1kNKXURZcIakqU8CWQ1lkJU/ljN7I=
Subject key identifier: 9F:08:5D:28:31:BD:27:49:EA:58:49:6A:79:ED:4F:FF:90:AA:77:3E
Certificate issuer: /CN=DDF88B435837261B13DE2248E2A856AB45CECC0B
Certificate serial: 6539C28B70F0D87D1C01751C59FE354502B105FD
Authority key identifier: DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa
Signing time: Sun 03 May 2026 02:59:17 +0000
ROA not before: Sun 03 May 2026 02:54:17 +0000
ROA not after: Sun 02 May 2027 02:59:17 +0000
asID: 140423
IP address blocks: 103.191.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl
rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:39:c2:8b:70:f0:d8:7d:1c:01:75:1c:59:fe:35:45:02:b1:05:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDF88B435837261B13DE2248E2A856AB45CECC0B
Validity
Not Before: May 3 02:54:17 2026 GMT
Not After : May 2 02:59:17 2027 GMT
Subject: CN=9F085D2831BD2749EA58496A79ED4FFF90AA773E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:a3:c5:b9:20:4c:af:1e:b3:0d:35:33:c8:
91:e8:7c:1b:f9:29:eb:55:03:3c:11:42:63:88:20:
f6:55:a6:52:62:f6:71:11:3b:e4:d1:10:da:3d:16:
af:70:1b:e6:05:3b:31:68:b8:86:58:62:93:9c:33:
7a:25:61:c9:51:cf:3e:a3:19:49:13:fd:23:bd:bd:
66:c5:f5:a5:b4:ab:42:1b:15:74:60:d7:be:0b:bf:
62:11:97:39:cb:f1:76:39:1f:be:46:a6:be:89:14:
7e:f6:02:09:83:08:a7:65:e3:c5:68:56:cc:72:21:
b5:de:c3:e7:f1:a9:e8:5a:6d:76:51:62:0e:d2:af:
d7:96:90:95:bf:c5:fd:6d:b2:ac:2b:a8:da:15:29:
9b:dc:95:d4:c3:59:94:70:8a:fb:45:4f:15:5c:6a:
7a:9c:a6:72:5c:dc:9a:d3:37:be:ff:60:4e:9d:06:
7a:54:8a:40:4a:1d:46:4f:ac:46:00:4d:55:3f:52:
a6:12:f7:a3:88:d0:ff:f8:41:84:29:6d:5c:dc:df:
b4:22:89:60:81:04:a0:af:55:3a:03:8e:08:ba:c9:
2b:bf:d1:62:4c:ec:18:68:9f:26:e9:08:0a:f2:52:
2d:24:4c:bf:ed:6a:5c:20:c8:ba:b1:da:7c:07:5c:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:08:5D:28:31:BD:27:49:EA:58:49:6A:79:ED:4F:FF:90:AA:77:3E
X509v3 Authority Key Identifier:
keyid:DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:25:36:3d:f8:18:48:d2:9d:0a:96:61:fd:d6:a0:a1:52:62:
9b:35:fa:dc:2a:ef:f1:d5:e0:dc:65:f4:14:15:d0:5c:12:b2:
39:27:ae:9f:38:5d:28:30:cb:a6:b0:40:90:8c:77:38:2e:f7:
b3:a9:b8:4a:21:76:e6:da:ea:e0:a7:aa:e9:e7:ee:7c:82:cf:
3a:89:05:d1:ed:4f:d9:4b:05:21:cd:c2:63:18:f6:d0:a3:d4:
4e:02:6a:53:0d:2d:99:64:23:19:90:33:b5:a0:45:48:13:ad:
4c:b6:47:1c:7d:54:7b:79:40:e0:7f:34:59:fe:77:b4:e9:0f:
92:2e:c4:85:4a:69:f5:6e:6c:46:0a:96:16:b4:e1:22:0f:dc:
43:2f:88:cd:85:2a:0b:df:f6:49:f8:43:61:9d:b9:0e:aa:b3:
0f:fe:ea:2b:1c:d0:bb:37:80:3a:80:be:a8:f7:2b:53:cf:2b:
24:8f:3e:25:bf:b6:b7:da:60:13:db:c1:66:48:5b:cc:61:4f:
57:24:57:02:65:28:ec:8b:38:84:ec:3d:88:9f:8d:c2:fa:4e:
b8:af:5f:a7:0a:ee:f0:03:28:e3:38:81:a4:f7:68:68:f6:d4:
58:16:cd:fd:56:7c:a8:b6:1f:68:57:5a:ec:01:0c:33:eb:48:
d9:c6:0b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:30 2026 by rpki-client