
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa
File: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (raw, json)
Hash identifier: otMHW/iALeuwuRkuqs8HAjMUYbLDHM48rPe1iSU6XuA=
Subject key identifier: 59:A8:C5:53:3E:8D:15:32:19:31:16:1A:E1:C6:C1:33:BA:00:6D:1D
Certificate issuer: /CN=8C2263C91E3FB8C4957501B1F669A2062170F9E0
Certificate serial: 248BEEE3D88F9F44797EE1AC0A9D15BDC49CD1BB
Authority key identifier: 8C:22:63:C9:1E:3F:B8:C4:95:75:01:B1:F6:69:A2:06:21:70:F9:E0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa
Signing time: Sun 03 May 2026 03:16:43 +0000
ROA not before: Sun 03 May 2026 03:11:43 +0000
ROA not after: Sun 02 May 2027 03:16:43 +0000
asID: 140454
IP address blocks: 103.108.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl
rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8b:ee:e3:d8:8f:9f:44:79:7e:e1:ac:0a:9d:15:bd:c4:9c:d1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C2263C91E3FB8C4957501B1F669A2062170F9E0
Validity
Not Before: May 3 03:11:43 2026 GMT
Not After : May 2 03:16:43 2027 GMT
Subject: CN=59A8C5533E8D15321931161AE1C6C133BA006D1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:96:72:03:ed:99:4c:10:88:b7:5f:f5:0d:
db:87:06:03:5a:22:de:c1:32:d0:fd:1d:d3:8c:4a:
90:95:c7:11:18:5c:67:8c:2f:60:f5:bb:9b:16:66:
5a:14:17:4a:1e:d6:81:c6:5d:cd:df:56:ec:e1:e8:
42:b4:71:04:c2:d9:7e:c4:b1:e1:b5:13:13:2c:96:
84:82:b8:92:89:ce:ae:ef:51:a2:28:11:ee:7e:2a:
39:fd:e4:fb:02:d3:81:b2:cf:57:43:23:ae:18:83:
8a:4f:a9:09:12:28:ee:13:3c:17:f8:25:81:3f:d8:
d2:fb:bf:49:95:b0:2c:a1:01:51:bf:fc:ca:0d:02:
fa:ea:1e:d6:9f:09:e3:46:09:1b:1e:68:64:3f:44:
f5:5c:9f:39:e4:7c:ae:f9:08:ed:b4:a4:6c:fd:5a:
a6:37:3e:cb:89:f0:e7:73:66:64:14:ea:a3:43:a4:
c9:6f:bb:90:74:a8:f6:a6:b2:d5:83:a1:6b:e5:e2:
b3:6e:6d:e4:e9:91:63:67:63:eb:de:de:bb:45:ae:
df:61:53:bb:1f:47:c5:72:14:86:b9:a6:c6:cc:34:
de:4e:36:f4:fb:38:47:8e:36:9f:5b:36:c9:f0:a9:
cd:a0:f7:2f:d5:79:46:c1:e8:da:fa:89:9a:69:c9:
f3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A8:C5:53:3E:8D:15:32:19:31:16:1A:E1:C6:C1:33:BA:00:6D:1D
X509v3 Authority Key Identifier:
keyid:8C:22:63:C9:1E:3F:B8:C4:95:75:01:B1:F6:69:A2:06:21:70:F9:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.156.0/22
Signature Algorithm: sha256WithRSAEncryption
41:59:9b:ff:89:dc:8d:79:db:d4:b4:12:ab:1b:f3:06:b9:c4:
3d:e8:ba:aa:c0:70:52:66:f6:29:18:10:35:ee:d3:65:67:11:
51:e3:e5:9a:5e:f4:8d:80:7a:78:50:d7:eb:9a:50:cf:a9:38:
57:f9:b3:86:6d:f1:a9:f9:5e:1e:0b:9f:fb:35:2c:02:0c:ef:
c6:8f:57:97:ab:66:38:9e:7f:17:89:5f:e4:aa:03:fb:31:79:
82:88:a6:e7:75:69:d6:1c:b7:5f:c3:c2:66:48:33:4e:51:0f:
fb:47:63:69:b7:df:69:48:f5:7a:22:56:e5:70:b0:fd:b1:1e:
ad:4f:12:40:53:95:14:42:de:ec:f1:23:9f:28:29:d9:a2:5f:
91:8a:6f:d9:04:2e:b6:be:1f:9d:8f:15:56:20:87:f0:b3:cb:
77:00:26:64:e1:e3:d6:fa:82:b0:80:45:1d:e5:7e:6f:9f:7a:
ff:1f:5e:c5:67:31:3e:b6:9a:4d:be:a0:66:38:0f:1f:2e:6c:
f5:ca:54:cc:c3:67:55:37:2c:1d:b3:be:30:ce:b9:95:74:19:
0e:57:4c:df:b8:25:02:8f:b7:2c:c8:cd:ce:32:89:0f:f3:fc:
49:27:45:3a:2f:f5:8d:e5:d1:b7:76:05:de:7f:97:92:c1:bd:
ae:45:e8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:26 2026 by rpki-client