
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa
File: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (raw, json)
Hash identifier: cscNYPGsX1ZTL4zXvVeeKicXVJQf2gUl7CaS2wz5lho=
Subject key identifier: A6:AB:A9:83:C4:A6:59:8C:28:BF:CE:77:9D:42:6B:87:6C:38:5F:D2
Certificate issuer: /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8
Certificate serial: 5C6572E116C785E1BBA61C0D172B282AA43A9250
Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa
Signing time: Sun 03 May 2026 03:07:23 +0000
ROA not before: Sun 03 May 2026 03:02:23 +0000
ROA not after: Sun 02 May 2027 03:07:23 +0000
asID: 136820
IP address blocks: 103.98.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl
rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:65:72:e1:16:c7:85:e1:bb:a6:1c:0d:17:2b:28:2a:a4:3a:92:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8
Validity
Not Before: May 3 03:02:23 2026 GMT
Not After : May 2 03:07:23 2027 GMT
Subject: CN=A6ABA983C4A6598C28BFCE779D426B876C385FD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:65:97:00:53:a9:f9:17:38:b4:b2:a4:d7:
73:1b:50:db:0e:cf:bc:5d:1d:93:e5:f8:f5:4c:00:
7c:bf:60:c3:c1:f0:3d:10:b0:58:d7:50:f8:4c:7f:
49:c8:f3:dd:77:ec:29:9c:49:2b:87:90:2d:bb:c8:
1a:17:dc:f6:00:d6:5d:92:b2:36:82:90:33:2c:be:
3e:f6:91:d7:fb:83:52:65:0a:5c:20:a2:06:ea:ca:
3e:c3:c1:50:fb:e4:39:ac:30:2b:c8:a9:96:b6:46:
39:2c:d7:1f:9d:2c:ed:86:53:c8:c2:f4:88:9a:da:
f8:0e:64:08:55:76:17:da:15:d6:11:2f:b9:3f:95:
86:c7:72:1d:ec:31:23:29:63:08:29:21:a0:e6:ec:
a6:90:1b:0d:db:67:1a:99:16:89:c3:a0:95:0e:39:
1d:86:db:dc:0f:f7:82:83:38:9d:5c:11:e2:8c:a9:
74:19:5d:ba:2f:e8:c4:29:21:4c:ff:42:60:94:10:
1c:86:e1:35:cd:05:38:82:72:de:1e:26:a7:b9:7d:
3d:48:10:37:66:6b:f4:aa:3f:e5:f8:2e:d1:52:a3:
22:43:c2:ba:15:5a:90:2c:68:49:85:d6:c4:a3:9c:
ef:d2:63:da:ff:cb:08:19:76:fe:01:73:92:cd:f9:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AB:A9:83:C4:A6:59:8C:28:BF:CE:77:9D:42:6B:87:6C:38:5F:D2
X509v3 Authority Key Identifier:
keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:93:b5:b6:fc:44:b4:fb:d1:3d:5f:2a:02:e6:61:97:7d:67:
21:4d:04:59:55:52:d7:c2:c0:23:77:0d:3b:63:c6:fb:2c:56:
fa:e9:cd:21:e4:5f:14:ef:70:dc:60:db:a8:57:60:e9:cd:73:
eb:bf:d2:e8:65:19:94:d4:db:5e:26:f0:26:27:43:8e:4b:4f:
7e:9d:dc:0e:ce:e0:13:c9:23:42:22:95:a5:19:32:85:d0:89:
ea:bb:30:15:72:5d:41:57:3a:01:7a:d6:5b:b8:54:0d:2b:58:
96:02:d1:08:79:dc:81:74:0c:6e:ea:b0:57:8d:f0:a0:3c:3e:
aa:27:aa:f1:00:af:af:80:77:80:47:e4:40:58:8a:b1:a2:a2:
58:f4:bd:5d:49:4e:37:09:90:14:3e:63:52:68:39:e9:4d:b7:
49:58:2c:07:4d:c7:b3:42:87:9f:82:ce:43:f9:01:84:b8:ae:
b8:a3:c9:01:a0:96:ba:ca:3c:45:f1:e9:3c:90:c5:4f:97:21:
58:6e:26:61:bd:90:65:ed:27:80:39:0b:c8:db:0b:92:a1:72:
d6:be:9d:2d:cb:ff:6e:ed:69:dd:e0:f3:0f:0f:31:bf:67:61:
6b:f3:98:03:ec:67:03:dd:ad:94:f1:c9:f0:0d:43:24:e8:47:
f7:ad:2a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:33 2026 by rpki-client