
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32342d3234203d3e20313531353939.roa
File: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (raw, json)
Hash identifier: q7SyYWgacRS5rzIzN3lkEYg9DVcMVi1C+rpPj5LCLHE=
Subject key identifier: 0D:9C:81:15:A3:38:38:6A:11:40:6A:C7:DC:E7:34:94:73:3A:33:6E
Certificate issuer: /CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE
Certificate serial: 55320DBDD9CDC727A0AEB0A49DA10B054E409C65
Authority key identifier: 72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32342d3234203d3e20313531353939.roa
Signing time: Sun 03 May 2026 03:06:41 +0000
ROA not before: Sun 03 May 2026 03:01:41 +0000
ROA not after: Sun 02 May 2027 03:06:41 +0000
asID: 151599
IP address blocks: 103.7.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl
rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:32:0d:bd:d9:cd:c7:27:a0:ae:b0:a4:9d:a1:0b:05:4e:40:9c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE
Validity
Not Before: May 3 03:01:41 2026 GMT
Not After : May 2 03:06:41 2027 GMT
Subject: CN=0D9C8115A338386A11406AC7DCE73494733A336E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9b:9e:67:0c:a0:20:5c:e5:df:50:a2:0a:5b:
73:c8:f6:90:04:7b:c6:9f:b3:94:d2:24:b2:4f:f2:
dc:9d:ce:6a:c2:0a:df:68:31:28:08:41:39:0a:80:
b2:be:d1:04:b6:1e:a5:be:8a:64:31:c4:c7:38:0a:
8e:87:95:27:45:f2:c3:96:31:8d:55:16:5f:21:46:
34:4a:e9:1e:f8:88:a5:08:16:70:af:3e:4b:e7:f1:
37:68:00:44:6a:7a:e5:b9:25:77:3c:f9:dd:00:0c:
40:62:8d:74:68:69:99:42:59:1c:69:f7:7d:f9:e4:
37:86:ab:26:59:17:3a:99:b1:5f:78:39:06:6c:e9:
4f:14:8e:28:ed:a4:ad:8e:74:b9:d9:be:5f:03:06:
4f:3d:c7:3e:64:6a:4f:c2:c1:44:da:72:e0:c2:a2:
77:40:5c:ba:3d:85:1e:0c:cd:9f:b4:2a:8d:b3:f8:
70:aa:02:5d:72:aa:da:0f:fc:3b:03:a9:b9:ae:4c:
b6:e5:72:d1:e4:15:54:5d:42:0d:1c:d6:ce:87:b6:
4f:b8:fa:4b:cd:fd:d6:18:e3:3f:58:58:39:39:28:
cb:be:aa:e3:b2:1f:7f:e4:70:06:3e:92:41:6a:1c:
ba:06:d7:79:fc:73:ca:67:34:f9:2f:d7:9b:73:84:
29:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9C:81:15:A3:38:38:6A:11:40:6A:C7:DC:E7:34:94:73:3A:33:6E
X509v3 Authority Key Identifier:
keyid:72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32342d3234203d3e20313531353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.106.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:94:58:c6:0e:51:7a:54:08:2a:27:c8:89:b8:d7:b1:ba:20:
ff:1e:21:65:4b:43:06:ee:d3:8e:8d:2b:54:52:6d:2e:02:a6:
09:e5:5c:77:93:dd:78:20:36:1f:02:6a:f0:70:f5:91:17:19:
9f:05:88:09:a0:b0:25:bb:07:d2:b5:9e:0b:2b:19:11:f6:1d:
28:35:4f:89:fd:2e:03:f5:a6:cf:b0:f7:2d:bb:55:86:e3:93:
6a:2c:9a:a7:46:2d:b3:e7:f2:21:43:3e:7b:a7:73:72:97:a0:
e8:d2:48:bc:3d:1f:a4:68:54:8f:a8:66:cd:25:c0:80:1e:09:
e7:6c:3a:8a:6b:84:0d:5d:97:b6:82:83:0e:d0:15:d6:c8:a9:
6d:d0:fe:28:6c:32:d2:fb:1a:87:4d:17:73:dc:ef:30:b9:ba:
53:59:44:71:1b:b0:36:fd:d9:7e:ce:de:0a:c0:83:99:0f:bd:
27:c5:30:a6:1e:45:b4:a9:df:e8:00:74:7e:b0:64:06:c5:dd:
87:70:20:51:6b:06:3c:f8:9c:b9:2b:c7:bf:ec:9c:26:24:14:
fe:19:01:5c:9f:28:d5:a1:b8:3d:0c:79:21:1c:eb:41:8d:89:
b5:18:37:7a:83:f5:63:62:cb:40:89:fe:1e:92:ff:2f:c6:f7:
c1:d9:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:58 2026 by rpki-client