
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138372e302f32342d3234203d3e203538353533.roa
File: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (raw, json)
Hash identifier: x5RJwcfSJcf4TPrfYCbrHH5Zw0JrrU1hDPa+akMmLpg=
Subject key identifier: 99:11:DD:D6:6F:2E:8A:24:B6:AF:AE:D6:B8:A7:9C:5A:BA:1D:68:1B
Certificate issuer: /CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A
Certificate serial: 330F536DE1DB0C02BB9DF517BC9089F54AEB9DA1
Authority key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138372e302f32342d3234203d3e203538353533.roa
Signing time: Sun 03 May 2026 03:12:28 +0000
ROA not before: Sun 03 May 2026 03:07:28 +0000
ROA not after: Sun 02 May 2027 03:12:28 +0000
asID: 58553
IP address blocks: 103.20.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl
rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0f:53:6d:e1:db:0c:02:bb:9d:f5:17:bc:90:89:f5:4a:eb:9d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A
Validity
Not Before: May 3 03:07:28 2026 GMT
Not After : May 2 03:12:28 2027 GMT
Subject: CN=9911DDD66F2E8A24B6AFAED6B8A79C5ABA1D681B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:04:86:55:8f:3b:39:62:48:08:cd:de:ee:
e1:f5:84:d7:67:cf:39:81:69:5e:66:51:03:0b:44:
7e:52:95:fe:69:4a:db:9e:32:f6:dd:70:64:fd:29:
0e:f7:f1:9e:40:df:97:f3:c4:ac:ff:e4:0e:77:20:
61:94:2f:b5:a9:1b:81:ac:48:76:44:2f:f0:94:79:
84:ca:bb:d8:d2:a6:f9:92:29:46:c6:e7:d5:bd:20:
26:0f:36:4b:2a:93:7d:a4:82:63:10:1b:7d:88:2a:
0f:9e:cd:1e:b9:8f:c9:bd:be:fe:ce:c9:ab:52:82:
6c:d7:1f:d8:d0:bb:7a:73:5c:7e:cf:67:a3:0c:c5:
47:db:1c:2c:73:34:1b:87:91:a0:86:e2:f6:f9:1f:
36:25:06:39:83:d3:dd:67:b9:38:79:b0:e4:1e:cb:
50:33:51:25:30:c6:ba:39:3b:dd:11:9d:ba:01:8c:
91:a3:74:ac:0d:21:5b:0a:5a:fd:2f:8b:38:76:9a:
da:b7:dc:69:3c:a4:6e:63:8b:32:07:9b:27:9b:87:
5e:97:7e:88:26:db:38:8c:64:c5:72:b5:c8:fb:3f:
80:91:b9:a3:85:86:1f:8c:09:01:9d:ab:b9:a7:28:
34:b2:6f:4b:1f:aa:a7:41:9d:68:4c:5d:a8:09:0a:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:11:DD:D6:6F:2E:8A:24:B6:AF:AE:D6:B8:A7:9C:5A:BA:1D:68:1B
X509v3 Authority Key Identifier:
keyid:69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138372e302f32342d3234203d3e203538353533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2c:68:ee:15:2b:01:ba:b3:7a:08:da:28:5a:b4:d5:4c:d3:
2f:46:ef:2f:d0:0d:5b:3d:42:58:52:b9:e5:bc:4b:21:a4:6c:
cf:7b:09:f6:d5:a7:b7:2d:f7:18:23:6c:8f:a0:2b:25:c2:09:
5a:9e:42:a4:c9:49:89:17:05:2d:ae:07:37:95:5b:96:8d:cf:
20:9f:d8:46:ac:12:a0:fd:a9:0b:7b:cf:29:5b:cc:96:36:72:
f9:0f:fb:4c:f6:35:f4:d1:d6:18:64:62:f8:29:e8:4f:12:3a:
7e:09:7e:4b:d5:8f:29:09:32:16:27:38:c7:7c:af:03:20:25:
ae:bc:f3:46:8a:f8:62:5a:5a:29:4b:1e:07:83:ba:d9:a6:88:
99:37:89:94:56:00:84:24:96:83:b7:9a:41:6a:cc:41:66:03:
fd:38:2f:d8:3f:de:7d:c9:bc:57:2e:56:c3:03:29:9c:f5:c6:
e9:70:86:6e:35:23:ed:e9:93:98:8a:cb:0e:b4:06:7c:29:b9:
b6:da:52:a1:25:ae:76:77:41:91:c0:56:8c:0b:b5:4f:e8:3a:
7b:a7:d2:7f:f9:63:62:13:cb:8c:d9:4a:0e:dc:f4:db:c0:b6:
6c:09:90:94:91:dc:fc:67:5e:73:b2:9d:3f:9c:e4:2d:58:da:
dd:6a:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:45 2026 by rpki-client