
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa
File: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (raw, json)
Hash identifier: 0SKGtnqhjPRa1mtjwBX9w2vC6HvZzxTKz3FtFPwDTT0=
Subject key identifier: FB:D6:4B:09:F9:2C:F7:B9:27:39:90:92:17:59:A5:FC:8D:64:A4:87
Certificate issuer: /CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5
Certificate serial: 220A77AA625DB0F28A9C178E7E303E6B319A1317
Authority key identifier: 69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa
Signing time: Sun 03 May 2026 03:15:41 +0000
ROA not before: Sun 03 May 2026 03:10:41 +0000
ROA not after: Sun 02 May 2027 03:15:41 +0000
asID: 149752
IP address blocks: 103.189.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl
rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0a:77:aa:62:5d:b0:f2:8a:9c:17:8e:7e:30:3e:6b:31:9a:13:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5
Validity
Not Before: May 3 03:10:41 2026 GMT
Not After : May 2 03:15:41 2027 GMT
Subject: CN=FBD64B09F92CF7B9273990921759A5FC8D64A487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:d6:9e:c8:63:3e:15:00:b2:3b:c8:0a:b2:
3d:2d:78:c6:a1:04:d0:6b:10:30:5e:17:14:2e:d2:
00:25:e9:ec:e5:3b:b7:48:07:5e:21:13:6f:f2:66:
6c:44:95:79:57:6d:0a:8f:1b:1a:fd:c0:c9:4d:68:
1f:f2:43:be:ce:ec:83:25:0e:2f:1b:75:f4:c6:e0:
f5:73:92:e0:ef:08:fc:cc:e7:c0:5c:cb:14:cd:80:
01:79:87:fe:4b:2f:60:15:e8:5f:cb:b7:14:fb:83:
c9:d9:39:a4:c2:ee:a2:f5:a9:15:5d:0a:4a:43:e9:
5e:f0:a4:41:76:23:d8:c0:c5:2f:f6:34:bc:69:20:
fe:17:74:27:10:50:72:1b:6a:65:9d:24:5a:88:fc:
da:90:6b:c4:e2:c3:23:d1:a7:eb:f2:dc:45:01:25:
3c:f5:2c:6d:07:1c:63:78:4a:0d:6d:d7:a5:0d:86:
5e:27:d9:11:ea:89:e0:a3:85:e3:b0:85:ed:b4:43:
1b:87:34:1d:80:5e:e0:dd:a8:64:6f:a3:9a:a0:0e:
f7:09:fb:e1:d7:26:62:89:10:fe:26:5b:37:42:ae:
03:04:d1:21:39:c1:d6:3a:7c:bd:0f:06:8b:e9:f3:
f4:c9:bb:ea:11:5c:aa:99:31:65:be:21:ec:0a:3e:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D6:4B:09:F9:2C:F7:B9:27:39:90:92:17:59:A5:FC:8D:64:A4:87
X509v3 Authority Key Identifier:
keyid:69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.138.0/24
Signature Algorithm: sha256WithRSAEncryption
02:50:db:b4:26:57:ba:1c:f8:b3:8c:75:22:b8:51:8b:59:3b:
ad:ab:fc:4d:dd:1f:61:3a:fd:8e:dc:96:a6:fa:07:07:a9:b0:
52:44:91:d0:5b:07:5f:af:d3:f8:9d:80:e5:17:72:b6:f0:88:
0c:77:0d:b4:54:e9:00:11:62:32:16:9f:ae:ec:ab:a3:de:7b:
0c:d8:00:76:e1:80:ac:06:5a:8d:67:6b:f0:3a:72:ce:4d:28:
b7:e1:a6:b6:77:77:d8:ed:09:9d:55:b5:f6:98:d6:28:9e:26:
a0:b3:93:a4:07:2a:9d:81:88:3f:93:41:3c:0d:c0:5c:db:d4:
cb:43:0d:43:ab:f8:9c:1a:a0:1d:21:a1:3f:aa:c2:26:90:7b:
79:93:7d:18:f4:82:78:d8:2f:8a:1d:b2:1e:e2:1e:a1:07:95:
92:f1:2f:8b:ea:b6:4c:53:06:4c:21:1b:c6:c0:a4:f8:cd:d1:
4d:8f:91:7a:05:bb:d7:8a:f7:77:a9:ce:4a:a8:23:16:8c:2c:
bc:27:42:60:42:a2:ce:fc:25:16:5f:d2:ea:25:03:4f:9a:de:
fe:f2:92:cf:b7:76:1a:7c:9e:48:38:84:43:ee:48:a9:1c:f8:
60:28:3f:5a:e0:10:c0:ab:a7:db:08:3d:bd:f0:1d:60:8b:bd:
9f:c4:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:48 2026 by rpki-client