
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa
File: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (raw, json)
Hash identifier: mP6KDhXtXACfDnyPSe3QyvooBjz+fxsWyqqYwJxWxso=
Subject key identifier: EF:14:79:67:82:12:41:9A:EB:EE:63:36:29:74:F7:26:D8:CD:CB:DD
Certificate issuer: /CN=4916565C52234EF87B2101E4B733E4674131F669
Certificate serial: 089C05A1F9D82B4F78BD03B24B329F8DBA8A9861
Authority key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa
Signing time: Sun 03 May 2026 03:11:07 +0000
ROA not before: Sun 03 May 2026 03:06:07 +0000
ROA not after: Sun 02 May 2027 03:11:07 +0000
asID: 138070
IP address blocks: 103.123.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:9c:05:a1:f9:d8:2b:4f:78:bd:03:b2:4b:32:9f:8d:ba:8a:98:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4916565C52234EF87B2101E4B733E4674131F669
Validity
Not Before: May 3 03:06:07 2026 GMT
Not After : May 2 03:11:07 2027 GMT
Subject: CN=EF1479678212419AEBEE63362974F726D8CDCBDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:39:0e:25:59:3a:e5:b7:95:b5:cc:8e:12:
3e:ec:f0:3b:29:25:47:e7:bd:43:48:c5:fa:41:aa:
e3:5e:7d:4c:ec:d9:d5:ad:58:5a:b2:ae:35:ab:5f:
a6:42:21:72:a9:0d:97:7a:70:37:17:a3:59:f0:21:
ad:c9:04:a8:a7:e1:6d:eb:d6:34:c3:78:70:34:1b:
00:2f:d2:14:e9:4c:5d:57:2a:28:83:b8:0c:56:4c:
b5:46:7c:b7:c4:b1:c5:b2:82:d6:1e:53:db:0a:01:
ce:67:cd:f2:9f:0d:64:9d:52:2a:38:b7:31:e7:e9:
2a:cc:9f:c2:a1:f9:ed:cb:2d:1d:31:ac:3e:9f:a5:
14:b6:79:20:96:a9:8f:d2:53:d0:6a:12:c6:5e:4d:
dc:92:9d:93:ed:1c:ea:70:81:a6:2f:ec:73:7f:07:
2f:7d:8f:79:d7:39:bb:28:0f:36:c7:a2:8b:32:0c:
aa:3c:d3:70:ad:93:c7:a7:8d:33:a8:c6:42:6d:58:
51:d9:12:e0:18:24:6e:a2:9a:49:55:bf:85:c2:fa:
f1:c9:60:74:73:c7:be:1a:28:d8:6e:11:89:f8:32:
40:d7:32:d2:a1:d3:f8:c8:e6:e7:c2:ad:1a:b1:8b:
ac:85:9b:37:1f:f6:94:b8:68:fc:97:25:a0:5d:19:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:79:67:82:12:41:9A:EB:EE:63:36:29:74:F7:26:D8:CD:CB:DD
X509v3 Authority Key Identifier:
keyid:49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.107.0/24
Signature Algorithm: sha256WithRSAEncryption
43:bd:68:94:df:d4:c6:82:84:eb:dc:eb:5b:c0:c1:56:ec:5a:
0b:29:e2:60:a9:eb:5c:f6:b3:93:16:30:35:51:8c:bc:3b:51:
ba:01:8e:88:d8:41:75:b4:db:0a:23:ef:ac:75:c2:d0:6a:3e:
42:d4:d0:71:c0:10:8a:88:14:6c:d6:92:cc:c7:c3:23:13:e7:
65:4c:2b:49:12:bb:ce:c2:29:78:7e:76:53:e3:2c:2f:f6:a0:
af:05:72:1b:14:a2:45:de:ca:2e:79:4b:c5:13:d9:0a:94:4b:
15:4e:36:f2:2a:0d:8e:96:1a:b4:fb:2f:53:da:53:76:9a:c1:
8b:5e:27:7a:40:06:dc:7f:43:0d:b8:2d:32:b2:dc:93:30:05:
ff:3f:99:f3:52:bb:50:af:b5:9d:58:93:15:c1:72:d5:ac:7f:
08:6b:a5:2e:64:7b:15:25:e6:7a:1b:f3:92:d9:81:07:db:3a:
e2:95:94:ee:0e:ac:73:5a:7c:d3:52:a1:a8:b9:69:34:ca:93:
39:f6:e1:44:8f:0c:c2:a3:a3:17:95:c9:58:ec:1e:74:3f:10:
2e:93:c3:ad:51:df:c8:3f:03:92:88:68:87:9f:11:9b:17:9f:
1d:76:d9:11:2a:f1:28:c2:d3:ae:1a:62:60:4e:fe:ba:ef:79:
db:9d:26:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:07 2026 by rpki-client