
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/3130332e3136362e362e302f32332d3234203d3e203137393935.roa
File: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier: BwjnFjz5sFQQdxCMf3i5N8Aax7h3Sveq3upFP+p+HDs=
Subject key identifier: 06:AD:05:55:45:3E:DA:59:2E:D6:C8:8B:B5:1E:3B:C7:D9:08:D1:DB
Certificate issuer: /CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88
Certificate serial: 6C5722497D503D65DCBF4AEB42EEC9292C13F9DC
Authority key identifier: 2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/3130332e3136362e362e302f32332d3234203d3e203137393935.roa
Signing time: Sun 03 May 2026 03:11:36 +0000
ROA not before: Sun 03 May 2026 03:06:36 +0000
ROA not after: Sun 02 May 2027 03:11:36 +0000
asID: 17995
IP address blocks: 103.166.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl
rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 21:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:57:22:49:7d:50:3d:65:dc:bf:4a:eb:42:ee:c9:29:2c:13:f9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88
Validity
Not Before: May 3 03:06:36 2026 GMT
Not After : May 2 03:11:36 2027 GMT
Subject: CN=06AD0555453EDA592ED6C88BB51E3BC7D908D1DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:48:5f:27:be:99:e4:9e:7a:7f:7d:ab:d1:
c5:83:27:5e:c1:3e:93:99:46:38:13:33:63:ff:6d:
fa:b4:a3:a3:6a:10:c5:09:75:27:82:db:6d:aa:b1:
5e:a3:fa:7b:fd:fd:a6:25:d6:a4:6a:ee:2d:ed:9b:
88:80:72:36:36:85:dd:df:95:35:48:a6:cf:22:96:
b5:68:3a:48:76:58:66:83:36:46:dd:52:75:f6:77:
01:22:84:8d:05:ab:6e:ff:cc:30:5a:1f:81:34:be:
e0:2c:fc:29:fb:62:54:4a:75:1f:79:39:2d:97:2b:
b6:71:39:d9:2c:fb:98:90:fe:dd:14:7b:b8:bd:27:
9e:70:07:68:b7:36:15:a3:58:23:0c:ee:ea:16:59:
b2:fe:36:e3:06:7f:94:7b:dc:9b:7f:2a:1b:14:be:
15:12:f4:e3:9c:4a:6b:c3:61:5c:74:c6:1c:e6:83:
68:d9:d3:39:23:7f:90:61:b0:3c:20:5e:a6:ee:49:
5d:a7:31:d4:b6:3d:cf:ca:a5:91:31:e7:bb:66:6f:
34:0f:20:a1:8b:5c:af:8d:e9:7b:ab:73:ae:d7:94:
bd:24:43:5c:ea:b5:bf:3f:0e:39:9f:58:38:1b:ca:
d6:96:b0:08:58:5f:f3:a9:a7:b2:42:ef:7c:1f:97:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AD:05:55:45:3E:DA:59:2E:D6:C8:8B:B5:1E:3B:C7:D9:08:D1:DB
X509v3 Authority Key Identifier:
keyid:2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/3130332e3136362e362e302f32332d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.6.0/23
Signature Algorithm: sha256WithRSAEncryption
41:d4:c3:24:af:58:ab:50:73:cc:67:f9:f1:32:38:8c:22:f7:
5d:88:1c:ea:37:f0:80:7e:2d:b3:7c:97:dc:e4:a7:f3:10:9a:
e8:6b:e9:04:1e:ee:94:11:ab:9d:d5:08:e0:76:ba:05:aa:b2:
5d:a6:66:8d:90:46:ee:6b:5e:d6:db:dc:91:b1:8d:e7:c0:a4:
02:82:1e:8e:0c:21:4f:99:40:50:a3:d9:da:a2:bf:8b:c5:01:
ce:02:61:bb:e1:79:f0:37:51:11:54:5b:92:67:e9:40:2e:1b:
d5:8a:ed:5c:42:9f:3c:57:0c:97:dc:24:71:04:10:ff:e3:5d:
d1:78:90:63:a5:fe:48:2e:01:ac:22:1f:b9:20:7e:f1:c1:cf:
dd:cf:e6:ea:85:10:0f:58:5c:04:a7:76:0a:0a:07:7d:ae:17:
7d:3f:71:f6:8b:6d:2c:7e:02:3e:0e:d1:c1:aa:bb:8c:3d:f7:
09:a8:81:f1:aa:11:08:04:d5:a7:82:a9:13:b9:59:66:04:b4:
6d:cc:b8:a6:14:7c:61:f1:95:6d:16:ad:41:95:20:d1:fc:f3:
03:c8:a9:e1:d4:2b:d5:3d:55:f3:b6:a2:43:23:2d:c7:3b:80:
cc:87:ad:9d:50:0b:a1:01:9d:dd:f5:32:b1:2a:66:f8:96:9d:
9a:24:40:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:35:16 2026 by rpki-client