
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa
File: 3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa (raw, json)
Hash identifier: PvyV39mz8mjiMF4MZkFF8Y2y+8ayLbmRxXXvZRdxwsk=
Subject key identifier: 16:E9:CD:A7:44:8A:38:F1:14:E5:E3:A2:FA:6A:5A:0E:0A:93:95:8C
Certificate issuer: /CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F
Certificate serial: 33A623D9C1074DA6F6720EF2F54415880C7AD14B
Authority key identifier: 72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa
Signing time: Sun 03 May 2026 03:03:20 +0000
ROA not before: Sun 03 May 2026 02:58:20 +0000
ROA not after: Sun 02 May 2027 03:03:20 +0000
asID: 151536
IP address blocks: 103.244.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl
rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:a6:23:d9:c1:07:4d:a6:f6:72:0e:f2:f5:44:15:88:0c:7a:d1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F
Validity
Not Before: May 3 02:58:20 2026 GMT
Not After : May 2 03:03:20 2027 GMT
Subject: CN=16E9CDA7448A38F114E5E3A2FA6A5A0E0A93958C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:5d:64:05:44:e9:57:db:be:e9:64:a2:7a:
a6:77:8e:27:54:3f:7d:ee:7e:b8:4b:91:ae:d1:5d:
44:42:61:02:41:8a:97:cd:af:6d:4d:51:84:a2:d1:
91:c9:6e:d1:76:5b:e6:e9:17:21:36:4b:6a:39:05:
87:7a:57:a6:77:c1:35:19:4b:a7:10:5d:57:4c:b3:
26:e3:fb:c7:f6:c5:11:7d:e6:38:7f:80:14:b1:d7:
61:50:58:a8:a4:dc:d6:1e:1c:1f:9c:86:06:cb:cd:
87:ee:bf:47:00:09:cf:28:db:86:60:3d:39:23:fa:
9c:6c:e3:9c:54:29:36:55:a1:b5:15:6f:eb:06:68:
9a:61:cd:3c:57:05:32:c3:8f:0b:79:c5:28:71:79:
fc:d4:4e:70:b5:d3:9e:c1:37:2a:27:eb:01:95:23:
71:91:db:7c:35:cd:ce:ad:3f:74:0d:d8:0b:b8:ad:
04:25:c5:8d:61:9d:e3:6d:2d:30:a0:14:aa:6b:f6:
94:e8:21:28:c7:dd:27:7b:a8:70:87:d2:77:63:b8:
e0:e7:08:c7:b7:75:12:80:66:d4:04:e6:5f:78:99:
d1:e4:af:44:3f:a3:c9:ce:62:fa:5c:ae:59:2a:a3:
a1:97:d6:84:b5:85:2c:43:ed:e0:3a:1d:64:0e:79:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E9:CD:A7:44:8A:38:F1:14:E5:E3:A2:FA:6A:5A:0E:0A:93:95:8C
X509v3 Authority Key Identifier:
keyid:72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.23.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:07:bb:4e:7e:db:2f:9b:a3:13:f1:30:2b:65:36:dd:3a:d6:
0e:9f:9b:33:79:b9:47:f0:de:73:80:4a:49:a8:95:f1:0d:cf:
ce:48:f9:ee:c5:53:ec:d6:3b:0c:5d:76:17:b5:e0:5e:23:22:
b6:ca:e0:c6:ea:15:c8:b4:0f:49:fa:ca:e1:08:9e:cc:a0:fb:
d5:b7:df:89:75:83:10:6f:c2:d7:48:03:38:79:cd:d0:b9:ee:
87:b2:e4:d1:ca:e9:e9:2e:fb:87:37:7c:b8:54:a3:d8:11:5f:
9a:53:5f:83:96:ac:8e:39:d7:f2:92:4a:6c:2c:d3:9b:ae:9c:
a9:ca:31:62:ee:eb:5b:94:f9:5f:bc:b6:75:31:ba:58:04:96:
e6:b9:bb:19:09:cf:8f:b3:95:0e:bb:de:83:65:34:c0:69:a6:
d1:3c:b2:d1:b0:fd:13:15:94:25:ca:76:2f:f5:4f:81:b0:13:
37:38:eb:1c:5b:a8:02:96:a7:89:1b:be:d4:21:70:12:12:ca:
44:e6:4c:b7:8c:ba:d2:ae:7c:80:a9:7a:6b:64:7a:9d:98:c0:
f1:49:dd:1b:2c:59:9b:0c:2d:4a:05:37:5e:4d:6d:9a:8e:de:
04:66:65:91:8a:58:b9:70:35:c5:9d:4e:83:6a:7c:7e:1a:1c:
0b:3c:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:59 2026 by rpki-client