
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa
File: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (raw, json)
Hash identifier: qVGDGNhc8J+1zH3v5gLnqpqbccQ37nMtlVBvAtU2Qic=
Subject key identifier: D9:03:71:D3:F4:53:2C:2F:70:13:F4:A7:29:8D:DB:20:62:F1:A9:EC
Certificate issuer: /CN=8EE74284879D5768C14DFF59F408307443024F52
Certificate serial: 58D58D061C44C1DD2E6E5D9F6596957D69DAAD6F
Authority key identifier: 8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa
Signing time: Sun 03 May 2026 03:00:42 +0000
ROA not before: Sun 03 May 2026 02:55:42 +0000
ROA not after: Sun 02 May 2027 03:00:42 +0000
asID: 131754
IP address blocks: 103.31.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl
rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d5:8d:06:1c:44:c1:dd:2e:6e:5d:9f:65:96:95:7d:69:da:ad:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EE74284879D5768C14DFF59F408307443024F52
Validity
Not Before: May 3 02:55:42 2026 GMT
Not After : May 2 03:00:42 2027 GMT
Subject: CN=D90371D3F4532C2F7013F4A7298DDB2062F1A9EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:53:1d:b9:fd:a3:4e:f9:6b:c4:be:f6:0d:
14:84:3d:3b:42:18:79:7f:7d:6e:b4:86:ba:05:79:
7b:7a:ff:26:eb:31:8e:22:66:03:d0:a6:9b:80:ef:
96:34:6e:df:80:4f:ea:6d:09:b0:e7:ab:ba:3c:3c:
aa:e9:4d:56:67:9f:18:1f:a8:dd:03:23:ac:3a:95:
46:14:07:12:85:dd:4e:c1:5c:1d:b3:2a:94:85:47:
59:f7:bf:b5:9d:2a:f2:92:d3:5d:07:fb:53:77:8d:
87:b2:f2:ed:fc:51:5b:a7:c0:88:e7:b7:83:5f:c3:
b4:c8:ac:1c:6c:0f:f8:f0:86:74:d9:78:71:69:5d:
f8:7f:ab:08:43:9c:db:39:4d:4a:16:ad:04:d2:82:
ba:9b:f8:ce:37:5c:7f:dc:df:43:4a:58:16:9a:1e:
88:3a:28:d8:11:74:70:65:64:1c:6b:d5:fa:fb:17:
6b:7a:3a:42:f2:09:26:74:21:6f:69:23:54:d0:eb:
ed:5e:3d:30:09:81:1e:85:9f:02:b6:4a:78:d7:d2:
a7:a8:c1:e5:36:64:4b:40:30:d3:9c:5d:78:2c:f9:
d7:b7:b7:80:6b:2a:aa:e2:c2:31:e5:bc:06:9d:7e:
96:3f:6f:81:bc:db:3d:dd:cc:e2:3a:13:f2:87:d4:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:03:71:D3:F4:53:2C:2F:70:13:F4:A7:29:8D:DB:20:62:F1:A9:EC
X509v3 Authority Key Identifier:
keyid:8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.207.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2d:e2:9d:60:11:aa:ad:00:6b:5b:54:9d:fa:09:08:44:09:
db:0b:62:49:8d:d9:20:20:7e:b6:3d:48:70:a3:36:ec:67:29:
d3:c5:da:3c:b8:07:cd:48:4a:56:e3:cc:d3:a2:c6:7f:40:a9:
fd:1d:76:fc:f1:0c:4c:dc:5c:7a:40:20:01:1f:02:98:c0:f1:
1d:c4:25:83:1d:24:52:f7:62:57:45:b8:c3:e1:55:2c:22:d1:
f2:59:b9:2e:7d:74:07:b4:b6:fa:d1:05:c0:56:fa:a5:74:ff:
68:3b:ed:12:c5:37:f7:dc:b3:7f:42:e0:06:4f:00:e6:8a:0e:
be:78:d8:0e:53:1b:f6:9f:73:20:f1:17:74:39:1a:67:b8:ee:
f5:92:3b:da:fb:66:ed:4d:f8:f8:e2:12:76:9c:54:5f:77:bf:
c7:78:dd:6c:7e:5b:01:36:a8:29:07:15:86:07:46:4d:a5:f1:
f9:9b:1f:ae:b4:3b:49:87:22:07:ed:c1:fc:4c:39:cc:f9:ff:
20:2c:7c:b3:43:77:10:6f:60:ae:00:cc:33:b8:0a:54:55:39:
41:ca:7b:72:e4:d4:e7:11:08:d5:27:6c:8f:56:bd:93:1f:bb:
c5:c3:2b:94:65:e4:c2:14:b0:b5:c1:8d:c7:cf:74:64:f7:b6:
88:1a:69:77
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWNWNBhxEwd0ubl2fZZaVfWnarW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0
MzAyNEY1MjAeFw0yNjA1MDMwMjU1NDJaFw0yNzA1MDIwMzAwNDJaMDMxMTAvBgNV
BAMTKEQ5MDM3MUQzRjQ1MzJDMkY3MDEzRjRBNzI5OEREQjIwNjJGMUE5RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBd1Mduf2jTvlrxL72DRSEPTtC
GHl/fW60hroFeXt6/ybrMY4iZgPQppuA75Y0bt+AT+ptCbDnq7o8PKrpTVZnnxgf
qN0DI6w6lUYUBxKF3U7BXB2zKpSFR1n3v7WdKvKS010H+1N3jYey8u38UVunwIjn
t4Nfw7TIrBxsD/jwhnTZeHFpXfh/qwhDnNs5TUoWrQTSgrqb+M43XH/c30NKWBaa
Hog6KNgRdHBlZBxr1fr7F2t6OkLyCSZ0IW9pI1TQ6+1ePTAJgR6FnwK2SnjX0qeo
weU2ZEtAMNOcXXgs+de3t4BrKqriwjHlvAadfpY/b4G82z3dzOI6E/KH1NuRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU2QNx0/RTLC9wE/SnKY3bIGLxqewwHwYDVR0j
BBgwFoAUjudChIedV2jBTf9Z9AgwdEMCT1IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjMyZTk0NWMtZWQzZC00ODlhLTgzZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4
NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0MzAyNEY1Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84RUU3NDI4NDg3OUQ1NzY4QzE0REZGNTlGNDA4MzA3NDQzMDI0
RjUyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IzMmU5NDVjLWVkM2QtNDg5YS04
M2VkLTUwMTcyNzNkNWFhNS8wLzMxMzAzMzJlMzMzMTJlMzIzMDM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx/PMA0GCSqG
SIb3DQEBCwUAA4IBAQASLeKdYBGqrQBrW1Sd+gkIRAnbC2JJjdkgIH62PUhwozbs
ZynTxdo8uAfNSEpW48zTosZ/QKn9HXb88QxM3Fx6QCABHwKYwPEdxCWDHSRS92JX
RbjD4VUsItHyWbkufXQHtLb60QXAVvqldP9oO+0SxTf33LN/QuAGTwDmig6+eNgO
Uxv2n3Mg8Rd0ORpnuO71kjva+2btTfj44hJ2nFRfd7/HeN1sflsBNqgpBxWGB0ZN
pfH5mx+utDtJhyIH7cH8TDnM+f8gLHyzQ3cQb2CuAMwzuApUVTlBynty5NTnEQjV
J2yPVr2TH7vFwyuUZeTCFLC1wY3Hz3Rk97aIGml3
-----END CERTIFICATE-----
Generated at Wed May 13 05:47:01 2026 by rpki-client