
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa
File: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (raw, json)
Hash identifier: wt9Ra/tPcAxIL+26JpZjFnizoxFKjLikDqtb0PRy/D0=
Subject key identifier: 2D:67:6E:DB:29:BC:70:E4:39:EC:D5:EB:97:EC:EB:9C:05:2B:3D:57
Certificate issuer: /CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C
Certificate serial: 3853536705DF596D3D5CB14626E3B39281B73657
Authority key identifier: 56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa
Signing time: Sun 03 May 2026 03:12:22 +0000
ROA not before: Sun 03 May 2026 03:07:22 +0000
ROA not after: Sun 02 May 2027 03:12:22 +0000
asID: 151584
IP address blocks: 103.216.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl
rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:53:53:67:05:df:59:6d:3d:5c:b1:46:26:e3:b3:92:81:b7:36:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C
Validity
Not Before: May 3 03:07:22 2026 GMT
Not After : May 2 03:12:22 2027 GMT
Subject: CN=2D676EDB29BC70E439ECD5EB97ECEB9C052B3D57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:de:94:f1:7b:84:94:a0:67:5a:38:96:b7:
d6:ac:3b:1c:cf:8d:0e:39:d6:d5:46:6d:61:ca:3e:
1e:32:32:c4:56:c4:c2:57:30:a8:0f:44:53:ba:31:
ad:95:94:66:b1:2b:ee:50:78:37:e7:6c:c9:56:d5:
bb:9e:4a:be:dc:ef:c6:b3:cc:4e:7c:fe:ec:84:22:
a2:78:4d:5f:dd:34:29:52:7d:7b:e3:87:9d:cb:0e:
de:c2:38:af:1f:90:35:01:bd:a3:87:3e:76:b1:c6:
0f:23:c4:ab:c6:c2:b4:3e:14:0e:30:c3:4e:60:3d:
58:68:ce:fd:15:30:52:cc:99:81:2e:6b:5e:66:3e:
ad:61:49:23:24:50:c0:d1:ef:ff:eb:45:0b:df:69:
b6:4b:c5:0e:84:7e:f8:66:58:0f:cf:7b:92:ba:2a:
ea:fd:4e:ea:3f:7a:f0:ac:60:47:ae:13:8d:71:bd:
0f:1c:e4:c0:dd:87:b1:e9:73:5b:d3:e6:64:2a:c6:
10:f1:11:82:59:31:86:63:f9:08:2e:92:29:ca:f4:
80:9a:e9:e4:f4:92:21:d1:a4:74:84:76:c8:c5:1d:
ba:79:be:50:18:86:1d:31:27:86:b4:a1:74:f6:22:
d4:d9:b3:38:b1:93:5f:80:b2:93:ec:0b:a3:6e:24:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:67:6E:DB:29:BC:70:E4:39:EC:D5:EB:97:EC:EB:9C:05:2B:3D:57
X509v3 Authority Key Identifier:
keyid:56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.106.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5d:55:c4:5c:97:ca:a7:31:5d:7c:ee:6b:55:fb:af:da:f6:
1d:c5:ee:4f:9c:52:40:c5:ea:8e:44:14:f2:b1:4b:80:b9:ef:
e9:39:dc:44:1d:74:23:ee:a5:ce:22:50:ba:68:2b:48:42:e6:
b9:cf:d1:b7:fc:39:df:34:06:bb:47:3c:93:30:86:a0:bb:ea:
9e:9c:f7:11:32:50:6a:c3:de:9d:d5:35:ab:a1:95:54:32:c2:
12:0f:26:8a:da:70:d7:c0:24:e1:20:f6:23:59:bb:27:1f:ec:
1e:55:9d:d9:0c:c2:90:f1:92:ee:37:d7:bc:ad:ac:a7:7d:1f:
12:02:b7:45:73:7e:8a:14:4c:ec:f4:5a:72:ee:c6:05:42:82:
26:70:b0:84:c2:59:eb:e6:13:65:39:08:7b:f2:50:cc:20:90:
55:9f:24:49:1d:43:e5:5d:81:83:3a:9e:36:b1:a1:ca:eb:9e:
c7:16:3b:d3:0f:ca:f7:dc:47:a4:b1:dc:47:45:08:c3:51:00:
20:21:b7:a4:e3:4e:3d:09:8b:00:99:00:00:11:40:5b:9c:46:
f3:39:b3:5b:cd:9c:22:7d:12:6f:16:2f:0f:90:e9:46:aa:67:
61:f8:8b:d7:d2:88:a5:9d:ab:95:7a:7c:49:2f:85:79:92:13:
bf:a2:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:58 2026 by rpki-client