
$ rpki-client -vvf rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa
File: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (raw, json)
Hash identifier: jDwYR0eXqs/UReeXAyA7K2tU1AiHfANmWKIdRhF2du0=
Subject key identifier: AB:C7:84:0B:3A:A0:ED:26:6E:B1:9C:06:68:86:62:0A:12:DC:DB:3F
Certificate issuer: /CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
Certificate serial: 2FC0679D98E531D1A42B999E63230A6D7C78EF04
Authority key identifier: 76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa
Signing time: Sun 03 May 2026 02:59:44 +0000
ROA not before: Sun 03 May 2026 02:54:44 +0000
ROA not after: Sun 02 May 2027 02:59:44 +0000
asID: 59278
IP address blocks: 103.227.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl
rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c0:67:9d:98:e5:31:d1:a4:2b:99:9e:63:23:0a:6d:7c:78:ef:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
Validity
Not Before: May 3 02:54:44 2026 GMT
Not After : May 2 02:59:44 2027 GMT
Subject: CN=ABC7840B3AA0ED266EB19C066886620A12DCDB3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:85:18:44:8e:ce:18:ac:de:e2:94:e5:1f:
b3:c3:76:97:b2:e5:02:92:7f:b5:36:7b:b6:29:85:
62:ce:66:6f:9f:7e:8f:75:b9:6c:ac:93:b8:17:15:
aa:72:db:d1:f5:64:46:95:8e:28:d4:75:87:7d:14:
69:b4:b0:e7:fb:36:ec:3f:f7:94:a3:78:4a:7b:59:
8e:c3:53:f5:c8:60:f5:01:f8:17:69:b6:44:5b:08:
b4:1a:bd:6d:8a:b4:44:a6:32:df:b4:ff:6d:d6:f6:
ce:ab:d6:c5:60:11:1b:c8:b1:f4:fb:84:e2:a6:69:
e8:b2:38:92:30:ce:e6:0b:dd:4c:3d:45:50:25:b5:
1a:c1:88:40:ae:ed:14:63:20:3b:0f:31:8d:59:4b:
e4:c7:c1:62:b8:fe:22:cb:b9:19:43:6b:a3:55:4b:
d2:68:06:b2:8a:e6:f6:57:8b:d7:6e:4a:50:7f:4f:
20:73:0a:43:80:ef:19:08:f4:26:e3:aa:2b:1c:59:
17:a6:26:c8:e7:89:d2:81:71:2b:dd:37:4d:e6:8e:
f2:e8:98:28:5c:71:d8:24:c2:34:76:64:59:e6:f5:
9c:76:d5:10:4a:40:35:2e:51:c6:11:75:0a:fd:25:
6e:5a:6b:71:ed:88:ad:1d:80:76:bd:e8:a3:f6:37:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C7:84:0B:3A:A0:ED:26:6E:B1:9C:06:68:86:62:0A:12:DC:DB:3F
X509v3 Authority Key Identifier:
keyid:76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.240.0/22
Signature Algorithm: sha256WithRSAEncryption
97:51:e9:8f:9a:3d:e0:12:f9:b6:b7:df:6f:4a:a6:e8:50:cb:
86:d2:41:58:f4:dd:8a:79:69:3d:19:3e:3a:0f:95:01:a0:81:
db:f9:f3:e3:e8:38:21:c4:85:87:88:d4:2c:9f:b8:14:cf:07:
2e:e8:94:08:f9:3e:aa:55:a0:da:8c:cf:eb:ae:f7:cf:1d:eb:
e8:d9:63:b8:3e:c6:6a:87:a1:9b:42:d0:af:7a:71:14:e7:29:
f7:f9:35:c5:36:4f:be:ba:95:48:cd:43:cd:0f:51:d0:78:44:
1b:63:34:c8:f1:ac:32:de:1b:48:63:d9:3d:18:72:7f:83:e2:
60:dd:c2:95:5d:ec:74:ce:bb:51:79:69:55:1e:17:c8:73:94:
0e:33:ea:fa:26:94:58:a3:60:2d:27:f0:53:a0:87:05:8d:96:
f4:ae:3e:72:74:eb:a4:93:0c:c1:17:bb:8b:06:70:42:4a:b9:
9c:03:cf:07:58:3b:95:e3:d4:37:6c:05:96:b2:ec:b3:8e:ae:
0b:2e:e2:90:15:8f:37:23:37:ea:40:7d:dc:84:da:18:91:8b:
1e:ea:04:50:47:01:ac:cf:2c:8e:1b:0d:f7:d9:6d:e2:b9:67:
04:3c:7e:0f:39:a8:34:3e:b4:53:a1:78:b8:93:1d:d8:fc:c4:
d5:45:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:06 2026 by rpki-client