
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa
File: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (raw, json)
Hash identifier: djEgtSTkE/m5IayWnkoTKB0EhOrsppytUQzWTVEnG/A=
Subject key identifier: F5:29:41:74:DF:A0:CB:87:F1:0B:6A:CC:FE:C1:E3:0E:C0:0B:AF:53
Certificate issuer: /CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
Certificate serial: 496EB7C25C647B1FD53D66842859878E7AA94DC8
Authority key identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa
Signing time: Sun 03 May 2026 03:00:26 +0000
ROA not before: Sun 03 May 2026 02:55:26 +0000
ROA not after: Sun 02 May 2027 03:00:26 +0000
asID: 138884
IP address blocks: 103.138.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl
rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6e:b7:c2:5c:64:7b:1f:d5:3d:66:84:28:59:87:8e:7a:a9:4d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
Validity
Not Before: May 3 02:55:26 2026 GMT
Not After : May 2 03:00:26 2027 GMT
Subject: CN=F5294174DFA0CB87F10B6ACCFEC1E30EC00BAF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:93:58:0a:57:e4:c3:70:24:df:87:35:8e:
b3:3f:68:30:4c:6e:ee:46:cc:38:de:4c:13:04:75:
f2:76:7c:2a:52:26:d4:1f:bc:be:de:cd:17:69:3f:
f7:09:9d:42:5b:89:4d:e7:b1:3d:c7:b2:6d:92:9f:
eb:b0:75:5c:71:b8:b8:6a:1a:4a:e0:c9:82:7e:6f:
b4:9c:6e:01:18:75:56:df:40:c6:38:b5:a5:cf:b5:
02:54:e7:59:88:48:53:df:bf:15:fe:37:3c:f7:80:
d9:11:86:94:42:95:38:03:9a:f8:1c:88:41:7a:d8:
12:1a:a4:17:bb:f7:47:31:7d:4d:5e:8f:de:15:03:
f1:ca:33:38:a1:40:fc:76:ed:fd:18:1e:b2:42:18:
ac:1b:05:e1:ec:1c:f0:43:4b:5b:f8:f4:8f:3d:65:
a2:d0:8b:ab:be:70:47:fb:d0:3b:de:39:12:97:69:
5c:6b:16:9f:fb:53:70:56:c7:84:5e:3c:99:61:38:
4d:a4:0f:84:85:fa:b0:8b:fe:8d:b9:2b:33:45:de:
76:a3:5a:a4:1a:99:1d:66:57:b3:60:cf:5a:e2:fc:
dc:74:89:9c:e1:f0:4c:d1:f7:6b:72:9d:98:7a:2b:
b6:e5:88:d3:a1:5d:59:08:57:04:96:3b:c3:b5:ae:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:41:74:DF:A0:CB:87:F1:0B:6A:CC:FE:C1:E3:0E:C0:0B:AF:53
X509v3 Authority Key Identifier:
keyid:5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.70.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a3:28:4a:e5:94:74:44:2a:88:75:d7:db:9f:e1:d2:e0:aa:
7d:66:8e:ac:81:6f:6a:51:4d:38:ae:0e:ab:2c:b1:5b:60:f4:
66:a8:1c:af:10:4c:ba:a7:d8:28:c1:aa:67:61:f4:5c:8e:6f:
41:31:92:fa:05:c9:10:65:c1:32:0a:1a:58:06:fb:1a:db:27:
81:e0:7a:56:47:b2:73:56:23:1f:fa:26:03:46:51:33:30:e4:
4c:bc:18:aa:eb:5f:4b:f2:d9:e3:a7:02:4a:12:88:55:2f:dd:
8e:e2:2a:4c:99:f1:4e:67:7e:d2:d6:5e:c9:45:0c:99:ca:7e:
f9:19:54:ee:e4:f3:26:49:da:78:22:01:e9:9b:bb:01:e1:54:
bf:77:b0:63:dd:ae:4f:8e:35:54:b4:72:7e:1d:f4:7b:7e:58:
15:a0:7a:58:29:b6:75:88:bb:22:cb:d8:c3:d8:32:a4:b2:b2:
3d:92:cc:ba:f6:7a:ae:50:e5:ce:7a:c4:30:eb:cf:41:30:e2:
aa:14:5f:a2:87:de:eb:e2:af:1d:8f:09:82:ea:7f:57:c7:b6:
03:30:39:92:f9:10:33:cd:38:ab:24:a7:f0:61:0c:08:be:2b:
75:2a:42:2e:0c:8f:06:9f:dc:b0:53:5b:83:e0:79:fc:f7:c0:
4c:54:4d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:47 2026 by rpki-client