
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/3130332e32382e3130362e302f32342d3234203d3e203538343736.roa
File: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (raw, json)
Hash identifier: 0HclTm8jPdJ9pdLkBcx2iHTadXENhk0okUOb438P1GQ=
Subject key identifier: DF:A7:E2:F4:28:FF:99:D9:6A:2D:65:DF:8D:04:5D:DE:4C:7B:89:25
Certificate issuer: /CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1
Certificate serial: 1FBEA955F7BF753963C05839827E11B1532E9602
Authority key identifier: B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/3130332e32382e3130362e302f32342d3234203d3e203538343736.roa
Signing time: Sun 03 May 2026 03:18:23 +0000
ROA not before: Sun 03 May 2026 03:13:23 +0000
ROA not after: Sun 02 May 2027 03:18:23 +0000
asID: 58476
IP address blocks: 103.28.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl
rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:be:a9:55:f7:bf:75:39:63:c0:58:39:82:7e:11:b1:53:2e:96:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1
Validity
Not Before: May 3 03:13:23 2026 GMT
Not After : May 2 03:18:23 2027 GMT
Subject: CN=DFA7E2F428FF99D96A2D65DF8D045DDE4C7B8925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:0e:d1:82:6b:3b:5b:a4:44:ff:50:20:86:
e3:54:e4:9b:08:20:70:cb:30:59:ac:a2:3a:39:8d:
d2:a0:59:35:97:d7:03:47:36:dd:29:d2:e5:66:d8:
38:b3:34:3b:b2:2c:88:13:10:41:f5:3d:99:31:92:
bf:9f:2e:c3:9f:6d:0a:09:1a:93:dc:00:54:13:12:
94:f5:f5:02:4a:76:3b:0b:4c:ee:66:28:25:de:b3:
21:37:9b:8a:65:1f:b1:ba:5d:18:c0:62:f9:61:a8:
e3:fc:f1:86:46:ce:07:28:43:bb:30:b5:47:7a:ef:
8e:b2:ed:3a:68:f7:3a:8f:4d:f5:9d:d2:53:f0:f4:
1f:6e:30:60:a7:4e:1e:52:87:1d:01:ed:20:1e:bb:
a1:71:c5:7b:ae:d1:4e:d4:d0:4e:04:7a:cf:96:90:
b4:2c:80:8f:2b:2d:16:32:bb:b6:44:60:33:2a:49:
9c:ef:9b:fd:f4:41:4a:d9:c5:c0:50:0e:16:30:99:
82:41:72:dd:64:35:96:42:d2:00:08:e5:af:b3:35:
dc:27:2d:40:09:aa:47:b9:31:b0:b8:b9:48:89:d3:
97:db:4b:b1:30:95:6a:58:03:e6:16:99:38:cb:be:
ed:30:2f:a0:d5:6c:f7:7b:c2:db:58:17:57:8c:94:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:E2:F4:28:FF:99:D9:6A:2D:65:DF:8D:04:5D:DE:4C:7B:89:25
X509v3 Authority Key Identifier:
keyid:B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/3130332e32382e3130362e302f32342d3234203d3e203538343736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.106.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ec:a3:78:8f:ba:af:4f:69:b0:5d:94:db:80:cf:20:e9:82:
dd:5e:6a:cb:40:04:a7:b8:bc:09:be:32:37:64:a5:30:13:43:
5d:f9:c6:c0:d0:6b:29:b5:5a:e6:7f:fe:7d:ce:1f:34:57:e2:
22:e1:69:d6:17:db:79:7f:a3:92:42:ab:00:ac:f0:6d:ff:6e:
e7:09:af:d5:d9:68:0b:d2:ee:e8:00:ee:66:68:e5:eb:88:81:
45:ed:62:96:2b:f3:62:23:e7:e7:c0:b9:a7:0b:bc:a8:6e:17:
b6:0f:3a:72:9a:39:a4:9c:b9:23:2c:22:88:0f:40:4c:4f:5e:
2a:b9:2e:87:57:e3:3c:ac:34:0c:43:cd:62:a3:48:c5:ed:ff:
1c:b3:d2:30:41:4d:fa:90:36:5e:67:03:df:2a:95:ab:9f:ab:
c1:69:af:90:76:1d:a9:5a:e4:4b:56:35:10:6f:b6:f8:2b:d0:
ec:83:90:65:cc:9d:32:cb:8f:0a:94:bf:2c:a8:91:61:66:a8:
c5:0a:48:a9:d3:65:8f:2e:98:b8:0f:35:ae:ec:07:1b:6d:65:
ae:d0:bc:a1:53:6f:3e:5f:8d:3a:71:ce:d0:c9:5b:89:48:32:
7c:f8:0f:e2:79:cb:af:8e:f4:0b:2d:07:41:59:62:d7:56:27:
79:e8:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:08 2026 by rpki-client