
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa
File: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (raw, json)
Hash identifier: mt9y4ArG2gRgvhKLs+xygsf6wYJsNzK3vkSOg2Yasms=
Subject key identifier: FE:C1:47:C9:52:B4:B8:51:30:A3:65:76:65:AD:61:E0:A8:28:63:A6
Certificate issuer: /CN=8DD710534DF68AAB08361EE28306B8FDEE71D144
Certificate serial: 583976F6B1AA02A630840F90C298BB51267A64A8
Authority key identifier: 8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa
Signing time: Sun 03 May 2026 03:01:43 +0000
ROA not before: Sun 03 May 2026 02:56:43 +0000
ROA not after: Sun 02 May 2027 03:01:43 +0000
asID: 45317
IP address blocks: 103.158.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl
rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:39:76:f6:b1:aa:02:a6:30:84:0f:90:c2:98:bb:51:26:7a:64:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DD710534DF68AAB08361EE28306B8FDEE71D144
Validity
Not Before: May 3 02:56:43 2026 GMT
Not After : May 2 03:01:43 2027 GMT
Subject: CN=FEC147C952B4B85130A3657665AD61E0A82863A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:2a:0a:aa:4a:04:1f:d8:97:6c:f2:fe:22:
04:0d:d5:57:f2:06:4d:46:0a:e3:6d:04:1a:ea:47:
5b:8d:67:1f:b5:72:e5:a7:4b:b8:f7:d8:72:1a:1e:
18:e5:08:3e:36:98:df:e7:78:cf:80:ab:93:29:07:
7a:df:1d:40:a9:11:5a:32:84:24:7c:92:11:85:77:
96:98:6e:73:80:ec:93:a8:f8:45:61:6d:d3:38:70:
d2:97:23:26:c0:53:7b:b3:ea:9a:5b:1d:86:6d:6f:
01:48:e5:92:ec:45:ca:b2:e7:c1:60:32:53:51:70:
be:aa:f4:d3:94:b9:e9:28:28:f5:56:03:b7:51:c9:
61:fd:86:b4:7f:32:cc:8d:04:cc:a9:fa:23:b4:1e:
69:ec:a6:e4:3b:36:fb:e6:67:79:21:e7:31:a0:c6:
0c:9b:15:2c:40:bc:f7:83:96:ab:f3:89:86:42:ff:
3f:d8:80:47:a0:54:c7:99:7a:7c:f2:3e:e4:6e:2d:
33:0e:c3:c4:9a:13:59:3e:a2:99:c4:27:aa:78:1f:
e8:82:ed:db:90:eb:56:73:9e:2d:6d:81:80:25:a8:
78:aa:29:3a:de:d4:83:cd:40:31:d7:21:c8:31:74:
69:0a:3f:b6:58:28:23:d3:f2:d2:ac:7a:4f:ae:64:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C1:47:C9:52:B4:B8:51:30:A3:65:76:65:AD:61:E0:A8:28:63:A6
X509v3 Authority Key Identifier:
keyid:8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.103.0/24
Signature Algorithm: sha256WithRSAEncryption
78:61:d0:6b:6e:b1:69:45:6c:f8:78:82:a9:08:64:7b:fe:c9:
87:b0:f1:ea:bf:93:36:be:a3:d4:58:20:cc:79:da:a4:66:ce:
65:86:e5:ba:77:f7:2c:aa:06:a0:3e:bf:2f:52:d9:f5:2e:fe:
e1:63:92:7f:b7:7c:4a:43:e9:ed:0b:08:09:ef:02:22:e2:11:
3d:1f:19:17:d1:92:06:61:14:4d:73:01:da:57:d4:7d:5e:c1:
ef:d7:9c:b5:fe:e6:d4:38:61:85:26:c7:ed:3b:7c:c3:aa:30:
87:6c:57:f4:03:69:bb:e0:58:06:ad:5f:ab:70:6f:d0:9a:27:
0e:1e:a8:9f:d1:a0:0b:d8:74:98:c7:70:59:8e:2f:17:2b:c0:
e8:4a:a6:11:14:d7:93:e6:6b:62:f3:33:ac:4f:9d:48:9b:a2:
3c:23:f6:fb:b7:00:d4:94:ca:32:11:3b:9a:e6:0b:8d:3e:7e:
d4:50:39:17:71:d5:df:a6:a7:f5:bc:4a:d2:59:14:6f:48:02:
5d:7a:4c:6f:5b:5f:4e:9b:ee:95:a3:c5:f4:7a:db:8e:3c:88:
6e:03:7f:65:c2:51:4f:62:db:03:7a:58:e6:ba:7d:fd:6a:19:
e1:75:28:7c:6f:91:51:6b:61:ec:b4:79:d5:38:4b:36:fb:d0:
88:7e:b7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:06 2026 by rpki-client