
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137302e302f32342d3234203d3e203536323535.roa
File: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier: NXLcQ+blDb5dMf5SDKTtsVDU3AWQ+fRs2QfS3XROXYw=
Subject key identifier: 42:C1:1C:93:3C:FC:73:AB:F7:BA:D4:D7:9F:78:E6:3E:70:CB:03:0B
Certificate issuer: /CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914
Certificate serial: 2FFC57F19D1EC09B4325D2A2DE80E14B832B701A
Authority key identifier: 77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137302e302f32342d3234203d3e203536323535.roa
Signing time: Sun 03 May 2026 03:06:44 +0000
ROA not before: Sun 03 May 2026 03:01:44 +0000
ROA not after: Sun 02 May 2027 03:06:44 +0000
asID: 56255
IP address blocks: 103.10.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl
rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:fc:57:f1:9d:1e:c0:9b:43:25:d2:a2:de:80:e1:4b:83:2b:70:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914
Validity
Not Before: May 3 03:01:44 2026 GMT
Not After : May 2 03:06:44 2027 GMT
Subject: CN=42C11C933CFC73ABF7BAD4D79F78E63E70CB030B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:a4:f1:21:c2:57:05:39:dd:d8:dd:fe:e8:
ea:2c:6a:b5:2b:7c:73:3e:09:09:38:63:e7:8c:e3:
ca:fe:78:a0:92:26:29:31:62:54:5f:75:d8:ca:4e:
47:6a:99:44:b7:e2:f4:53:39:03:74:03:8e:1e:6a:
3b:5e:86:82:eb:99:1e:44:dd:c8:ea:c6:62:19:36:
e7:cb:99:68:72:b3:2e:da:a5:e5:2e:e8:9d:fb:c5:
bd:f8:f9:f1:f7:fc:eb:d6:cb:e7:47:a6:6c:c1:69:
f5:ce:c1:6f:aa:65:b4:4d:38:0f:2e:e6:19:20:61:
d6:08:50:e1:a4:65:85:40:b4:f4:ea:11:1d:f7:c4:
b0:15:d1:a9:11:10:fe:2a:71:0b:aa:b2:03:b6:f7:
6e:ff:21:d3:a0:e6:65:13:94:57:25:49:13:31:18:
82:f2:3f:44:09:44:92:15:b0:00:65:83:e3:ec:6b:
13:8e:02:db:84:ee:71:ed:76:7b:6b:50:45:f2:ae:
4d:b0:89:4e:04:76:e9:f4:e1:82:57:50:11:5a:bb:
15:45:92:b8:77:f0:da:84:43:55:a6:9a:fb:d8:2a:
99:e9:f2:09:da:17:74:a1:ed:20:12:c2:eb:95:16:
39:74:10:fe:e9:8b:14:a8:67:30:91:36:ef:0d:14:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C1:1C:93:3C:FC:73:AB:F7:BA:D4:D7:9F:78:E6:3E:70:CB:03:0B
X509v3 Authority Key Identifier:
keyid:77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137302e302f32342d3234203d3e203536323535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.170.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7e:12:a5:61:d0:10:7a:08:eb:53:cd:a7:de:5e:a9:c9:a4:
08:48:1f:bf:0f:96:b3:e1:7a:6e:a0:f3:db:e5:14:e1:fe:14:
be:d4:b3:fa:53:cb:9f:0b:2d:2d:c6:2a:63:36:ee:81:17:3c:
53:97:ad:f9:8c:4c:45:40:63:44:1c:72:ad:28:fd:48:df:ab:
0c:64:96:a4:cb:e0:5c:b3:24:15:38:e6:cf:b1:eb:1e:e5:5e:
9c:3e:27:83:1c:de:f8:7a:b9:0a:74:4d:b9:52:bb:9a:e2:23:
64:27:05:93:c2:02:98:a9:ef:a1:23:8b:65:72:18:e2:f2:9b:
72:74:a0:71:72:82:a4:d7:3b:7d:fb:37:96:f8:40:98:16:b2:
dd:3e:51:2e:ef:86:55:f4:2a:f2:bc:99:2e:35:43:8f:8a:bb:
75:28:f1:3c:52:bc:8a:bc:3b:49:e8:0b:69:ae:1c:72:5a:75:
79:dd:78:1c:0c:ea:ef:af:9c:d2:04:71:47:ad:b6:ab:b0:5a:
36:04:4c:77:5b:89:71:cc:e8:3e:39:24:c7:55:3f:f1:f3:10:
36:04:a9:40:48:3e:d0:17:2a:4e:22:02:b2:88:0c:f7:70:c7:
6a:11:1c:3e:8b:c4:e6:71:a7:98:9e:f1:52:64:0e:2c:1e:98:
1f:89:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:58 2026 by rpki-client