
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa
File: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier: SV66tcdcW0NqPU/aqR6DolEDFMy8zRwKuiBnvzj6cUg=
Subject key identifier: 03:8F:34:16:7A:44:62:F0:19:BC:E1:60:45:70:6A:D2:CD:27:88:A6
Certificate issuer: /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial: 32587A89B2900DA14EDB6615486D5EC3A3E3F9C1
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa
Signing time: Sun 03 May 2026 03:08:09 +0000
ROA not before: Sun 03 May 2026 03:03:09 +0000
ROA not after: Sun 02 May 2027 03:08:09 +0000
asID: 131717
IP address blocks: 103.25.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:58:7a:89:b2:90:0d:a1:4e:db:66:15:48:6d:5e:c3:a3:e3:f9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Validity
Not Before: May 3 03:03:09 2026 GMT
Not After : May 2 03:08:09 2027 GMT
Subject: CN=038F34167A4462F019BCE16045706AD2CD2788A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:7f:f9:61:b0:4d:3e:0a:0a:df:6b:8c:7e:
ac:8f:d7:0e:47:01:07:6f:71:e0:2f:81:36:6b:d4:
4e:5d:e6:69:e4:65:7a:f0:fd:a5:c1:62:db:f8:c5:
d3:ad:2c:1b:85:14:6d:8a:9d:de:69:2d:02:05:09:
94:b8:5b:f2:fd:32:2b:83:e5:70:13:d0:8f:82:2b:
b6:61:37:91:1c:aa:e6:16:b3:ae:b0:f2:d1:1f:0d:
be:d3:be:65:75:b1:44:e9:fd:07:68:56:00:6d:01:
8a:4f:a3:4a:7d:5f:ff:8f:ca:f6:7f:af:7b:ce:da:
75:70:3b:1a:38:2c:a1:82:32:e5:22:f4:8c:e4:f4:
62:19:da:57:c4:5f:a7:3f:62:c4:e0:57:01:38:90:
fe:92:82:93:3a:25:44:5d:2a:9f:d4:e0:5d:7b:6c:
36:20:ec:32:c7:f7:17:d3:fc:17:6d:d6:3d:77:7d:
52:e5:63:d9:9f:71:39:83:23:08:d4:21:5d:3c:12:
97:be:6b:90:69:ff:bc:48:f5:dd:1c:f4:1f:fd:84:
ba:67:c4:12:f6:fe:be:eb:25:8c:04:be:81:dd:79:
4d:e1:22:2a:fe:57:12:50:f1:18:06:22:dc:90:4e:
5f:00:7c:3a:50:03:18:49:53:90:ad:70:59:1f:50:
b9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8F:34:16:7A:44:62:F0:19:BC:E1:60:45:70:6A:D2:CD:27:88:A6
X509v3 Authority Key Identifier:
keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:66:5b:84:22:6c:2e:1c:6f:4c:03:31:40:06:8f:90:8c:57:
b4:f2:6c:25:49:04:51:7e:6d:80:47:42:6f:4d:42:7a:2d:19:
a7:ea:7f:c2:65:90:d3:2b:f0:d6:a7:01:59:10:a2:f1:29:c8:
84:2a:78:62:44:5f:46:ab:a8:d8:1f:30:c5:91:77:4c:4c:38:
db:3b:41:04:44:d9:de:6d:17:e1:3e:ec:1f:5e:22:8f:89:50:
bd:aa:07:29:22:98:b1:d8:78:8c:58:92:47:88:7e:c7:21:a5:
f9:fb:e9:cf:11:9a:bd:d0:0d:98:81:5b:0a:be:9d:bc:39:dc:
77:b6:83:67:ef:2a:88:cc:76:ab:63:fb:70:1c:f8:3b:a2:e8:
f0:6f:7a:e7:64:6d:6e:3e:8a:dc:63:89:b0:18:76:98:46:04:
61:b2:2d:74:87:84:80:42:8d:0c:50:25:c4:0c:ba:ad:a5:a9:
76:09:c3:ff:c8:ea:f2:6c:04:53:86:b8:b8:a4:d3:0e:23:30:
e9:a7:87:7d:cd:5c:f8:44:a8:49:85:e7:61:53:6d:dd:b9:78:
68:b9:ea:62:83:7a:21:cb:3e:e1:3a:ac:72:c9:2e:af:01:fb:
71:a5:39:3b:a3:21:98:81:75:eb:b4:1a:a3:a0:69:9b:31:2f:
82:d2:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:00 2026 by rpki-client