
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa
File: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (raw, json)
Hash identifier: 38tHcC/t7dfxoKy3b2Q3TXm2WXDZWbTD7Vr8HTgP8Ys=
Subject key identifier: 2D:D3:6A:2F:6E:93:AD:61:C0:B2:F0:F6:5F:C5:E9:B5:5A:52:EB:A8
Certificate issuer: /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial: 508B50AC3F55ED03602EA28287F1F6EEA07EC049
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa
Signing time: Sun 03 May 2026 03:08:10 +0000
ROA not before: Sun 03 May 2026 03:03:10 +0000
ROA not after: Sun 02 May 2027 03:08:10 +0000
asID: 131717
IP address blocks: 103.25.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:8b:50:ac:3f:55:ed:03:60:2e:a2:82:87:f1:f6:ee:a0:7e:c0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Validity
Not Before: May 3 03:03:10 2026 GMT
Not After : May 2 03:08:10 2027 GMT
Subject: CN=2DD36A2F6E93AD61C0B2F0F65FC5E9B55A52EBA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:25:f7:e7:08:b1:47:2b:ef:76:62:45:f6:52:
de:46:71:f3:c9:a8:83:f2:df:62:ec:6d:aa:a9:e9:
e8:5b:dd:64:63:11:b3:b6:6e:77:81:df:de:2e:d8:
e0:24:3f:29:36:4a:bb:40:72:fc:a5:ae:4e:16:e1:
be:b4:d6:13:eb:4e:9b:5d:ae:17:6f:af:3d:6d:7b:
ee:2a:93:63:07:c6:4c:f2:a3:d1:9b:13:e9:b7:08:
56:42:ae:92:a1:69:1c:5d:a0:24:fe:9d:5a:03:b3:
85:7d:fc:34:e4:84:e7:25:81:65:af:07:51:92:7c:
38:78:34:77:69:e8:8c:77:be:b9:6c:a0:c2:42:d1:
28:04:23:39:6c:9b:fd:0e:c5:f5:5a:bf:a4:69:d3:
26:f3:f0:fd:e0:e0:d8:a7:3a:6b:33:8f:36:f6:36:
3f:d1:f3:93:ee:5e:81:54:ae:a6:a0:22:c7:dd:0e:
33:3e:9f:93:56:0b:49:98:82:47:9e:e2:88:bb:77:
a8:2d:2f:2a:f2:7e:74:04:69:97:b1:07:9e:03:f2:
60:10:6e:e9:47:ea:1a:6c:88:e1:91:6c:64:a6:ba:
b2:c6:cc:b1:17:a4:90:41:a6:d4:86:2f:3a:19:19:
31:68:60:c4:2f:0d:09:e6:28:a0:9f:e6:4e:09:80:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D3:6A:2F:6E:93:AD:61:C0:B2:F0:F6:5F:C5:E9:B5:5A:52:EB:A8
X509v3 Authority Key Identifier:
keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.166.0/23
Signature Algorithm: sha256WithRSAEncryption
46:b9:8d:90:78:c4:59:aa:2e:59:23:1c:e5:23:e4:a9:85:b1:
63:b6:d5:80:a1:e1:d1:1d:63:e8:40:cf:f5:75:c6:26:96:c3:
a3:6e:4d:3c:3b:c2:6e:7d:ed:48:78:f7:8d:3a:91:a2:10:e6:
c6:75:c7:0b:fd:48:96:64:ad:54:d4:76:11:9c:01:93:e9:df:
82:d7:14:37:4f:ab:1c:0c:65:51:d8:3f:c4:b3:a7:46:3e:2c:
8b:be:a0:ff:60:77:7b:ab:85:aa:43:e6:1d:f3:b4:ed:85:58:
80:fe:b6:68:38:89:88:8c:8a:33:78:63:e6:48:01:a6:b1:6e:
15:c6:5a:f9:e8:8e:e4:cd:2b:2d:25:62:b6:99:44:4b:41:91:
82:0a:d2:54:d5:1d:a7:cb:85:f7:89:d8:e6:ff:d2:2b:71:ef:
de:27:94:10:76:ab:4b:2f:e5:e6:05:40:cd:0b:ff:2a:0c:a6:
f3:68:bb:ac:66:28:22:1f:fa:75:a2:32:e4:3a:42:db:42:1c:
46:7a:75:ff:35:17:ec:77:7b:3b:cf:cb:1a:0f:bf:e6:ed:0f:
0c:4c:12:04:9d:b5:07:57:83:38:b4:4a:08:23:b5:63:d2:f9:
ff:1c:7e:09:b0:74:67:6c:f8:ef:ce:66:f8:75:04:3e:cb:14:
03:ae:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:24 2026 by rpki-client