
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131332e302f32342d3234203d3e20313335363130.roa
File: 3130332e3130322e3131332e302f32342d3234203d3e20313335363130.roa (raw, json)
Hash identifier: fo5FFrU+VdKyHpOjL7ovILvjH4uYFxR7MNCdZIOuxYA=
Subject key identifier: 12:C5:71:4C:5F:AF:D3:6E:DB:3A:7C:08:0B:7C:B3:FF:9E:98:7D:F8
Certificate issuer: /CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC
Certificate serial: 43AB269D4373AB3A8CEE602F251A1B667C1C9337
Authority key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131332e302f32342d3234203d3e20313335363130.roa
Signing time: Fri 23 Oct 2026 08:03:07 +0000
ROA not before: Fri 23 Oct 2026 07:58:07 +0000
ROA not after: Fri 22 Oct 2027 08:03:07 +0000
asID: 135610
IP address blocks: 103.102.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl
rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 11:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ab:26:9d:43:73:ab:3a:8c:ee:60:2f:25:1a:1b:66:7c:1c:93:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC
Validity
Not Before: Oct 23 07:58:07 2026 GMT
Not After : Oct 22 08:03:07 2027 GMT
Subject: CN=12C5714C5FAFD36EDB3A7C080B7CB3FF9E987DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:a9:31:d9:04:db:c9:57:2e:ec:e9:28:c8:
40:a1:7d:52:5f:bd:d1:b2:2b:96:10:57:58:0e:dd:
83:da:b4:04:35:72:71:12:6b:14:33:ce:0b:e5:70:
3e:2a:2b:c8:cb:97:40:a8:af:7a:2b:e9:c5:5d:da:
99:ab:db:00:0d:1e:19:29:33:38:b3:06:4e:b0:99:
e5:15:e5:b2:93:d0:ac:23:73:8b:88:6e:62:ab:98:
75:d1:05:bb:d2:8b:76:2e:e3:01:70:56:5f:3d:37:
8c:ab:42:59:d2:fe:51:03:3a:15:86:be:4f:50:c3:
4f:12:4a:10:18:6b:dc:c6:9a:af:2d:63:cb:98:93:
f1:e1:0a:51:0a:d7:9e:09:b9:74:1f:61:04:41:cf:
64:0f:5a:b4:c5:02:cc:ce:dc:f2:74:eb:ad:96:7c:
99:10:7c:c3:b8:89:5c:1d:cf:b4:d9:7f:27:91:2e:
9e:ff:cf:23:14:1c:40:9c:97:89:fa:e6:50:1c:91:
b4:fc:f4:87:61:fe:f4:c6:19:93:15:2c:1e:4f:e2:
d5:48:96:14:36:d5:09:60:30:53:74:4f:6a:16:37:
02:14:e3:3b:36:a7:6a:f1:c7:db:41:0f:de:a0:65:
24:47:39:c6:0c:3e:17:cb:a5:0a:53:9b:1f:2c:34:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:71:4C:5F:AF:D3:6E:DB:3A:7C:08:0B:7C:B3:FF:9E:98:7D:F8
X509v3 Authority Key Identifier:
keyid:8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131332e302f32342d3234203d3e20313335363130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:13:70:6d:6b:c1:3f:04:c1:ac:20:52:a6:17:52:a5:fd:ed:
dc:9e:ec:39:f6:91:73:65:67:51:2a:f1:1b:02:f9:8d:bb:44:
f3:c7:48:e3:9a:59:86:92:08:d7:df:c2:80:18:78:04:d6:5b:
7c:bf:4e:e8:7c:3a:9b:22:a9:2d:f5:55:9f:2a:e5:42:18:2f:
6f:6d:fd:0c:e0:d9:4d:8c:89:58:78:61:80:a1:a7:de:d3:67:
f6:d7:57:86:d4:60:4d:9a:df:65:ae:fb:59:13:8c:d6:0f:6b:
67:be:3f:ca:0a:47:35:5f:46:d2:14:ab:5b:f4:0b:df:a2:63:
b9:a7:66:c4:a0:17:69:4c:cc:65:2d:95:45:7c:97:b3:83:07:
78:77:f5:b6:47:90:18:3b:b0:a2:3b:d1:ec:33:6b:4c:e0:b4:
3e:55:dd:1e:1b:08:ce:12:ab:48:58:f6:e2:10:f3:43:8d:40:
b4:2a:c7:c4:8c:86:36:28:62:09:3f:96:7b:89:b9:6f:0a:78:
55:a6:b9:aa:be:ed:68:f6:08:5a:fc:ea:2d:42:54:d5:b7:21:
d7:fc:02:94:73:09:58:9d:d6:77:be:aa:de:75:2b:3f:01:3d:
d0:0d:f9:dc:22:b4:c3:a1:f0:63:89:9d:b4:46:9a:24:69:15:
2f:c0:68:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:39:48 2026 by rpki-client