
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa
File: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (raw, json)
Hash identifier: 3J7cimsOBRL6lk3NfIu2Oz865ovVtmYYmGTF6KPQxK8=
Subject key identifier: 7C:2A:8C:BC:D5:B9:98:5E:45:AC:87:52:23:44:09:A7:C6:3D:68:C9
Certificate issuer: /CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431
Certificate serial: 04A0F35893A1DFAB320F0555A4644F2728651B2C
Authority key identifier: 7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa
Signing time: Sun 03 May 2026 03:02:01 +0000
ROA not before: Sun 03 May 2026 02:57:01 +0000
ROA not after: Sun 02 May 2027 03:02:01 +0000
asID: 64315
IP address blocks: 103.119.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl
rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a0:f3:58:93:a1:df:ab:32:0f:05:55:a4:64:4f:27:28:65:1b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431
Validity
Not Before: May 3 02:57:01 2026 GMT
Not After : May 2 03:02:01 2027 GMT
Subject: CN=7C2A8CBCD5B9985E45AC8752234409A7C63D68C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:a7:02:14:e2:50:a7:bc:ad:72:55:f0:91:
27:eb:ef:18:ff:2c:82:b8:57:92:e3:0f:ae:2d:8d:
dd:dc:c8:fc:57:a6:7a:38:b8:95:54:e0:b9:a4:ba:
c1:b6:44:0c:66:af:ac:c1:21:94:15:10:9d:74:b4:
1e:33:d9:14:b8:65:71:05:3e:e3:3e:9b:b9:2b:26:
27:ea:25:9b:83:93:c7:0d:d1:b8:ff:3e:58:91:29:
3b:7e:cd:50:0c:86:f4:7f:30:a2:ca:0d:94:d4:67:
6c:7b:a8:fb:cd:fd:ed:0b:75:64:f5:fb:b9:6f:95:
bf:b0:63:22:5b:cd:0d:53:a6:96:31:c4:a0:25:ee:
6c:69:a5:23:21:95:4f:47:fe:c2:b9:e9:fe:b6:2c:
5c:1b:48:85:31:e2:82:ae:69:ce:11:c9:1e:64:cd:
d0:51:15:ef:0f:ad:af:d5:93:81:a9:06:8d:4f:e0:
4f:a1:5c:4f:77:af:36:d7:e3:4f:0f:ef:ef:e8:14:
a5:00:d7:44:9a:6a:ce:1b:e9:b1:b5:50:97:46:e8:
ee:67:5f:2b:5b:43:89:8e:5c:b1:47:2a:32:46:bf:
8a:68:40:df:4e:fd:be:8b:ab:a1:31:9a:38:7e:3f:
97:26:eb:c7:65:5b:37:2d:d2:28:8c:0e:08:11:63:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2A:8C:BC:D5:B9:98:5E:45:AC:87:52:23:44:09:A7:C6:3D:68:C9
X509v3 Authority Key Identifier:
keyid:7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.119.228.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:c9:3f:12:1c:f4:ca:4a:40:49:f2:bc:af:ba:84:18:c7:62:
5d:d6:28:5f:94:a4:f5:a6:df:07:77:55:9c:82:de:25:51:29:
e9:e4:69:b6:bb:66:ea:0e:94:25:6f:0a:6a:26:cb:79:59:04:
c5:85:c7:98:8a:44:2d:19:6b:71:62:22:0d:9d:3f:16:34:d7:
6b:e5:6d:9c:13:9c:59:31:b7:e2:ec:fd:b0:7e:59:80:f6:29:
bc:d3:db:18:31:7e:0b:63:c9:f4:5b:b7:47:20:37:3a:26:aa:
06:72:be:5a:69:ad:79:de:1b:9a:b0:dc:ed:8b:59:89:54:03:
30:81:a8:ef:2c:d8:93:96:c6:4d:49:94:f1:62:d8:e0:57:43:
2f:0f:00:2f:83:25:98:1a:93:9a:f4:a9:97:f9:79:34:ba:73:
3d:93:86:3c:bd:15:e2:3e:8c:00:26:26:6c:66:3a:33:24:6a:
0a:04:eb:ca:78:8a:de:ad:70:4e:e6:f1:2d:2a:e5:75:21:09:
f7:7c:13:47:f3:c8:fd:8a:98:3b:7e:28:69:34:5c:15:7f:db:
2e:46:bc:4a:fc:18:90:22:d6:e2:7c:88:78:71:4c:3b:92:18:
1f:83:98:72:80:65:3f:b4:9e:c5:19:ac:62:29:f4:a0:bd:6f:
6c:ea:32:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:32 2026 by rpki-client