
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa
File: 3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa (raw, json)
Hash identifier: Nem4wBSgw06UdG8oyA4JB/1lcCMTIoOFR9hvV95FnaQ=
Subject key identifier: 00:58:75:67:83:E4:60:BB:76:70:E0:AD:2A:0C:E7:EB:87:F9:77:38
Certificate issuer: /CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325
Certificate serial: 121271AC20B671A1AF58DE7F095172D621604735
Authority key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa
Signing time: Sun 03 May 2026 03:06:37 +0000
ROA not before: Sun 03 May 2026 03:01:37 +0000
ROA not after: Sun 02 May 2027 03:06:37 +0000
asID: 63490
IP address blocks: 103.131.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl
rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:12:71:ac:20:b6:71:a1:af:58:de:7f:09:51:72:d6:21:60:47:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325
Validity
Not Before: May 3 03:01:37 2026 GMT
Not After : May 2 03:06:37 2027 GMT
Subject: CN=0058756783E460BB7670E0AD2A0CE7EB87F97738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:7b:60:53:1b:17:68:4e:b5:f4:0c:dc:19:
70:f9:91:be:69:7f:46:fc:41:87:aa:f9:c5:01:77:
6b:a8:d3:51:b8:9a:b1:3e:7e:75:cd:2b:86:e7:bb:
5b:16:a4:0c:13:49:41:7a:21:75:63:a1:7c:15:b7:
30:ed:1e:5e:70:a3:8c:88:62:83:67:3b:72:38:00:
50:57:0c:7c:6c:6a:32:31:e5:b9:ad:3e:26:e4:c9:
6a:b5:36:9c:c0:83:fa:b1:e6:46:4c:e3:fe:1a:a3:
1a:d3:2b:5c:f9:9d:e3:bf:a2:45:56:68:96:c4:be:
5e:d3:39:10:2a:00:8e:23:db:90:9c:9e:6d:ed:80:
60:92:c8:7f:b8:d5:3b:ad:ee:49:71:5a:12:15:a3:
ed:de:4c:63:cc:30:8e:2b:55:c2:90:2c:7c:b3:00:
1b:fd:8a:40:56:e6:f7:d0:a8:b9:ab:ae:2d:82:1e:
e8:83:ad:24:f1:1a:9a:b1:2c:51:37:93:d3:65:26:
19:48:3f:66:c2:60:b6:14:04:6e:ab:67:4c:83:1c:
2f:7e:17:04:4d:9e:1f:32:69:9b:e7:94:e1:78:fb:
95:e6:81:c3:8a:35:5e:ef:f8:d4:bd:f0:84:77:32:
f3:94:bc:74:50:47:23:cd:2a:f2:a8:ae:6d:11:31:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:58:75:67:83:E4:60:BB:76:70:E0:AD:2A:0C:E7:EB:87:F9:77:38
X509v3 Authority Key Identifier:
keyid:CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3133312e3130372e302f32342d3234203d3e203633343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.107.0/24
Signature Algorithm: sha256WithRSAEncryption
73:97:07:03:a4:6c:1f:d9:cf:5e:19:54:59:f1:52:2c:aa:f2:
de:76:0e:cd:c6:45:85:25:45:f4:7a:29:af:8e:94:32:5a:af:
01:76:a6:f3:12:d7:c3:80:60:31:01:fc:1f:d5:0a:99:74:ab:
5c:73:fe:85:a1:a2:b0:f7:08:c1:e4:75:1d:8e:3e:26:89:67:
fc:96:33:6f:bc:9e:82:b5:eb:03:ad:34:b7:f3:93:31:cc:54:
c8:7f:13:bf:c0:1e:06:03:84:a8:a1:91:4b:71:5f:94:00:ea:
2e:79:db:d7:56:a8:20:97:71:1a:19:c6:17:65:77:0f:70:c5:
1f:e9:9d:43:8f:ba:1a:b0:d4:2e:1e:42:5c:0a:bd:e1:7f:4d:
1e:73:18:76:86:71:a4:3a:28:4f:62:90:38:fd:db:03:bd:a3:
b8:db:3e:f6:30:e8:33:48:31:30:54:db:00:ff:c8:04:42:5a:
be:e8:93:73:2c:5d:fe:77:3b:bd:e7:2f:29:27:1a:5e:f5:48:
ca:59:b6:b3:97:08:03:4c:fd:1c:fe:39:41:64:32:68:c8:96:
a6:19:95:51:16:c1:9d:06:fc:21:cf:b3:89:c1:af:0c:36:10:
c3:93:7a:b2:a3:16:42:3f:b6:92:98:3b:64:17:18:ec:62:86:
db:f0:e3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:15 2026 by rpki-client