
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/3130332e3233342e33342e302f32332d3233203d3e20313531353231.roa
File: 3130332e3233342e33342e302f32332d3233203d3e20313531353231.roa (raw, json)
Hash identifier: v4OcOT72Y+Fw3xPxNhOv5K2oe1NqroMaIJLaKP7M7LE=
Subject key identifier: BD:3F:A5:8D:9B:49:1E:51:83:C3:91:E5:C5:0F:26:74:EC:00:2B:01
Certificate issuer: /CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A
Certificate serial: 2C849FED7331FE4DC566AF61CB748ACA8F63FE5B
Authority key identifier: D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/3130332e3233342e33342e302f32332d3233203d3e20313531353231.roa
Signing time: Sun 03 May 2026 03:10:12 +0000
ROA not before: Sun 03 May 2026 03:05:12 +0000
ROA not after: Sun 02 May 2027 03:10:12 +0000
asID: 151521
IP address blocks: 103.234.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl
rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:84:9f:ed:73:31:fe:4d:c5:66:af:61:cb:74:8a:ca:8f:63:fe:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A
Validity
Not Before: May 3 03:05:12 2026 GMT
Not After : May 2 03:10:12 2027 GMT
Subject: CN=BD3FA58D9B491E5183C391E5C50F2674EC002B01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:c1:03:52:4c:f8:a4:9e:98:aa:66:bb:87:
70:93:e1:ec:5c:0c:92:2a:c1:d4:b8:28:c9:24:e2:
28:f6:fb:61:c5:32:1e:6d:22:c7:4a:33:c6:ef:b1:
98:db:c5:45:1e:5e:48:23:4c:62:4a:65:b0:58:d9:
2a:9f:e7:48:4e:78:20:04:be:ed:e4:2c:d0:8d:c5:
6f:ce:1f:b5:6d:3b:7f:ee:c4:1a:3e:15:67:d7:8c:
89:91:7f:e1:c1:ba:a1:c3:e5:56:b9:82:88:1c:4d:
55:0b:5d:c9:19:56:fd:65:3a:64:b4:83:e8:ad:d3:
88:63:63:71:ff:96:d1:ff:fc:2b:4a:eb:95:a5:01:
de:28:94:35:2d:f5:a6:46:22:73:a9:2a:43:c5:02:
be:92:fc:46:1e:a5:2c:b3:ea:f6:2e:01:eb:ec:f6:
64:89:a5:5e:f2:82:55:07:81:c0:71:34:f9:b6:7e:
57:3a:3a:23:4d:4b:6d:b4:04:66:70:1a:61:e8:78:
69:86:3b:03:dd:cb:c7:e9:ad:98:0d:28:05:83:5d:
0f:8d:1e:fb:84:20:c3:8a:b2:8b:91:ae:bd:4c:ef:
4e:2d:d6:37:93:26:57:85:5a:db:e0:39:a6:db:72:
62:c3:e6:21:4a:e7:60:7b:0a:11:ce:e9:be:4b:d4:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3F:A5:8D:9B:49:1E:51:83:C3:91:E5:C5:0F:26:74:EC:00:2B:01
X509v3 Authority Key Identifier:
keyid:D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/3130332e3233342e33342e302f32332d3233203d3e20313531353231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.234.34.0/23
Signature Algorithm: sha256WithRSAEncryption
22:f6:70:10:40:56:f9:66:e7:15:fc:3e:3f:0c:c1:75:8a:d4:
02:2b:83:aa:10:0e:d2:5c:a3:32:50:35:d0:0d:69:41:49:39:
93:85:8f:ad:9b:02:78:59:7f:4e:f7:eb:cf:1e:6a:d1:f8:31:
bf:f4:91:8b:60:09:dc:77:1d:9a:c9:43:d0:2e:87:d3:8a:ff:
54:3e:57:54:27:10:20:61:8e:9b:b4:3e:6f:0c:24:b6:66:15:
c0:a1:1a:63:68:c0:79:51:9b:7c:e9:37:35:5f:9b:83:a6:77:
43:bd:b3:c3:a6:4a:93:84:18:d2:59:f5:9a:74:cb:1b:4e:60:
13:0e:24:6a:df:1b:64:41:62:20:75:39:e8:4d:16:3c:b7:c9:
3e:0d:9a:18:4d:50:81:d5:65:35:f5:05:36:29:0a:57:02:93:
91:95:3d:11:f8:7e:ed:a9:ff:5c:95:e5:49:ce:f1:53:72:66:
b3:51:5b:bc:63:ef:a7:d1:1d:7a:92:b3:32:eb:04:15:78:d2:
39:47:26:c9:04:58:63:6a:e7:1a:6e:e8:47:7a:c7:28:86:a6:
69:24:15:ba:3b:c5:45:59:07:b9:0b:f1:75:cd:85:1b:cd:0c:
2c:9a:2b:b8:8e:d4:eb:2e:f6:41:22:66:f6:ef:63:b1:9f:75:
ce:ca:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:05 2026 by rpki-client