
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa
File: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (raw, json)
Hash identifier: /NpblNWeDyruUPm/IDhGAws5AddnYBZqkNeH/J3r+Ao=
Subject key identifier: B9:1C:C1:DD:7F:66:DF:07:36:7A:61:FD:D9:02:70:C2:58:F9:E7:BF
Certificate issuer: /CN=DFBD8473BE5516B109B5A1791D9DCBDF67230456
Certificate serial: 68531F5002B61C21EF846D71EC2011B6AB55B536
Authority key identifier: DF:BD:84:73:BE:55:16:B1:09:B5:A1:79:1D:9D:CB:DF:67:23:04:56
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa
Signing time: Sun 03 May 2026 03:00:52 +0000
ROA not before: Sun 03 May 2026 02:55:52 +0000
ROA not after: Sun 02 May 2027 03:00:52 +0000
asID: 150486
IP address blocks: 103.78.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl
rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:53:1f:50:02:b6:1c:21:ef:84:6d:71:ec:20:11:b6:ab:55:b5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFBD8473BE5516B109B5A1791D9DCBDF67230456
Validity
Not Before: May 3 02:55:52 2026 GMT
Not After : May 2 03:00:52 2027 GMT
Subject: CN=B91CC1DD7F66DF07367A61FDD90270C258F9E7BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:26:60:80:d8:58:68:6e:9c:d6:0a:1b:45:
6b:a1:dc:de:b3:4b:c3:14:3d:d1:b6:17:aa:50:27:
e4:7e:df:29:5b:23:86:43:41:05:07:4c:99:90:66:
c2:4a:ec:cc:de:4a:c9:76:bf:87:33:53:cb:d6:50:
f0:9c:a5:94:5b:8b:07:c5:2b:00:b7:61:01:f7:52:
10:49:17:ca:df:bc:f6:1a:07:d2:4f:ca:e8:0a:cd:
cb:80:e6:b3:33:0b:6f:a9:4e:91:0c:00:60:c8:da:
3f:45:61:35:ce:78:1b:fe:58:ae:da:2c:39:61:3e:
57:5c:ee:7e:64:aa:7f:dc:19:dc:d6:b0:40:96:dd:
ac:9d:aa:7a:9b:42:fc:bf:df:4e:c0:6b:29:bc:89:
48:96:a1:81:20:8b:45:00:fc:85:49:83:20:b3:4a:
68:d2:49:59:5c:3b:69:f1:9b:43:6d:84:7c:23:b1:
17:7e:47:a0:08:28:a1:45:de:6b:85:b5:df:79:bb:
a1:78:89:46:5e:90:7d:c3:50:7b:f1:ff:56:99:62:
0a:99:92:c1:6a:75:8f:e0:d2:93:98:e4:a1:83:c2:
e4:47:ce:f0:6f:6c:23:10:4e:35:58:63:26:c9:8a:
01:97:8f:4b:11:e9:d8:33:de:88:f7:19:f7:86:e4:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1C:C1:DD:7F:66:DF:07:36:7A:61:FD:D9:02:70:C2:58:F9:E7:BF
X509v3 Authority Key Identifier:
keyid:DF:BD:84:73:BE:55:16:B1:09:B5:A1:79:1D:9D:CB:DF:67:23:04:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/DFBD8473BE5516B109B5A1791D9DCBDF67230456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFBD8473BE5516B109B5A1791D9DCBDF67230456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.78.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:39:7e:a1:80:85:c3:5a:56:60:44:44:90:59:42:82:33:f8:
85:76:6c:d9:74:c6:83:58:65:bc:c2:0d:7a:79:2a:25:0d:f5:
87:20:a3:9d:f1:c8:bb:f1:39:17:d7:ec:35:8c:71:6f:36:c2:
50:c0:23:49:f7:86:e0:7a:87:49:da:f2:ef:de:1e:a8:2e:11:
fe:ee:66:dd:1a:c3:25:ae:bf:38:e5:95:c3:27:08:d0:74:3f:
aa:d1:b2:21:dc:1a:ea:19:fc:68:a7:59:2e:be:88:51:60:cb:
dc:32:a6:81:7e:0c:49:70:7e:c0:a0:38:2b:d2:4d:67:05:4c:
85:e0:39:08:47:10:e1:39:54:61:be:83:84:86:aa:ef:31:b8:
f5:6e:b9:c0:87:2c:99:b4:b3:85:9e:95:40:e5:78:37:ee:4d:
e1:9e:1d:c3:c4:3d:b0:e9:04:1e:71:5d:ce:9a:eb:a0:ad:76:
45:c9:c5:d7:34:2a:72:b2:90:b7:f0:9b:26:20:cb:6e:e3:37:
17:40:fc:d6:83:21:31:72:6e:58:59:63:2d:a0:12:a0:6d:9c:
9f:f4:37:36:5f:9c:e1:da:55:7d:3c:a2:98:c6:bc:bc:56:56:
9e:ab:c2:4f:41:a5:ba:5c:34:2e:58:8e:b7:94:b9:e9:2e:e8:
ab:12:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:51 2026 by rpki-client