
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa
File: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (raw, json)
Hash identifier: bHTkeKBy9Cu2TuHvPF5JnLqJlF4128R9POs1NRnmIUI=
Subject key identifier: B6:2E:0B:C1:0F:B1:CA:C5:F2:53:50:40:A8:00:5B:58:E8:94:39:50
Certificate issuer: /CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431
Certificate serial: 0B68A5E7D8A18871C6307C9D63BAFB4A5D01B4B9
Authority key identifier: 7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa
Signing time: Sun 03 May 2026 03:02:02 +0000
ROA not before: Sun 03 May 2026 02:57:02 +0000
ROA not after: Sun 02 May 2027 03:02:02 +0000
asID: 64315
IP address blocks: 103.119.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl
rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:68:a5:e7:d8:a1:88:71:c6:30:7c:9d:63:ba:fb:4a:5d:01:b4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B902E8E8AD09997B1251A6E7F2BE5A72158A431
Validity
Not Before: May 3 02:57:02 2026 GMT
Not After : May 2 03:02:02 2027 GMT
Subject: CN=B62E0BC10FB1CAC5F2535040A8005B58E8943950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:d9:8a:b2:86:a7:c5:d7:1f:f6:0d:94:17:
68:32:30:b9:d1:d0:cf:95:60:b1:7c:40:bd:b0:83:
77:e4:35:e0:41:86:8b:ba:32:1d:68:12:70:63:cb:
05:f2:d4:c5:b0:db:21:4f:dc:17:7f:88:e2:97:ed:
5d:99:fa:8c:fb:dd:23:65:8d:ca:57:8c:da:6d:17:
f1:a0:cc:ae:8d:5d:e1:11:e1:5c:03:39:46:3b:8c:
3c:0c:bb:d1:bb:c9:de:df:b4:bb:f4:6f:42:1a:72:
c3:ef:ad:79:0f:4c:da:e3:aa:b8:d4:c9:33:4a:64:
0c:bf:5c:06:56:b4:46:3f:3d:f2:fb:db:42:c0:87:
3e:c4:ef:66:c5:d1:0a:af:30:44:1c:f6:a3:7c:5b:
9c:fc:b8:03:75:2f:37:c9:47:b6:5b:d6:cf:0d:94:
74:78:8c:31:9d:a0:18:fc:88:fa:e2:08:a0:28:ab:
26:4e:7f:6e:51:f5:15:44:73:c9:b2:f1:79:6a:51:
c2:ce:85:2f:bf:95:df:56:7d:b2:3f:32:30:26:96:
91:58:7b:f2:a0:4b:c9:ea:85:ba:83:92:8f:12:b0:
eb:e0:a1:4d:75:44:d6:df:30:a3:5e:73:fd:6b:c0:
31:f1:dc:34:d7:8d:43:8f:a5:fb:1b:a9:9b:3a:63:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2E:0B:C1:0F:B1:CA:C5:F2:53:50:40:A8:00:5B:58:E8:94:39:50
X509v3 Authority Key Identifier:
keyid:7B:90:2E:8E:8A:D0:99:97:B1:25:1A:6E:7F:2B:E5:A7:21:58:A4:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B902E8E8AD09997B1251A6E7F2BE5A72158A431.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.119.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e2:5c:e9:71:d8:cc:9f:dc:24:5b:a6:62:d3:82:cc:16:7f:
48:aa:0e:77:fe:ce:73:f0:ab:4e:36:39:15:ff:60:6b:87:a2:
53:71:a5:bf:c4:7d:4f:89:53:28:5c:28:5a:e2:12:70:ff:72:
a7:fd:c7:12:81:2c:dc:b0:68:ea:d9:3f:e7:5b:da:4b:cf:f8:
f4:01:e4:ba:6a:28:77:fa:56:04:1e:b9:63:3d:70:61:2e:20:
da:9a:63:be:8f:08:92:e8:72:77:a1:10:65:cc:e2:66:00:ad:
43:1e:b2:e3:4c:93:81:7b:72:41:f3:2a:08:40:be:c2:62:d2:
97:8c:63:57:d8:53:29:a4:a5:e3:7b:ae:c8:b1:42:b8:1b:09:
96:15:80:07:d2:ba:fd:90:52:28:31:70:f1:17:aa:e0:a0:35:
6c:bd:4e:83:39:c5:ce:58:cb:b5:5c:28:0c:fd:f4:6f:d6:8c:
fc:5c:f9:fb:1f:64:b4:ef:58:f6:b0:a1:29:64:30:41:f3:72:
4f:91:e5:bc:ae:18:c1:e4:43:3c:a6:05:2f:2e:94:3c:d0:ee:
b0:b8:de:5e:07:f5:56:cb:d1:80:53:f8:18:be:e0:3b:c2:db:
a7:6f:2d:e2:80:f2:1a:48:79:b4:73:4f:43:6f:95:e6:95:29:
9f:34:96:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:46 2026 by rpki-client