
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa
File: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (raw, json)
Hash identifier: 5Udd7i3unVPfssV9yLKsZQmnf1JloA1KVW0NBCTNShE=
Subject key identifier: BA:1D:2F:6C:BA:82:07:34:78:EC:5D:98:9F:F9:BC:2F:EC:E9:64:27
Certificate issuer: /CN=7F27536154B06F776D6914F8A4F12A5DE8458BD0
Certificate serial: 4FD24AB3FD6362474413D18A5AF8CF0EA9611CC0
Authority key identifier: 7F:27:53:61:54:B0:6F:77:6D:69:14:F8:A4:F1:2A:5D:E8:45:8B:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F27536154B06F776D6914F8A4F12A5DE8458BD0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa
Signing time: Sun 03 May 2026 03:10:54 +0000
ROA not before: Sun 03 May 2026 03:05:54 +0000
ROA not after: Sun 02 May 2027 03:10:54 +0000
asID: 150943
IP address blocks: 103.210.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.crl
rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F27536154B06F776D6914F8A4F12A5DE8458BD0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d2:4a:b3:fd:63:62:47:44:13:d1:8a:5a:f8:cf:0e:a9:61:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F27536154B06F776D6914F8A4F12A5DE8458BD0
Validity
Not Before: May 3 03:05:54 2026 GMT
Not After : May 2 03:10:54 2027 GMT
Subject: CN=BA1D2F6CBA82073478EC5D989FF9BC2FECE96427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:ea:d8:a5:3b:ca:7f:d6:2f:51:e6:76:5a:
9e:69:92:02:01:02:c2:5f:0d:3a:d0:f7:69:d7:5f:
10:42:c7:3e:ed:0d:3f:08:37:2d:05:cb:46:f5:1f:
60:19:67:d8:4d:53:c8:28:ee:b8:1c:44:a3:3c:5e:
0e:bf:3b:6b:69:33:c7:61:0a:22:0e:db:90:41:11:
a2:84:53:bf:48:ce:b1:80:4c:08:cc:1f:a0:2b:7c:
af:03:ca:20:52:63:91:6f:37:dd:1d:31:14:e5:6c:
65:b1:4e:e1:3d:49:35:77:a1:56:9c:e1:ae:6a:00:
ae:32:4c:8b:86:7f:0e:a1:e0:ed:23:57:b5:14:8a:
b3:74:fe:22:f9:9d:f9:cd:ac:97:17:1f:e9:33:c4:
a9:04:8d:d1:32:71:8a:11:a7:a8:6f:2e:e7:27:6c:
b6:aa:b8:94:24:2d:b4:36:18:fd:48:68:3c:bf:a3:
7d:6e:eb:14:c6:85:63:f4:07:e3:32:d1:6e:e2:28:
cd:3d:b1:9f:e7:6c:76:88:d9:8b:60:be:8e:ca:e5:
71:f3:17:54:10:6e:24:42:bb:f7:5a:e5:11:45:52:
95:5b:ce:1f:69:2f:43:8e:b6:67:78:70:bc:13:12:
97:11:c8:5d:f9:b8:ed:af:b1:28:f1:2a:36:b5:c5:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1D:2F:6C:BA:82:07:34:78:EC:5D:98:9F:F9:BC:2F:EC:E9:64:27
X509v3 Authority Key Identifier:
keyid:7F:27:53:61:54:B0:6F:77:6D:69:14:F8:A4:F1:2A:5D:E8:45:8B:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F27536154B06F776D6914F8A4F12A5DE8458BD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.221.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4f:48:88:8d:56:b6:4e:84:6d:d0:74:b5:6c:c7:62:77:dd:
d6:46:02:6c:f1:1f:8b:88:35:56:75:bb:b2:f0:c5:c2:d7:16:
12:ff:5f:de:97:e3:eb:99:24:c5:87:64:4a:d0:90:e4:27:d3:
59:12:23:f2:51:94:27:c0:82:76:fc:c3:07:09:aa:0b:84:bf:
1b:21:b0:0b:c9:56:9b:bc:6c:e4:9f:c4:80:f4:49:f2:5c:1c:
06:d5:25:a6:53:de:fa:76:0a:1f:43:ab:ab:74:01:7b:1b:41:
33:52:98:90:33:b1:5d:66:2f:92:ea:66:be:f7:5b:40:a1:d8:
86:23:d9:7b:2a:65:53:52:52:69:b7:6e:01:69:e5:db:81:f9:
c6:65:d0:48:74:b0:0e:a7:30:9d:e2:a5:4c:f2:13:4b:4a:19:
c4:a0:b6:56:6d:07:30:a3:b2:c2:62:e4:0b:3c:19:18:27:df:
ac:d3:31:3e:25:37:a0:80:00:e3:98:56:df:86:98:8e:fc:f9:
a4:eb:7c:3b:e9:04:4b:0b:56:3a:ca:f8:49:07:8f:dc:5d:30:
fc:a0:ef:58:09:ef:12:5b:e7:80:b8:27:75:66:18:66:b4:e1:
94:e1:b9:04:4c:69:0a:e5:6b:8f:5a:ca:b6:fe:c2:cb:96:ba:
83:83:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:36 2026 by rpki-client