
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa
File: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (raw, json)
Hash identifier: YzbPSpHu4Y/3sNkzMjgGkQaP8RKL2rlB1MRk9WcO/JU=
Subject key identifier: D7:E7:75:34:2D:10:DB:EF:6C:E2:33:CE:90:3E:96:0C:AF:B6:FC:61
Certificate issuer: /CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4
Certificate serial: 1820FB0E93C45327E9F2503FA92369BFF90DF125
Authority key identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa
Signing time: Sun 03 May 2026 03:18:57 +0000
ROA not before: Sun 03 May 2026 03:13:57 +0000
ROA not after: Sun 02 May 2027 03:18:57 +0000
asID: 55688
IP address blocks: 103.16.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl
rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:20:fb:0e:93:c4:53:27:e9:f2:50:3f:a9:23:69:bf:f9:0d:f1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4
Validity
Not Before: May 3 03:13:57 2026 GMT
Not After : May 2 03:18:57 2027 GMT
Subject: CN=D7E775342D10DBEF6CE233CE903E960CAFB6FC61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:44:a1:4e:3d:db:4f:64:60:00:1c:6b:43:
fa:c6:d3:61:5d:b6:87:32:33:c9:20:c2:fa:40:36:
98:70:07:d7:57:b1:61:18:fc:35:66:4e:db:ba:66:
f0:fa:ee:a5:db:03:82:c6:5d:67:ec:8c:4a:8f:1e:
4d:89:8b:df:37:b5:bd:da:c6:24:e7:80:c8:0f:6d:
cc:16:39:be:87:ff:59:f0:f1:4b:ab:26:9e:64:39:
0e:40:69:56:72:a9:a1:03:79:74:76:a8:0b:29:83:
82:d0:f1:5a:7b:a4:3e:de:73:23:83:2a:11:bf:1a:
75:12:3e:d0:b1:7f:18:c3:ad:63:52:00:6c:85:79:
63:53:df:ac:c1:6d:4e:19:be:39:57:ce:12:b1:40:
bc:47:1e:8e:8a:bf:7a:c8:18:21:3a:06:8f:f4:ff:
4f:6e:da:9e:5d:95:d3:3a:e6:5e:4f:a3:05:53:80:
ad:a5:db:c3:88:96:16:a1:10:1a:ec:c4:48:bf:35:
eb:5c:6b:4e:51:1e:89:f1:14:08:9a:b9:1e:84:be:
04:51:93:87:92:4a:44:d9:41:77:50:af:0b:b0:35:
65:45:0c:d3:30:ed:20:d9:f6:98:32:40:2c:d2:f8:
03:a7:6a:63:24:5b:2b:50:39:aa:60:14:5f:6c:c0:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E7:75:34:2D:10:DB:EF:6C:E2:33:CE:90:3E:96:0C:AF:B6:FC:61
X509v3 Authority Key Identifier:
keyid:5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.16.116.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:42:ab:d4:3b:80:b7:b7:cc:aa:36:e5:3a:4a:32:20:ca:3c:
e0:c8:b3:13:18:16:ec:aa:4f:ee:0c:f0:c3:48:4b:d4:55:91:
c6:2b:b8:60:b7:90:bb:45:40:3d:6f:64:53:a8:c9:91:e1:10:
81:1c:ec:87:01:8c:5d:2f:7a:5a:96:8d:35:6b:b4:90:47:be:
0b:cb:29:bf:e3:19:2b:3d:fb:50:75:8c:f1:c2:88:93:84:2c:
9b:77:2e:e8:0d:8e:3a:35:71:2f:f0:aa:76:ae:c2:94:22:e5:
bd:b2:b7:d9:48:1e:aa:c7:4a:53:b7:72:20:29:5f:1a:99:19:
a1:85:5b:03:44:42:9f:86:4f:23:2e:ca:f3:2c:d5:97:7d:76:
29:ba:85:a5:33:4b:d9:49:ad:7e:39:5f:ae:29:1e:ff:3b:c9:
ab:f5:67:d9:fe:77:79:42:89:fb:ae:19:c2:74:c1:de:fa:af:
b9:b4:47:3c:bb:46:2b:51:00:b1:e3:5f:fd:c5:c7:37:1b:4c:
d4:a7:df:cc:e8:51:84:98:e3:d5:5e:fe:9d:3c:6c:67:8c:36:
fa:3e:4d:d8:e5:e5:09:1b:5e:30:75:3e:5f:52:a9:bb:df:3c:
8a:46:8b:22:a2:1e:ab:cb:0d:3b:58:0b:41:41:8b:22:03:d2:
fa:b7:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:54 2026 by rpki-client