
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138352e302f32342d3234203d3e203538353533.roa
File: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (raw, json)
Hash identifier: +UxBUQ9LWmrn5ILaIrGRF3Yxb69k3Lazu4IHoItBqGI=
Subject key identifier: 8B:D9:27:06:7B:DE:B7:9F:BA:20:BC:8F:22:A5:E2:42:3B:34:22:DF
Certificate issuer: /CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A
Certificate serial: 42E493D2DE3F44AFB60F52468373BB2022EA9C84
Authority key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138352e302f32342d3234203d3e203538353533.roa
Signing time: Sun 03 May 2026 03:12:28 +0000
ROA not before: Sun 03 May 2026 03:07:28 +0000
ROA not after: Sun 02 May 2027 03:12:28 +0000
asID: 58553
IP address blocks: 103.20.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl
rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e4:93:d2:de:3f:44:af:b6:0f:52:46:83:73:bb:20:22:ea:9c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A
Validity
Not Before: May 3 03:07:28 2026 GMT
Not After : May 2 03:12:28 2027 GMT
Subject: CN=8BD927067BDEB79FBA20BC8F22A5E2423B3422DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:96:20:99:d2:b6:74:18:50:bd:af:54:44:
b2:d9:74:5f:e4:ab:81:6f:eb:32:ea:54:3f:9c:7f:
9a:d7:6a:36:ec:19:20:d4:70:ee:f7:a2:fd:7c:2d:
66:10:01:3f:5f:9b:34:02:a5:26:f8:95:db:75:1b:
cd:bf:7c:a7:56:f9:01:8b:ca:db:a7:16:dc:6f:e1:
26:7d:34:36:c4:d8:22:48:01:17:42:04:69:a8:99:
da:f1:e0:c1:1c:15:d0:27:1a:37:ab:58:85:74:0f:
a7:43:1c:30:89:ff:08:7d:c0:36:d9:88:71:06:12:
d7:92:0b:0a:6e:46:34:40:1e:64:8b:d6:02:d9:c3:
b9:c2:5c:ee:dd:fe:ae:e3:28:c6:4b:6d:15:a9:4f:
02:ac:5c:b6:e1:52:95:8c:5a:4e:aa:ce:1a:d8:b6:
44:2c:b5:c9:57:9f:6e:a3:89:16:12:86:ea:e4:e7:
ed:a0:c5:70:d4:e6:59:b2:0b:d5:ae:59:9c:35:d1:
42:c1:3f:0d:a5:97:f8:60:42:f6:ca:d4:c3:3d:8d:
ec:7d:65:07:77:4e:18:58:9a:a9:43:4a:ee:55:23:
f2:cb:45:69:e9:3e:6e:7d:7b:14:73:75:80:1d:8d:
e9:4d:10:16:8c:f4:02:41:9c:89:d2:68:e6:b5:ab:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D9:27:06:7B:DE:B7:9F:BA:20:BC:8F:22:A5:E2:42:3B:34:22:DF
X509v3 Authority Key Identifier:
keyid:69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138352e302f32342d3234203d3e203538353533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a8:ad:3d:09:a8:f4:64:bb:77:18:b4:f7:56:61:cf:23:b5:
91:bf:1f:fb:b1:24:b4:14:34:cf:26:ba:a6:ff:c0:23:29:51:
58:ea:6c:1b:5f:98:29:16:5b:b8:71:c6:5a:b6:b5:e0:a8:67:
76:65:d3:11:c9:23:7c:cc:4e:6e:92:91:f2:ec:fa:86:7b:a8:
21:c5:17:07:2c:20:45:08:88:6c:d7:ae:30:4e:4d:86:fb:0d:
95:ae:9b:6f:98:7a:af:c3:47:81:9a:61:b8:e9:33:02:77:26:
97:e0:15:8b:39:c3:1d:08:c9:b3:6f:48:82:02:33:0f:6d:fd:
e8:18:19:d3:f8:35:ea:18:32:7d:38:b7:18:70:50:81:71:72:
ec:dc:c7:ee:33:44:9d:d7:1c:8e:ef:e5:a5:d2:a2:1a:ef:86:
30:6e:8f:af:b0:3e:fb:a7:78:79:5c:c1:63:52:b7:96:85:fe:
16:7a:9e:e9:ad:83:53:cb:bb:f2:b3:3d:70:fd:7b:5c:fd:95:
3d:10:04:87:94:ef:27:d6:ff:1f:d8:e3:3c:84:b5:fd:b3:a2:
eb:81:a6:58:1a:a5:31:c0:f0:0a:21:f2:0a:ca:b1:fb:8d:ee:
17:14:bc:90:36:f6:39:b9:b7:0a:2e:7f:05:ec:cb:54:c7:1c:
a9:36:79:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:54 2026 by rpki-client