
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa
File: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (raw, json)
Hash identifier: 89BQuo5qF9jY9pkwo8ogiyXzuxdhzpXGGix3yqTiFrw=
Subject key identifier: 62:D3:37:11:DD:E4:6E:BE:D9:08:39:57:CA:88:76:E8:64:80:6B:EE
Certificate issuer: /CN=72FDA859AF7750A564023AE4F6E8878FC184D64A
Certificate serial: 302F56445E3209A5B639F9843C8F9CD8D334BFDF
Authority key identifier: 72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa
Signing time: Sun 03 May 2026 03:02:57 +0000
ROA not before: Sun 03 May 2026 02:57:57 +0000
ROA not after: Sun 02 May 2027 03:02:57 +0000
asID: 151006
IP address blocks: 103.217.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl
rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:2f:56:44:5e:32:09:a5:b6:39:f9:84:3c:8f:9c:d8:d3:34:bf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72FDA859AF7750A564023AE4F6E8878FC184D64A
Validity
Not Before: May 3 02:57:57 2026 GMT
Not After : May 2 03:02:57 2027 GMT
Subject: CN=62D33711DDE46EBED9083957CA8876E864806BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:8b:9e:ca:4c:02:4a:2d:86:e3:da:bc:de:
ae:c2:e1:68:88:b5:e7:7d:e4:b3:98:7b:fb:46:f9:
a0:e2:0e:36:8d:43:20:2c:b2:d4:eb:3d:17:e3:89:
0c:4d:fe:a6:6a:0f:d9:7b:7f:02:a1:1a:ad:7a:68:
3e:de:60:59:73:58:9f:15:a2:0c:0a:cb:66:99:c6:
dc:dc:51:f2:4a:6a:08:45:4c:d3:24:8d:b4:60:4f:
ad:6e:08:46:6e:1a:95:b8:05:e3:a1:67:8e:e4:e7:
95:47:b7:ea:66:cf:27:95:4f:f6:65:98:06:19:69:
cc:06:86:89:fe:ab:5e:4f:23:10:2e:7d:bd:62:67:
b3:29:3d:35:4c:79:4a:e2:30:2f:14:37:9e:c4:92:
77:64:64:32:aa:50:54:25:a8:fb:4e:8d:fb:34:7a:
31:fa:b8:d4:33:dd:99:9b:e2:07:2d:b9:53:2c:f8:
cc:af:7c:f7:4f:3c:00:6d:ea:78:4b:51:5d:e5:4e:
69:68:19:37:f5:d6:97:10:77:3b:b1:f7:43:1f:bf:
ea:71:5c:41:11:cb:05:38:c8:28:9f:48:12:e2:cf:
9e:ff:d8:13:6c:f7:c6:b2:ba:ff:de:5c:db:16:68:
96:a5:11:45:42:fd:a9:a5:18:c1:d4:a6:99:3a:46:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D3:37:11:DD:E4:6E:BE:D9:08:39:57:CA:88:76:E8:64:80:6B:EE
X509v3 Authority Key Identifier:
keyid:72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.217.224.0/24
Signature Algorithm: sha256WithRSAEncryption
33:eb:94:7e:6b:7e:ef:a9:d3:58:ed:70:db:a7:69:eb:2c:13:
c1:6e:8f:d7:94:45:40:d7:02:9b:16:46:e8:54:0e:7b:46:ea:
18:13:97:8a:5f:45:6c:8e:ba:25:38:bc:37:10:01:fa:89:0b:
5b:91:6c:27:0c:48:57:a6:e6:a4:da:90:ae:ab:f3:b7:9c:11:
e5:e9:18:fb:b5:c1:39:74:fa:38:7c:b3:51:2b:c1:61:a9:86:
fd:2f:28:23:28:93:f0:81:a4:64:80:99:0d:c0:00:da:ce:2d:
89:7e:5d:c3:c3:b8:16:64:9b:68:c4:1c:3f:52:2e:eb:48:e8:
d6:3d:73:4e:20:18:d2:4a:d9:8a:60:f9:24:93:6b:4f:5f:4e:
cf:7e:b8:42:53:2e:c9:53:c4:e2:52:39:87:05:ee:ab:ea:b2:
c8:df:bd:25:ec:e5:1f:1f:9e:6b:49:e7:8d:ef:c0:58:ee:19:
8e:69:10:76:cf:aa:fc:1e:4a:c6:0c:b4:7e:a7:a9:eb:5d:fa:
6a:29:7a:ac:fd:77:2a:ef:a3:00:96:f3:ad:a7:ca:53:c7:9c:
6a:b3:70:bc:c2:c0:62:38:95:a2:b7:58:3d:d7:2e:20:99:54:
46:1b:8e:43:67:22:18:a7:42:8f:3e:00:dd:e0:39:73:86:7d:
2c:fd:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:53 2026 by rpki-client