
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: 8jyMA8Gmhc97Vi1yoxS8QxZYiktn7eC0pGgFqwBSsy8=
Subject key identifier: BC:C8:C0:56:7C:22:F9:7D:60:17:DA:D1:0D:F3:4A:63:D8:4E:A3:FB
Certificate issuer: /CN=607EB065616BF1A985E6E549EC540E1C94E94819
Certificate serial: 472861AABC292F58D37D7EEAA3F273330548E1F2
Authority key identifier: 60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa
Signing time: Sun 03 May 2026 03:16:10 +0000
ROA not before: Sun 03 May 2026 03:11:10 +0000
ROA not after: Sun 02 May 2027 03:16:10 +0000
asID: 135478
IP address blocks: 103.121.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.crl
rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:54:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:28:61:aa:bc:29:2f:58:d3:7d:7e:ea:a3:f2:73:33:05:48:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607EB065616BF1A985E6E549EC540E1C94E94819
Validity
Not Before: May 3 03:11:10 2026 GMT
Not After : May 2 03:16:10 2027 GMT
Subject: CN=BCC8C0567C22F97D6017DAD10DF34A63D84EA3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d4:ed:ca:3b:5c:11:9f:6d:40:98:7c:3a:53:
f8:98:00:cb:10:ed:1d:c0:3f:a1:b9:8b:90:c4:d6:
b1:09:63:0f:44:24:16:2d:95:65:58:af:af:b4:0f:
37:eb:99:9d:b8:6c:82:7c:07:fa:0f:b4:8a:e8:16:
a8:9f:8b:56:38:78:20:26:79:26:cf:24:a6:91:0c:
1a:ad:24:77:2c:01:58:46:09:2d:ac:3b:c3:8e:1b:
1d:0a:5a:80:ea:2c:b2:b0:1c:72:d8:2e:d5:27:b9:
e4:97:08:72:02:88:b2:69:82:5a:88:fe:13:96:10:
c9:19:68:2e:7b:cf:60:63:01:20:11:ed:e4:96:4c:
14:51:37:6c:25:4f:ae:40:e6:9b:da:7d:d4:d5:04:
e6:0e:6f:8b:1c:bc:89:0c:21:3d:c4:9f:f0:10:c2:
48:35:07:ee:3d:2d:db:c1:7d:73:a7:49:99:97:c3:
29:c9:83:df:a3:5e:f8:dd:e2:79:29:7d:3e:46:aa:
e8:71:6e:59:60:7d:73:a0:d5:9e:a4:69:d6:d3:5d:
9e:70:e3:e7:3b:c9:fd:32:5c:13:0e:3c:0c:a9:dc:
cf:5c:be:4e:d9:63:a3:b5:7f:98:56:ab:8a:7f:b7:
96:3b:fb:6a:0c:79:19:68:b1:2b:ec:1e:c2:71:40:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:C0:56:7C:22:F9:7D:60:17:DA:D1:0D:F3:4A:63:D8:4E:A3:FB
X509v3 Authority Key Identifier:
keyid:60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.182.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:fc:a3:78:bc:48:22:0f:96:4d:ce:3b:69:d6:e9:3a:15:73:
8f:35:5d:d0:05:5c:ce:92:e2:15:ea:29:1f:88:1d:fc:db:ac:
48:63:fb:08:c5:fb:30:ee:59:37:02:05:41:2b:98:b3:98:96:
17:d7:b0:fb:57:96:51:8f:9d:a3:c1:98:48:e2:43:3e:06:64:
23:98:a2:93:b8:e4:91:18:a3:90:c8:69:67:68:30:2d:55:58:
58:e7:1c:e4:6f:09:f0:2e:18:2d:c3:aa:71:29:06:23:11:fb:
82:65:03:ba:3c:31:81:fa:15:0b:d8:0a:a1:bb:e4:0c:f6:33:
f1:7d:e9:20:db:bf:2b:93:1c:3d:e5:f3:26:88:35:91:04:4a:
94:a3:08:cf:b0:c1:c1:0c:63:35:3b:88:d5:24:be:87:00:3d:
58:4f:40:df:13:00:6d:fe:06:3e:10:28:02:88:a7:b9:4c:ae:
0a:3b:28:b6:d6:91:0f:e9:bd:f2:66:3b:e4:12:e7:d5:64:22:
03:f5:c2:5a:c3:ec:f7:ff:2f:4a:8d:12:6e:0b:7a:4b:db:26:
02:80:2d:70:6d:b7:f9:4a:97:18:8f:3a:20:a7:60:d1:b7:b7:
a8:10:f6:fc:72:33:33:77:b8:94:5a:d6:28:9e:8a:78:8a:dd:
28:83:47:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:31 2026 by rpki-client