
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa
File: 3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa (raw, json)
Hash identifier: cdYCODbpzOPcSEGOyln69IWngFwXNw8457vXW43CyIQ=
Subject key identifier: 69:4E:AD:25:CF:E4:54:F4:16:6A:E9:1C:A0:FB:76:15:37:8A:B5:0B
Certificate issuer: /CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Certificate serial: 266CA913FF6FE6D83B37CCA6C1A48A7641661BED
Authority key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa
Signing time: Sun 03 May 2026 03:12:39 +0000
ROA not before: Sun 03 May 2026 03:07:39 +0000
ROA not after: Sun 02 May 2027 03:12:39 +0000
asID: 132644
IP address blocks: 103.253.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:6c:a9:13:ff:6f:e6:d8:3b:37:cc:a6:c1:a4:8a:76:41:66:1b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Validity
Not Before: May 3 03:07:39 2026 GMT
Not After : May 2 03:12:39 2027 GMT
Subject: CN=694EAD25CFE454F4166AE91CA0FB7615378AB50B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:c9:e1:01:8b:99:51:c9:d2:97:07:e7:18:
34:2c:a9:77:1f:d2:50:5b:ec:65:d7:e2:e1:77:de:
87:44:b6:f8:20:df:bd:de:9e:7e:57:8c:0c:f8:19:
cf:a7:78:90:39:6a:1b:3f:9d:5e:d9:7a:be:fb:64:
d4:75:74:fe:0f:48:76:aa:cc:bc:b3:1c:0c:26:bf:
17:47:97:3d:b2:53:95:19:fa:53:ac:47:25:c9:8b:
44:da:f6:1f:ed:5f:e1:7c:91:be:de:fe:a4:4f:bb:
a6:2d:03:26:e8:74:9c:38:3a:72:97:d1:ba:3f:a6:
e5:41:1a:77:28:b6:ce:cb:f6:a9:e8:ff:5e:c0:90:
50:0e:f0:cb:b5:cd:d8:97:33:bd:cc:5e:2e:97:1b:
33:0c:fc:a8:83:34:5f:b4:93:b2:29:fc:b3:78:6e:
c1:b8:2c:b6:b6:e3:ac:bc:e9:bb:25:28:ef:21:f1:
b9:58:b1:e4:a0:ae:ae:6d:fb:15:47:8e:5e:75:29:
53:15:23:21:de:e0:37:64:52:f8:32:14:0b:2c:80:
f4:8e:57:37:33:47:6f:8b:2e:f0:56:39:fb:f7:9d:
dc:ec:f6:fc:4c:23:63:66:f7:90:61:71:c1:f2:5b:
68:45:21:7e:48:70:19:e1:a0:73:61:d2:9c:0d:de:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4E:AD:25:CF:E4:54:F4:16:6A:E9:1C:A0:FB:76:15:37:8A:B5:0B
X509v3 Authority Key Identifier:
keyid:90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.253.68.0/23
Signature Algorithm: sha256WithRSAEncryption
36:21:b7:61:57:2f:dc:fa:e2:06:7d:78:68:d1:40:3e:39:71:
43:0c:62:dd:63:4a:c6:f9:a7:07:ba:64:76:9f:d5:6c:fe:c8:
ab:c6:12:79:67:49:59:15:bd:2d:a5:02:db:c3:cb:1f:9c:bd:
c9:f8:c8:dc:d5:97:03:16:98:be:dc:4a:09:a2:30:7c:bd:86:
e4:09:1f:9e:67:d7:1e:46:85:6f:65:7a:cc:c3:0c:ae:cd:f1:
32:f9:d8:2c:05:6d:05:fe:41:1a:a5:9b:e6:26:1a:97:05:4b:
b6:81:10:02:02:3f:2c:14:a3:e8:11:5e:fa:75:b7:7c:56:d8:
72:aa:a5:8c:de:c6:53:15:b4:57:21:76:12:6e:88:cb:8c:be:
d7:ba:c2:62:3f:83:79:34:4d:84:19:72:e3:9f:2b:41:d3:73:
20:1f:be:e1:8a:06:6e:26:e6:bc:4e:04:89:d3:33:33:8f:b3:
19:d1:da:27:b1:a9:dd:33:fa:eb:26:44:fd:45:de:7b:f4:63:
1d:65:06:5c:b1:0a:6e:0f:4f:b1:d0:22:db:0a:9a:bb:c3:9c:
ac:06:9a:64:42:ca:88:67:a3:8e:c1:41:50:bc:b4:fd:81:83:
fb:ff:3a:f0:f8:4e:64:82:c1:3c:a9:8b:d5:2f:8c:cf:a9:e1:
43:9e:cd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:25 2026 by rpki-client