
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3233352e36362e302f32332d3234203d3e203633343930.roa
File: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (raw, json)
Hash identifier: uf/GHaSzNcT5cpRXsuDOlmyZlxVr0wr3iz8nr1MyVkM=
Subject key identifier: 26:72:CD:99:4A:ED:F1:DB:74:45:D8:F0:84:24:DB:C8:9B:81:2C:B6
Certificate issuer: /CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325
Certificate serial: 39AAC2C6BBD42730065E9CB7FB012F523E9AB648
Authority key identifier: CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3233352e36362e302f32332d3234203d3e203633343930.roa
Signing time: Sun 03 May 2026 03:06:36 +0000
ROA not before: Sun 03 May 2026 03:01:36 +0000
ROA not after: Sun 02 May 2027 03:06:36 +0000
asID: 63490
IP address blocks: 103.235.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl
rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:aa:c2:c6:bb:d4:27:30:06:5e:9c:b7:fb:01:2f:52:3e:9a:b6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA6A68BCE209C28338FC3C0AA659AE591EF6D325
Validity
Not Before: May 3 03:01:36 2026 GMT
Not After : May 2 03:06:36 2027 GMT
Subject: CN=2672CD994AEDF1DB7445D8F08424DBC89B812CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:6a:75:57:87:8c:5e:9e:78:2e:59:a2:3a:
c3:5f:79:57:a6:b5:90:e3:87:54:8d:38:8c:cd:a8:
d7:b5:f5:30:8d:81:ab:21:9c:81:57:aa:a9:49:12:
0e:15:40:03:e9:d1:0e:73:a5:6f:14:93:cd:6f:f6:
f7:7e:b8:ba:43:9a:83:de:96:ef:ca:90:bd:26:ae:
c9:59:d6:e8:67:7f:60:0c:d2:3b:56:d5:65:6e:73:
b2:c7:c8:39:19:51:a6:d2:a6:3d:21:4c:bc:0e:6b:
90:6c:f3:c1:33:d8:fe:e2:00:84:b8:af:28:6e:e1:
54:73:05:a5:c3:8e:90:c2:55:2b:09:9c:40:14:47:
96:48:e7:54:8d:3d:18:50:13:6e:76:5b:45:47:fe:
22:29:e9:40:13:74:60:5e:2e:09:1c:44:7e:1f:c1:
ce:8e:ce:f7:f7:28:f2:8f:c0:3a:7f:ef:57:e4:38:
8b:49:01:4a:e1:69:6c:7e:ca:1b:59:27:d7:fb:f7:
80:a8:d4:05:f6:00:da:f6:e3:12:ec:09:92:cb:f2:
29:bc:33:22:7f:86:3c:f0:2a:8a:de:a4:2c:0b:4b:
3f:21:b2:9d:0e:f5:3e:d1:30:ec:97:9d:0f:fc:24:
e4:07:f1:f6:b4:d8:07:1a:45:b0:99:bf:93:b3:10:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:72:CD:99:4A:ED:F1:DB:74:45:D8:F0:84:24:DB:C8:9B:81:2C:B6
X509v3 Authority Key Identifier:
keyid:CA:6A:68:BC:E2:09:C2:83:38:FC:3C:0A:A6:59:AE:59:1E:F6:D3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA6A68BCE209C28338FC3C0AA659AE591EF6D325.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3233352e36362e302f32332d3234203d3e203633343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.66.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:7b:c7:84:2e:45:e5:47:e6:9e:93:46:21:55:d4:40:1f:46:
f5:cf:cf:d8:06:83:4a:f7:20:bd:b9:db:72:97:c6:0f:22:9e:
99:8d:89:a7:38:f5:82:08:a8:58:34:a1:6a:3e:da:a5:ef:c0:
6c:d7:da:ec:6a:d4:95:ea:04:c3:33:7c:61:de:3a:d4:1d:e5:
a8:b7:59:7a:16:94:c8:4b:1e:71:5c:63:6c:c5:c4:e4:51:ba:
f8:2d:d7:2c:90:18:80:0b:10:ab:ef:a0:8d:d4:b5:54:f4:a0:
e6:a6:32:2c:c0:b3:30:8e:59:df:39:3d:c8:7d:20:b5:b5:57:
c9:82:8b:f4:17:fc:a3:4b:43:bd:fe:fd:09:af:64:2e:77:db:
91:64:16:99:57:75:72:d8:9d:bb:f3:ba:97:ba:0f:8f:05:90:
25:bd:75:56:1b:a2:27:f4:63:a3:db:93:86:08:ec:af:d2:40:
99:31:99:35:b2:0d:9f:2d:47:fb:88:c9:e7:58:52:0a:4a:a7:
9d:43:8a:0d:9c:08:80:89:d3:af:d6:15:7d:a6:f7:a1:70:f2:
c5:08:b0:75:7d:34:0d:ef:e8:0e:81:33:70:55:e5:ac:3d:41:
90:89:2e:48:71:b0:00:57:d4:09:c6:d8:d1:07:20:be:ca:5a:
45:35:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:38 2026 by rpki-client