
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa
File: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (raw, json)
Hash identifier: PCd+knmr04J6Gzr/RkHIouax9jjuHK8/vfxjUSI6hdw=
Subject key identifier: 03:59:D2:38:AA:37:66:EF:18:7D:AB:B5:60:FF:9B:6B:F3:78:1F:65
Certificate issuer: /CN=F0EB208891BC3271A7761F7969A4F4B152C4F0E5
Certificate serial: 70FDD541E89F168771FCEC03BAEDE0CDFFB56931
Authority key identifier: F0:EB:20:88:91:BC:32:71:A7:76:1F:79:69:A4:F4:B1:52:C4:F0:E5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa
Signing time: Sun 03 May 2026 03:04:42 +0000
ROA not before: Sun 03 May 2026 02:59:42 +0000
ROA not after: Sun 02 May 2027 03:04:42 +0000
asID: 142392
IP address blocks: 103.171.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.crl
rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fd:d5:41:e8:9f:16:87:71:fc:ec:03:ba:ed:e0:cd:ff:b5:69:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0EB208891BC3271A7761F7969A4F4B152C4F0E5
Validity
Not Before: May 3 02:59:42 2026 GMT
Not After : May 2 03:04:42 2027 GMT
Subject: CN=0359D238AA3766EF187DABB560FF9B6BF3781F65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:61:f5:67:e8:4f:1d:4f:f2:39:36:d6:16:
de:d6:82:c2:6c:c0:f1:49:03:2f:e1:89:61:49:19:
9d:a4:92:54:45:ec:d7:ed:92:01:8d:c5:07:79:89:
9a:f2:23:99:ab:9d:76:c5:af:e1:be:e1:4a:77:83:
86:e2:36:81:b5:67:70:4a:c2:3b:db:67:87:fa:21:
62:37:9f:98:8c:57:e2:4a:8d:d1:cd:a7:e7:7a:27:
03:29:3b:94:25:24:d8:7c:01:1e:59:0b:62:ec:e2:
3c:d1:c8:35:88:92:64:34:e7:c3:40:c3:2b:67:08:
91:b8:f6:e3:e0:df:af:3d:cb:7d:82:31:12:dd:39:
bb:c9:44:63:ee:f1:c5:8f:c7:52:a1:e1:19:22:2a:
39:4f:85:31:bc:c4:d2:14:45:c0:db:c6:57:16:94:
93:44:c4:d7:b1:6e:5a:de:72:c1:8c:7b:df:15:94:
82:a7:4d:cc:33:ee:0a:6c:66:c6:8e:af:f7:67:01:
44:98:4b:bd:b2:7a:ee:f9:75:02:8f:b3:91:69:9a:
9b:20:5c:c9:34:69:c5:cd:ef:8e:87:80:bb:5e:6f:
b9:c7:b0:4e:f9:57:36:e5:1a:2b:4a:73:06:47:14:
bf:fc:d0:41:f3:b6:f3:9d:b2:ea:bb:7f:8e:b0:66:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:59:D2:38:AA:37:66:EF:18:7D:AB:B5:60:FF:9B:6B:F3:78:1F:65
X509v3 Authority Key Identifier:
keyid:F0:EB:20:88:91:BC:32:71:A7:76:1F:79:69:A4:F4:B1:52:C4:F0:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.79.0/24
Signature Algorithm: sha256WithRSAEncryption
43:53:f6:e8:89:e2:a7:75:e8:c5:bc:3c:7c:28:fc:c5:33:05:
5e:58:7c:81:9d:3d:4a:c7:87:a7:3e:4a:17:f1:73:70:de:dc:
08:87:ed:90:09:54:b7:0d:74:e9:f0:ce:75:0c:e4:44:08:a2:
74:c4:e3:f2:bf:83:64:06:2a:88:dd:e2:3c:0d:d3:4b:48:d5:
a9:83:de:6c:68:b7:27:e4:3f:4e:98:22:50:13:be:cc:dd:f9:
d5:0e:31:10:60:55:e8:a0:9d:f5:4d:26:bb:c1:1f:8c:98:8e:
2a:08:56:e5:b5:66:2d:1f:5e:26:a2:6c:7d:72:fc:c4:dd:46:
2d:e3:5e:fc:5f:14:ca:94:ab:60:fc:4b:f2:1a:d0:bd:78:5f:
0d:b9:eb:52:87:e3:70:e9:bf:9c:d3:00:6b:ca:4f:87:ee:73:
cd:f7:fb:0d:d6:31:6e:15:72:d3:cb:be:a0:08:97:2f:21:05:
be:9e:51:e1:b1:9a:64:d0:6b:fc:e3:01:2c:c5:9e:71:bb:08:
b9:22:a6:ad:6a:14:58:e4:a9:9a:96:55:9c:df:18:7a:f4:1e:
3c:25:c3:cd:fb:a1:db:00:50:8f:ea:df:77:e5:4f:6d:c1:b2:
7a:9c:a5:99:6b:2b:aa:dc:81:4c:a1:32:f6:8a:7e:ef:ac:b0:
14:27:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:08 2026 by rpki-client