
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/3130332e34302e39322e302f32332d3233203d3e203633353034.roa
File: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (raw, json)
Hash identifier: n/NFSto6DR1M2MbEoIzv13Er2v00d7K3BFa5q9qEbBw=
Subject key identifier: E8:AC:18:28:F2:9C:47:37:43:41:A9:3C:4A:37:27:03:34:5E:51:61
Certificate issuer: /CN=D21FEA1A58BBE03288B8857877AB42210C1B816B
Certificate serial: 0C6089B92486EC38A6836C680FD19EF83A952B42
Authority key identifier: D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/3130332e34302e39322e302f32332d3233203d3e203633353034.roa
Signing time: Sun 03 May 2026 03:15:45 +0000
ROA not before: Sun 03 May 2026 03:10:45 +0000
ROA not after: Sun 02 May 2027 03:15:45 +0000
asID: 63504
IP address blocks: 103.40.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl
rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:60:89:b9:24:86:ec:38:a6:83:6c:68:0f:d1:9e:f8:3a:95:2b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D21FEA1A58BBE03288B8857877AB42210C1B816B
Validity
Not Before: May 3 03:10:45 2026 GMT
Not After : May 2 03:15:45 2027 GMT
Subject: CN=E8AC1828F29C47374341A93C4A372703345E5161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:a4:d0:25:2f:c0:7d:60:6d:7f:da:77:24:
fc:d4:19:75:01:27:6b:f4:2e:27:64:51:2d:dc:d0:
20:d6:7f:e7:95:c2:07:75:98:0f:cc:54:d5:1f:f4:
4d:6a:e8:65:57:7d:38:1d:0f:bd:87:01:6f:4b:5f:
29:75:fc:41:42:a8:99:9a:7d:81:dc:32:b6:12:2d:
1c:b7:67:f4:d4:ed:e1:56:38:b4:a1:36:fb:55:bc:
c9:ba:40:b2:e9:58:2e:de:d5:c2:b4:44:5b:3e:aa:
21:5a:e4:23:a0:ad:a1:2d:eb:b0:3f:1e:53:38:e5:
9e:63:29:68:be:a1:ba:9a:ef:be:52:17:58:ae:17:
37:6f:d4:29:7d:7e:73:d7:2b:a7:cd:a7:0f:a2:95:
d9:92:a7:d6:4e:b3:e7:18:63:05:c0:a3:73:ee:55:
2a:99:d2:69:60:c4:ab:89:35:29:09:dd:51:f2:ff:
49:ab:c0:d6:35:21:ed:8f:83:59:94:ad:dd:05:b2:
a9:15:06:ef:a1:24:b2:75:e5:b0:32:ca:0a:b7:dc:
36:89:ca:c2:65:bd:64:9b:45:44:02:56:5e:04:4a:
59:29:a9:95:9d:e7:3f:4c:21:21:db:eb:cd:d6:c1:
c4:90:8b:59:8b:d4:b1:25:f5:f8:55:b0:4a:26:eb:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AC:18:28:F2:9C:47:37:43:41:A9:3C:4A:37:27:03:34:5E:51:61
X509v3 Authority Key Identifier:
keyid:D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/3130332e34302e39322e302f32332d3233203d3e203633353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.40.92.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:e5:e0:0b:3c:09:e1:2c:6e:3f:13:ca:08:83:e2:b3:9a:a7:
5a:c3:56:e1:f8:15:b1:33:22:81:53:37:77:d8:f0:92:05:da:
bd:2f:28:0b:9f:4d:32:36:5a:21:a4:39:f0:25:ac:6d:5e:8e:
99:54:ca:2b:86:aa:10:49:e2:9e:18:8f:51:c8:0b:60:6d:1c:
6d:9f:75:b7:46:82:97:e3:83:f0:23:8f:64:0f:a0:94:41:4c:
e0:f2:27:1b:3f:65:29:a9:73:6c:c5:c8:d0:f9:44:12:03:49:
a9:fb:76:7e:34:a8:b1:9c:2b:2d:dc:74:03:0f:47:18:21:ea:
49:5a:4e:d8:9d:10:e6:82:2d:c1:89:81:79:5b:71:3f:b1:ee:
85:b3:84:03:02:f9:0d:94:6b:9f:43:0d:51:41:09:86:bb:53:
d5:fb:74:ed:73:70:7e:57:e8:25:68:7e:85:7f:d9:70:e5:fb:
c7:aa:3c:d5:32:0f:d9:61:05:fb:32:e7:33:8d:aa:8f:4f:8c:
53:bd:e1:05:fe:70:1b:02:3d:1c:d3:27:0b:29:7c:45:1c:e9:
12:52:89:92:d8:0d:7c:d4:79:1a:bc:ff:3a:2b:c3:10:ad:7b:
db:e8:d6:9b:a7:2d:7f:dd:4e:87:bb:94:0c:f4:98:66:bd:9e:
ad:89:7c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:22 2026 by rpki-client