
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa
File: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (raw, json)
Hash identifier: AyU9dLRn2+0UVwta95ZZWn0+Wvuscs96qo1E0XirAYM=
Subject key identifier: 0F:C4:3D:0A:20:1F:04:BA:5E:00:A7:5A:3C:9C:79:C2:9B:A0:A2:EE
Certificate issuer: /CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8
Certificate serial: 049068172146660FCDA447DCF02465B6B80444D6
Authority key identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa
Signing time: Sun 03 May 2026 03:05:59 +0000
ROA not before: Sun 03 May 2026 03:00:59 +0000
ROA not after: Sun 02 May 2027 03:05:59 +0000
asID: 151011
IP address blocks: 103.250.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl
rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:90:68:17:21:46:66:0f:cd:a4:47:dc:f0:24:65:b6:b8:04:44:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8
Validity
Not Before: May 3 03:00:59 2026 GMT
Not After : May 2 03:05:59 2027 GMT
Subject: CN=0FC43D0A201F04BA5E00A75A3C9C79C29BA0A2EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:22:71:77:da:a5:1e:aa:58:e3:0d:35:e3:
d1:3f:e7:00:0c:fd:0e:e9:76:85:4f:09:48:4f:00:
a2:41:11:03:9e:a8:e7:1d:9c:56:b2:dd:27:a5:39:
fa:65:33:f3:ff:6a:00:0b:21:fb:30:7b:9e:e9:20:
5c:bd:e4:f4:18:c6:d2:7d:62:7d:11:a0:ec:e0:2c:
48:41:0f:f3:d5:de:23:e2:eb:bb:cf:71:77:67:92:
a0:ec:f7:b0:2d:76:c3:fe:53:83:d0:a2:ce:47:cb:
e7:5f:15:91:5e:a4:90:98:1a:14:ca:19:a7:06:f4:
ea:98:42:71:2f:4b:fa:d5:42:c1:ec:58:91:16:f6:
25:01:f4:47:54:a4:70:80:3e:73:4a:42:b3:36:e4:
20:6f:08:34:b4:a2:4b:96:d1:08:a2:88:39:28:e6:
df:80:90:fe:98:aa:65:9f:aa:70:50:c6:40:f9:c7:
1e:4e:70:47:a9:fe:cd:1d:a1:73:ed:1d:52:8b:ed:
69:50:c2:66:2a:39:54:7d:fc:4a:f8:76:b5:98:5d:
c3:00:c8:27:f4:20:bc:32:f9:96:e6:e2:36:49:bf:
31:fe:59:43:bb:2b:fd:03:f0:7a:cc:55:1c:34:5e:
f6:02:66:64:0c:a7:2d:14:b8:3a:41:1e:1b:25:b5:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C4:3D:0A:20:1F:04:BA:5E:00:A7:5A:3C:9C:79:C2:9B:A0:A2:EE
X509v3 Authority Key Identifier:
keyid:BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.250.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:66:51:fa:65:2d:27:1e:e7:a5:d6:da:c3:7f:1e:5d:47:f8:
5a:d2:e9:90:02:34:45:51:51:83:45:8a:fb:fd:d3:1b:0c:08:
6f:16:3b:fb:89:84:80:1f:74:72:8d:66:18:e6:f4:fc:a6:4c:
aa:55:24:df:c5:5f:ac:01:04:fa:98:14:a5:77:d6:5f:9e:e5:
41:4c:76:87:ed:02:00:ce:20:24:bf:ca:c1:4f:53:80:2b:11:
09:a9:5d:e2:f6:b5:86:f7:b0:76:d0:ea:a5:40:f7:46:61:7f:
a8:d1:8a:12:a3:04:85:3b:6d:f2:95:09:c9:73:91:6c:8a:b8:
15:5c:4c:a6:c2:07:4f:ee:85:a3:6a:a5:10:ba:42:75:ee:fe:
3b:3b:6b:b5:ad:ad:7a:0e:c3:5d:dd:e5:0e:f3:d0:78:e9:88:
20:37:89:be:0e:bf:ac:ae:4c:38:35:21:b1:38:be:8b:bf:86:
a2:00:a0:18:16:ef:72:bd:cb:3f:8c:43:ac:77:58:57:7a:9a:
80:e8:4e:1e:c1:6e:a2:28:23:ab:45:46:c0:d8:35:49:41:1c:
31:f9:d1:2f:12:ae:d6:29:d8:9a:97:1e:c1:ea:02:a0:5d:b5:
4f:ad:48:71:82:25:d1:ba:a2:3e:bc:45:59:9c:ec:83:ec:4c:
fb:0f:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:53 2026 by rpki-client