
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: 2+4lQdjwQAe85kVWzjTaO1AsvRqx5WYrEbUSKbxLW0A=
Subject key identifier: 96:55:DD:A9:BA:AA:A5:6B:88:A0:DF:A1:EB:BA:3C:EE:E8:B1:AB:8D
Certificate issuer: /CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D
Certificate serial: 0CA7FB67562436419B08CEE9F7EFEFBED626DBFA
Authority key identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa
Signing time: Sun 03 May 2026 03:07:10 +0000
ROA not before: Sun 03 May 2026 03:02:10 +0000
ROA not after: Sun 02 May 2027 03:07:10 +0000
asID: 135478
IP address blocks: 103.129.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl
rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a7:fb:67:56:24:36:41:9b:08:ce:e9:f7:ef:ef:be:d6:26:db:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D
Validity
Not Before: May 3 03:02:10 2026 GMT
Not After : May 2 03:07:10 2027 GMT
Subject: CN=9655DDA9BAAAA56B88A0DFA1EBBA3CEEE8B1AB8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:f4:9c:0c:6e:b0:f4:3f:f6:d4:5b:e9:cf:
85:79:03:bb:90:ad:a5:ba:2c:7b:a9:e0:6a:dd:8d:
49:88:12:40:e4:94:9f:3e:69:37:91:4a:df:5c:d0:
bc:0d:d1:2d:3e:d6:16:64:92:f5:7c:2f:31:5e:a3:
47:96:f3:56:bf:ab:d9:2d:57:6b:45:59:75:cd:85:
dd:21:e8:79:7c:05:f6:de:97:ef:ea:3c:38:3b:76:
ca:30:61:3f:36:2d:bf:ad:c7:38:d1:26:31:ba:35:
51:7a:09:62:f6:a8:07:e2:a9:14:ef:67:03:a6:6d:
bf:4c:f2:b5:41:84:96:b9:80:d6:4c:fa:ec:f7:5d:
f7:d3:ed:c5:2d:c2:60:d6:77:a1:9b:33:ee:6c:2f:
82:02:21:0f:69:6a:c0:0b:b5:45:c8:a6:cc:f4:63:
05:df:1c:30:c1:18:23:e4:fe:70:fb:6b:98:61:65:
b2:f4:a2:a2:5d:7c:17:26:26:6c:c6:be:f8:07:62:
78:da:ce:78:0f:8f:c7:16:0f:ac:82:48:33:0e:55:
25:02:14:05:33:29:5f:de:b8:a0:31:2d:49:10:ba:
70:be:c9:90:ae:38:65:7f:2c:b2:f1:e6:5a:6f:9c:
8a:ec:4b:a7:74:7e:a6:c5:47:a4:24:88:c7:ff:59:
25:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:55:DD:A9:BA:AA:A5:6B:88:A0:DF:A1:EB:BA:3C:EE:E8:B1:AB:8D
X509v3 Authority Key Identifier:
keyid:CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.129.58.0/23
Signature Algorithm: sha256WithRSAEncryption
74:9e:2f:51:03:a3:91:f6:3c:10:c3:2a:87:8c:5c:5e:9a:6e:
7f:6b:f7:53:e5:2e:f4:57:2c:b4:e6:37:23:79:3b:c5:3b:15:
58:ea:a1:16:36:0a:53:b1:b1:ce:83:44:ff:2f:72:4c:80:83:
7d:6d:db:ef:e1:e3:b7:55:dc:4f:bb:01:45:16:ea:a8:cb:3c:
2c:c7:b2:30:a3:d2:eb:32:01:c3:5b:53:bc:b8:30:f1:af:a1:
16:a5:15:9f:26:a9:32:a9:cf:bd:f5:e8:29:7c:da:b7:82:62:
fc:89:8b:80:50:87:77:e5:b2:6c:11:05:8b:b8:9a:ad:fd:a6:
78:d2:88:20:bc:b3:68:bc:23:39:e6:49:5c:86:67:c7:60:52:
01:e3:34:63:61:c1:ad:f2:d1:8f:63:af:7e:7f:c3:0c:b8:13:
a1:9d:21:4b:9f:29:5e:46:4d:30:6d:6a:af:c0:1e:09:96:f1:
47:6c:85:b6:ce:cf:28:d7:d0:9e:ad:0e:7f:fc:e0:02:3c:4f:
82:88:0b:cb:78:cf:56:e9:d8:6a:2e:cf:c5:8e:96:7b:26:b7:
1b:fb:11:9e:67:ca:a6:02:3d:ff:c3:00:12:2d:e3:a4:c7:f0:
26:59:9a:a0:6c:a2:81:a7:5d:60:8d:5d:57:ba:81:25:bb:40:
3b:57:bf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:26 2026 by rpki-client