
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa
File: 3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa (raw, json)
Hash identifier: yMpPQFyRnV2e6YSTMgcG1XsvzjweuetzgCss3TkjuJ0=
Subject key identifier: 57:FA:B2:C7:2B:88:22:13:A8:27:DC:C7:44:6B:3F:15:29:32:A0:78
Certificate issuer: /CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03
Certificate serial: 5727044285B331B243C3B78425A0470C0C015FC0
Authority key identifier: F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa
Signing time: Sun 03 May 2026 03:10:45 +0000
ROA not before: Sun 03 May 2026 03:05:45 +0000
ROA not after: Sun 02 May 2027 03:10:45 +0000
asID: 138842
IP address blocks: 103.138.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl
rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:27:04:42:85:b3:31:b2:43:c3:b7:84:25:a0:47:0c:0c:01:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03
Validity
Not Before: May 3 03:05:45 2026 GMT
Not After : May 2 03:10:45 2027 GMT
Subject: CN=57FAB2C72B882213A827DCC7446B3F152932A078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:de:ef:4d:90:3c:f3:8c:8c:1e:3f:cb:b3:
b5:d3:9f:a2:3e:49:69:8a:ca:66:b9:25:04:f4:ae:
fa:0c:5e:41:a9:62:e2:78:8e:8d:86:36:c5:f7:9e:
ac:30:ff:bc:69:24:b9:65:7d:6a:6b:bb:84:8d:0a:
4e:4e:6a:76:5f:f5:99:eb:7b:9a:3d:b1:3d:b2:ea:
46:f5:72:ad:f6:66:47:64:42:f5:d6:24:af:78:a2:
6c:77:99:a8:38:a3:54:67:aa:7a:81:44:e7:f0:7f:
86:da:83:86:6e:57:25:09:4e:48:cb:fb:d7:c6:47:
bd:d0:99:b8:8d:bc:df:6e:cc:d3:8a:2f:4d:e5:a5:
52:5e:14:db:bd:ef:00:1b:87:d8:ba:0a:20:97:ca:
db:53:e2:85:ca:3a:54:c9:b5:93:13:39:5e:86:e4:
87:f0:92:08:8e:4c:c5:c6:e9:e1:dd:33:a8:cc:5b:
41:8b:5b:3d:d8:0b:28:ed:95:67:2f:6d:e5:00:79:
d3:75:af:16:24:dc:1c:21:81:83:90:b3:53:a7:c6:
a6:a8:c4:c9:8d:c0:c7:c0:01:80:d1:70:2f:c0:5b:
ba:6c:8c:7c:32:73:e5:dd:b0:22:83:90:a4:15:e5:
ec:b9:bc:9f:d0:47:1d:f0:f3:bd:01:af:de:c3:ba:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:B2:C7:2B:88:22:13:A8:27:DC:C7:44:6B:3F:15:29:32:A0:78
X509v3 Authority Key Identifier:
keyid:F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.68.0/23
Signature Algorithm: sha256WithRSAEncryption
82:02:b4:fc:35:11:8c:81:fa:e4:ea:3c:cd:8b:17:ce:51:3b:
1a:d5:89:55:fb:05:58:d6:81:d0:d9:67:e0:95:dc:3e:8c:fd:
ba:8b:24:61:ad:50:3f:b5:8e:c1:44:25:7a:5b:47:24:89:ac:
14:7a:b3:c5:e1:54:40:ed:ae:2f:ad:87:a0:d1:6a:92:7f:6f:
51:25:ff:9d:58:1e:b0:74:d2:fd:81:83:51:9b:e2:5d:46:5b:
af:22:c4:9e:d4:3e:7d:73:51:3d:28:97:46:c9:39:f5:26:11:
95:64:6d:01:d9:80:8d:9c:16:e0:2f:fd:70:6d:e6:b6:9f:cf:
82:a6:0c:d5:c3:5d:16:ea:7e:27:d6:c8:a7:e6:a1:cd:e6:78:
b8:c5:19:2c:86:38:38:7e:dd:26:21:d5:a5:72:2f:e7:bf:13:
5b:ac:e3:4c:fa:9a:53:1e:fe:cd:e4:a7:90:8d:a0:50:65:7d:
81:94:60:38:6a:34:59:55:bc:44:5c:43:31:2a:87:54:cb:70:
72:af:72:f3:af:7b:3a:07:08:36:e1:aa:01:09:9d:b2:d4:d4:
ec:21:3c:63:cf:3b:cd:a5:39:1f:69:77:c5:34:58:a7:aa:9a:
aa:45:8b:ea:fb:7f:4c:4e:82:f5:fb:8f:e2:af:69:c2:3a:8d:
84:09:6d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:36 2026 by rpki-client