
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39322e302f32342d3234203d3e20313331373338.roa
File: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (raw, json)
Hash identifier: y23ei7JhisKDcrmLs/IfTlddxIuJqQ3o+RaQBaZ//Ws=
Subject key identifier: F3:1D:71:7C:C6:28:2D:37:48:14:60:37:13:BB:7A:38:3C:67:18:D6
Certificate issuer: /CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D
Certificate serial: 6C589E0C485968651A584B33D45AD3F31B18BBEF
Authority key identifier: ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39322e302f32342d3234203d3e20313331373338.roa
Signing time: Sun 03 May 2026 03:16:05 +0000
ROA not before: Sun 03 May 2026 03:11:05 +0000
ROA not after: Sun 02 May 2027 03:16:05 +0000
asID: 131738
IP address blocks: 103.21.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl
rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:58:9e:0c:48:59:68:65:1a:58:4b:33:d4:5a:d3:f3:1b:18:bb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D
Validity
Not Before: May 3 03:11:05 2026 GMT
Not After : May 2 03:16:05 2027 GMT
Subject: CN=F31D717CC6282D374814603713BB7A383C6718D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:81:5d:b3:44:d7:01:ea:0a:e0:6d:d1:38:
e4:b9:71:91:f8:aa:33:16:8c:cb:e2:0d:1d:01:7e:
b2:17:6e:cc:1d:36:c8:89:be:61:f3:e5:49:57:eb:
60:6d:63:46:8b:70:11:b4:df:be:31:b9:98:08:b9:
09:0e:2e:3d:fd:f5:2f:cc:48:0f:e5:b3:6e:7b:66:
34:75:77:81:42:14:d5:a9:f7:5e:e1:88:f4:96:6f:
e3:e5:9f:4d:20:d9:aa:c7:d6:4a:b4:cc:c1:99:2c:
6d:57:ca:06:52:9f:05:a6:28:fe:7f:4f:87:a0:d5:
0c:ab:13:a2:d9:67:9d:c9:59:4f:b1:68:76:55:3a:
7e:d3:a6:92:20:91:4b:79:5c:d3:c6:85:00:38:1a:
55:49:f7:9f:2b:d6:84:2c:a7:bf:f8:27:27:b4:3c:
b9:20:04:4c:56:de:61:33:42:ed:e8:c1:98:13:cb:
48:ac:a7:d9:06:42:ca:db:9c:22:0a:c0:5a:14:f3:
b5:26:25:49:7d:c4:bd:2b:cd:52:31:ae:7d:fa:da:
15:99:90:82:42:0e:25:37:a7:32:65:c5:cb:aa:92:
d7:69:24:a8:8f:0c:30:e0:30:f0:5f:df:64:0f:c8:
53:cf:ad:5f:5c:f5:29:eb:de:98:6f:50:ab:45:b4:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:71:7C:C6:28:2D:37:48:14:60:37:13:BB:7A:38:3C:67:18:D6
X509v3 Authority Key Identifier:
keyid:ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39322e302f32342d3234203d3e20313331373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.92.0/24
Signature Algorithm: sha256WithRSAEncryption
55:7d:e4:e5:b2:32:04:38:e5:f3:f1:5c:cd:8c:37:87:be:b0:
bb:ff:8d:b2:29:02:c4:67:bf:69:87:4d:80:d0:41:40:1d:42:
ef:5c:9a:a8:57:50:4e:5c:d9:93:b1:1b:37:eb:5d:68:59:77:
ac:36:f9:40:68:a7:47:fb:2f:c1:3d:4d:2a:2d:30:0f:f6:7b:
ba:52:23:96:71:2a:a1:f2:3c:bd:e0:0a:ef:74:cb:ce:dd:41:
7d:84:38:0f:d8:a4:73:56:8e:e3:6e:b7:40:b4:24:b9:7f:25:
e5:c5:f8:c9:aa:1a:8d:59:4c:8a:67:e9:a8:d4:e9:73:cc:c1:
3a:18:a2:8a:81:ae:5c:1c:25:68:16:0c:53:31:a5:67:7f:e5:
0d:32:3d:19:83:52:4b:ad:d6:85:c1:a3:3f:85:50:44:de:e7:
b7:34:2f:eb:c6:ae:2e:bb:9b:d9:ff:0d:7c:1d:df:1e:36:6e:
a9:b7:e1:dd:30:77:67:62:0a:98:9d:20:53:19:8b:8e:c1:f0:
9f:a3:38:7a:64:37:94:a5:9c:de:7a:5f:70:ab:a8:40:b1:de:
7d:43:f1:ba:3a:69:78:d2:ba:44:3e:8d:3b:51:c8:a4:a9:3d:
31:87:2c:15:11:e3:5b:fe:a9:ee:63:4c:0d:5a:78:ab:ee:84:
53:a0:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:38 2026 by rpki-client