
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa
File: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (raw, json)
Hash identifier: I73d9iRN8q8Px3/P7wCZutSF5ZpcXS8cmnlSVjIS1X0=
Subject key identifier: 15:E5:B9:C9:04:79:2F:F7:0A:8F:00:89:33:A8:8A:42:4F:18:62:73
Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial: 68C0A969D38B7C2B708AEFB0BE36F4ED50BD1A64
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa
Signing time: Sun 03 May 2026 02:59:37 +0000
ROA not before: Sun 03 May 2026 02:54:37 +0000
ROA not after: Sun 02 May 2027 02:59:37 +0000
asID: 55666
IP address blocks: 103.17.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c0:a9:69:d3:8b:7c:2b:70:8a:ef:b0:be:36:f4:ed:50:bd:1a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Validity
Not Before: May 3 02:54:37 2026 GMT
Not After : May 2 02:59:37 2027 GMT
Subject: CN=15E5B9C904792FF70A8F008933A88A424F186273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:60:9f:95:a5:ae:96:1e:76:43:fc:bb:6a:
d9:3c:3a:75:52:35:95:82:25:1a:7f:00:22:7f:8f:
09:5f:a0:5f:f0:5c:50:63:ed:78:4e:ff:c0:7f:ea:
7c:ac:2d:f7:8f:3a:a0:e4:86:75:7a:c6:fa:b8:7f:
4e:df:1b:c3:9c:94:39:16:1e:54:e7:34:65:cf:bf:
1c:35:6c:fd:5d:e5:d3:0d:97:65:68:b3:ae:36:39:
d9:13:f2:1b:ad:6a:d4:61:bc:86:3b:8b:4a:fe:f0:
5a:0f:0d:35:bc:69:f3:80:31:43:ad:81:d6:85:1f:
8f:ce:c6:b5:8b:eb:e6:d3:79:e2:c4:de:ed:56:f7:
42:58:f2:b3:6f:34:cb:f0:2b:40:1e:4c:ee:37:b3:
be:24:18:61:6e:d5:4c:77:9e:98:ff:1e:c9:a6:8c:
36:e8:6a:7e:b5:b3:26:0f:06:f4:7a:a7:6e:5d:8a:
32:54:b2:d9:09:0f:b7:6b:eb:f0:3c:51:d7:51:cd:
4c:7e:07:76:a3:9f:87:9c:c2:1f:94:b8:98:c3:a4:
83:23:fd:3a:fa:96:31:cc:f2:98:c0:b0:54:42:40:
4c:29:b0:c3:68:f5:78:33:ec:7f:8b:4b:c9:18:23:
a4:ae:e2:fd:8b:89:8b:4b:af:df:15:d2:c5:a1:eb:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E5:B9:C9:04:79:2F:F7:0A:8F:00:89:33:A8:8A:42:4F:18:62:73
X509v3 Authority Key Identifier:
keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.244.0/22
Signature Algorithm: sha256WithRSAEncryption
52:92:68:37:47:fa:94:b7:05:5f:f1:8b:07:9f:2b:50:92:c9:
09:38:c4:c8:39:89:95:23:b2:72:b3:27:f4:08:4e:9e:f5:e9:
ac:7f:2e:05:d9:a9:5f:da:3e:3b:8b:a3:32:f8:24:bb:b8:e8:
e3:51:ce:a2:07:bc:a3:5b:2c:fd:de:0b:7b:6d:4b:8e:39:4b:
07:95:b3:dd:0d:7b:7e:64:db:48:f7:b4:c1:20:ee:3a:75:a2:
fa:1c:52:74:b7:d2:35:89:ce:dc:58:4f:8b:34:91:33:81:4d:
9f:08:9e:fd:4e:da:0e:a2:0f:f9:fa:b3:7f:a9:b9:ff:ca:b3:
84:a9:8f:36:54:73:0f:cc:ba:e1:99:9e:63:cd:3f:00:4d:87:
23:86:89:e8:d8:d6:63:ab:52:83:bf:9e:f1:b6:94:b1:2f:a6:
84:dd:cd:7c:8b:d5:55:4c:0c:f2:f9:42:c1:d5:5a:0f:09:30:
02:f6:71:02:b3:01:de:42:65:c5:8f:0a:ab:6b:41:cd:50:57:
ad:b7:cd:31:e8:0d:50:ca:a0:dc:f7:db:1b:ff:13:ab:80:e0:
34:62:65:b4:87:8a:ee:5e:9b:c4:15:2b:c3:bf:c9:81:5f:e7:
67:91:24:fc:e6:d3:ac:f3:76:63:a9:fb:7f:e8:78:b9:2e:65:
40:5c:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:38 2026 by rpki-client