
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/3130332e3135362e37302e302f32332d3234203d3e20313431303831.roa
File: 3130332e3135362e37302e302f32332d3234203d3e20313431303831.roa (raw, json)
Hash identifier: ogFXEVAytgNk6SWtWC/grPALKoCzJ8xJnVE6iKhIzy8=
Subject key identifier: 97:60:54:B4:BE:39:97:01:CC:D6:9E:BA:40:10:5D:3E:B5:2C:28:CA
Certificate issuer: /CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E
Certificate serial: 373B7B06144706DA02CF343F471DDC98CB1AA02A
Authority key identifier: 6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/3130332e3135362e37302e302f32332d3234203d3e20313431303831.roa
Signing time: Sun 03 May 2026 03:17:32 +0000
ROA not before: Sun 03 May 2026 03:12:32 +0000
ROA not after: Sun 02 May 2027 03:17:32 +0000
asID: 141081
IP address blocks: 103.156.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl
rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3b:7b:06:14:47:06:da:02:cf:34:3f:47:1d:dc:98:cb:1a:a0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E
Validity
Not Before: May 3 03:12:32 2026 GMT
Not After : May 2 03:17:32 2027 GMT
Subject: CN=976054B4BE399701CCD69EBA40105D3EB52C28CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:01:fe:03:3b:06:c0:ab:db:7b:de:70:77:
86:62:25:be:0d:ed:e1:4b:c8:a0:a0:97:3c:c9:e4:
e7:ae:46:92:1c:38:2a:b4:f7:8e:ee:41:c3:4a:b7:
98:ba:e8:e1:5c:78:8d:61:f4:cd:e9:bc:5a:8f:99:
d3:8e:ce:ec:81:3d:28:91:73:bb:d2:80:37:b3:86:
a0:bc:ee:8a:8a:6b:bc:43:30:d5:3d:80:70:32:c3:
87:da:c1:fe:49:b2:71:cd:3d:8d:ef:ac:bf:dd:0d:
6d:c3:3a:f1:e0:04:52:e5:fb:20:ec:80:fe:bd:ce:
be:1c:98:36:e3:50:f6:de:59:71:44:21:05:f3:7f:
18:f7:61:e4:3b:62:b5:25:7e:39:7b:57:d8:2f:dc:
7a:6a:82:cd:9a:19:fa:72:2c:8b:ba:a0:d2:76:f8:
29:02:d4:67:bb:29:cb:7b:6f:4e:b2:10:91:42:06:
12:cf:50:80:16:4b:82:86:24:aa:19:7d:ef:c5:93:
4b:40:60:a5:77:01:2d:77:d7:03:31:13:f6:fa:19:
22:16:2b:ba:a6:ef:58:ba:57:1a:a3:32:c0:f6:3e:
61:e8:82:1f:5e:5e:b7:07:1d:04:44:57:7a:24:fe:
1b:10:d3:34:78:fd:12:02:cd:df:28:af:6e:32:02:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:60:54:B4:BE:39:97:01:CC:D6:9E:BA:40:10:5D:3E:B5:2C:28:CA
X509v3 Authority Key Identifier:
keyid:6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/3130332e3135362e37302e302f32332d3234203d3e20313431303831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.70.0/23
Signature Algorithm: sha256WithRSAEncryption
15:3d:34:83:54:a4:71:71:47:59:94:cc:34:41:28:b2:59:e9:
ca:d4:68:45:c5:05:1d:6d:8e:a3:49:41:06:cd:91:e6:2c:1f:
f1:23:5d:49:95:c8:6e:b9:28:76:b6:ef:b9:a8:8f:fb:b0:ff:
78:7b:ff:85:61:b0:86:53:d0:1f:23:a4:c6:36:4e:f4:05:e3:
9a:45:50:fb:6a:5e:64:66:35:a6:7e:9e:5e:c9:23:6d:81:d3:
09:9f:ad:1b:29:c6:92:4d:18:8f:4c:9e:48:4e:df:62:75:7e:
cb:57:77:78:e5:e0:d8:c1:da:40:c6:d5:c9:7e:9f:90:01:fe:
fb:05:7c:ab:63:5f:03:e5:3c:13:84:5f:f2:84:f8:a4:8b:17:
69:f6:8c:87:09:92:c4:a2:0c:52:e1:e8:1c:58:90:5c:f0:c8:
3c:19:0a:8f:0e:86:6e:d4:53:8f:9c:c8:f6:e4:9b:d1:e7:8c:
ae:07:a7:4b:dc:7c:99:9b:cb:77:20:d1:01:23:45:3c:01:d5:
d6:8b:05:91:bf:5b:95:23:4b:e3:9c:73:90:c7:68:74:69:c7:
e4:ad:08:84:24:ad:2e:8e:8d:5b:58:74:a0:c7:88:36:19:88:
ff:6f:0a:2b:0a:63:00:27:dd:ad:ee:dc:c1:dd:f5:43:90:a6:
89:6b:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:35 2026 by rpki-client