
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa
File: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier: N+OTkKCrsA8j5gwyH0Mpha31q8YHuNMGpdCuA0VgWcY=
Subject key identifier: 53:36:CA:72:6D:09:48:96:B6:47:31:0E:1C:23:80:AD:2A:CC:98:70
Certificate issuer: /CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105
Certificate serial: 08DF18C8DC5D4AAF003635CD3060971DC2362D4B
Authority key identifier: D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa
Signing time: Sun 03 May 2026 03:18:54 +0000
ROA not before: Sun 03 May 2026 03:13:54 +0000
ROA not after: Sun 02 May 2027 03:18:54 +0000
asID: 140443
IP address blocks: 103.79.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl
rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:df:18:c8:dc:5d:4a:af:00:36:35:cd:30:60:97:1d:c2:36:2d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105
Validity
Not Before: May 3 03:13:54 2026 GMT
Not After : May 2 03:18:54 2027 GMT
Subject: CN=5336CA726D094896B647310E1C2380AD2ACC9870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:bb:9a:a6:7e:31:77:07:62:71:93:43:ad:
d3:7c:f7:90:0c:26:17:84:c0:fe:c8:76:ac:a7:a2:
d3:6a:99:b7:e6:8a:0a:02:e4:e5:44:d6:ce:7b:77:
7f:2b:3b:13:5f:7c:53:eb:31:bc:84:23:73:15:57:
c8:dc:52:97:a1:f6:28:81:e4:27:63:e7:8f:95:cd:
9c:58:9c:f9:67:ed:33:d2:3b:d9:74:21:ab:ec:52:
a5:12:4f:15:ed:0c:ab:9b:8d:27:c7:59:a6:5d:0a:
2d:72:25:a9:97:79:67:9e:27:7d:ec:99:8a:5f:83:
fc:81:18:4a:bc:c0:d5:b1:5a:5d:3d:d3:e6:4c:b3:
22:30:22:15:e5:1c:ab:0a:26:de:eb:1f:e9:ca:0c:
65:9c:95:79:43:d7:0f:8f:ed:9e:ad:fc:01:88:47:
83:dc:29:0e:1d:f7:0c:0d:26:58:09:e5:0f:ed:6c:
0d:61:c2:54:9e:bf:2f:bc:e1:35:cd:92:f8:14:86:
fd:c1:8c:b5:de:1c:26:44:59:5c:85:bb:8e:81:4f:
83:2a:8f:89:9e:08:51:80:3e:87:b7:02:33:ef:7a:
55:a1:26:74:1a:3a:9c:29:4f:bc:c4:e7:c6:82:58:
8c:fe:3d:d9:f8:c9:a5:34:ac:b8:d7:26:79:8c:2a:
f7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:CA:72:6D:09:48:96:B6:47:31:0E:1C:23:80:AD:2A:CC:98:70
X509v3 Authority Key Identifier:
keyid:D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.131.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:87:ba:4d:c5:4b:e5:bb:d1:53:34:9f:6d:e1:f4:f4:bc:1a:
c6:0c:c2:08:54:3c:ba:63:18:2f:e7:72:35:88:0e:fc:27:ad:
72:cf:e9:2b:ac:18:79:00:a7:0e:3b:79:c5:0b:db:4f:d3:ae:
8e:91:6d:eb:d9:1e:75:56:11:2a:29:af:04:80:f1:ca:da:06:
ee:c5:05:92:d1:71:7b:a4:7a:6c:2e:c3:84:86:e9:e3:82:63:
3c:f1:ef:f1:bd:ab:d9:bd:d0:51:b4:07:1a:7f:78:da:fb:6b:
cf:25:0d:75:f1:17:b7:9a:06:3a:a7:35:73:01:aa:a0:1e:6d:
6d:2a:b9:f1:18:21:d7:46:ab:19:eb:e8:ac:c8:21:15:5d:78:
e4:17:d3:8c:b3:01:7d:f3:ea:36:ca:85:de:c5:0d:9d:91:e8:
99:d9:7e:b8:b0:e4:fb:2e:67:94:68:45:17:ee:3d:c5:18:4e:
10:57:83:37:9d:8b:11:21:f4:7f:90:f0:95:fe:97:72:d5:8f:
52:51:f6:af:83:84:22:b5:9c:1e:18:0d:28:85:ba:24:a2:07:
5c:15:3b:63:79:11:6f:79:41:0c:af:c6:bf:78:70:65:97:05:
96:7c:9e:d3:f1:dc:62:bd:6d:e6:09:77:31:33:79:14:f4:e7:
e0:b9:d0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:05 2026 by rpki-client