
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa
File: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (raw, json)
Hash identifier: 0qq48OCHi8iCltrRIsd13nb6wvElWiiJ+LXwYMuIHYw=
Subject key identifier: 5B:3A:A5:8A:66:BD:76:DC:AC:C1:00:BB:B0:14:76:FF:F4:75:17:65
Certificate issuer: /CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Certificate serial: 71AE09F7F8EDDF8C1C8A59DCCC82BC4C02F21415
Authority key identifier: 66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa
Signing time: Sun 03 May 2026 03:16:57 +0000
ROA not before: Sun 03 May 2026 03:11:57 +0000
ROA not after: Sun 02 May 2027 03:16:57 +0000
asID: 137371
IP address blocks: 103.116.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ae:09:f7:f8:ed:df:8c:1c:8a:59:dc:cc:82:bc:4c:02:f2:14:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Validity
Not Before: May 3 03:11:57 2026 GMT
Not After : May 2 03:16:57 2027 GMT
Subject: CN=5B3AA58A66BD76DCACC100BBB01476FFF4751765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:67:fa:ca:43:ce:52:2c:b1:cc:40:49:02:
ee:07:70:8c:74:02:91:b2:e2:c1:af:ef:fe:cf:1b:
28:23:97:49:65:d4:07:7d:d9:c2:8e:4d:ab:a8:91:
29:1f:48:5d:0a:65:98:e5:1f:34:f5:11:7f:7e:c8:
50:c4:a2:8b:36:c1:93:8b:df:71:ed:57:42:cd:46:
88:c4:40:9c:30:1b:f1:39:ab:75:ec:21:b0:98:fa:
08:55:bd:c9:ff:ea:c7:1c:03:29:7b:b8:ab:29:aa:
68:a7:ca:de:a4:b2:ff:9c:64:0d:7b:1f:46:d6:34:
4f:da:50:d4:56:82:00:e0:3b:8b:fa:31:17:81:aa:
b4:62:62:5f:81:0f:cb:00:d5:f8:6d:76:a0:2b:57:
4c:70:ba:3b:84:84:2c:a2:60:75:0b:13:7f:e0:8f:
f7:15:78:55:c3:c6:45:e6:27:1a:2a:96:e5:9e:5e:
07:86:57:6e:00:52:32:16:80:4f:a4:a1:c5:4d:66:
b0:94:a4:e0:cc:fb:d4:f2:00:0a:3e:8a:07:3f:34:
a0:3d:da:63:72:d2:f3:ca:b5:2d:ef:8e:55:cd:22:
dc:b8:a8:84:d9:da:8d:7d:5d:0e:0e:8f:e7:75:ef:
61:8d:11:a0:29:5e:ae:32:ed:12:75:2c:1f:a8:9f:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:A5:8A:66:BD:76:DC:AC:C1:00:BB:B0:14:76:FF:F4:75:17:65
X509v3 Authority Key Identifier:
keyid:66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f9:5c:a1:a5:3f:5e:cc:94:9b:f4:76:fb:60:a3:bf:f5:f9:
94:8b:bf:5a:28:d0:ca:dc:ec:2d:9d:6d:b0:f2:49:fc:b5:d6:
1f:9f:33:e1:fa:aa:71:80:17:c7:36:b4:3a:a4:ed:04:db:61:
ef:45:27:61:f6:a3:93:6e:97:0f:f3:2f:9f:cc:69:e6:9c:1e:
86:6e:01:52:05:72:51:c0:23:38:06:06:68:3d:7a:85:e6:11:
43:77:d6:2e:d7:4f:3d:55:e7:06:bb:a7:f4:04:ac:a4:9b:3a:
cd:30:5c:47:a7:7d:84:ad:7b:58:92:3d:34:3f:82:d6:c5:76:
6a:bb:42:42:53:3f:a7:fd:f0:bd:b5:b4:a9:da:b7:2d:76:7f:
44:05:55:89:b0:62:61:7a:3d:ff:e5:a0:d4:e1:79:77:7f:f8:
ae:f0:14:4c:e6:a4:e9:30:7e:ea:5f:b1:a5:23:4b:6c:a1:29:
c5:6f:a2:f1:da:67:90:11:8d:f1:af:a5:55:38:48:60:e9:4c:
0e:7e:af:47:0d:30:dc:56:76:2a:39:62:3b:f7:9c:91:97:dc:
f8:e3:39:ac:0d:86:66:36:39:c8:21:76:e1:a8:0c:11:22:c8:
e8:ea:71:bf:44:14:ba:c2:3a:9b:35:f1:93:eb:6a:85:2a:56:
9b:49:03:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:14 2026 by rpki-client