
$ rpki-client -vvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa
File: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (raw, json)
Hash identifier: c4wYihjNVRnxptUGtDAxVDHluIjX7/1xYD6gvJUxJM8=
Subject key identifier: E5:02:94:8F:D9:6D:DD:B1:A0:93:49:D4:39:12:FB:45:44:46:63:D4
Certificate issuer: /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877
Certificate serial: 0958F0D9AF69DFF498333ABEEF4E9953151C3B3A
Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa
Signing time: Sun 03 May 2026 02:14:39 +0000
ROA not before: Sun 03 May 2026 02:09:39 +0000
ROA not after: Sun 02 May 2027 02:14:39 +0000
asID: 63930
IP address blocks: 103.120.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl
rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 21:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:58:f0:d9:af:69:df:f4:98:33:3a:be:ef:4e:99:53:15:1c:3b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877
Validity
Not Before: May 3 02:09:39 2026 GMT
Not After : May 2 02:14:39 2027 GMT
Subject: CN=E502948FD96DDDB1A09349D43912FB45444663D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:c5:b2:48:2f:bf:a0:f7:7e:86:7c:3b:14:
a4:af:8b:2a:13:34:31:e7:02:bf:03:a2:ed:ea:ae:
2c:7c:1d:64:3c:72:af:62:c5:c4:51:10:7e:e7:14:
99:5e:df:83:5e:22:83:7f:5d:01:e6:8f:3e:88:a6:
7b:58:45:98:ac:13:a2:5d:bd:e4:bf:2b:78:40:53:
16:b6:97:8d:78:5d:47:ee:ff:57:cf:55:1c:07:97:
f8:b4:3c:bf:47:b1:4a:f1:00:7f:1e:a8:94:44:3b:
2b:e5:84:d9:63:34:8c:b6:12:41:e8:14:87:c1:bf:
23:e9:b7:87:83:77:fb:1d:55:64:41:e2:45:89:83:
33:57:fa:ad:06:5c:28:8b:25:f0:a9:d7:1d:63:24:
b3:18:c7:b6:33:6c:a2:48:78:f1:8a:d0:f3:6f:72:
16:ef:a8:95:6a:15:a9:26:0f:16:37:d6:ef:84:ce:
cd:63:51:84:2b:6b:ac:b1:9f:d6:4a:05:06:92:39:
0c:4a:b8:7d:17:1d:2a:d5:15:eb:6d:4f:17:e6:11:
95:e0:df:df:c8:16:4a:40:e7:41:ef:c4:27:95:fe:
e5:1f:08:c6:75:9c:f8:de:83:90:36:86:fc:8b:83:
3e:ea:1e:3b:22:89:1a:04:b5:d2:29:34:7a:d7:fd:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:02:94:8F:D9:6D:DD:B1:A0:93:49:D4:39:12:FB:45:44:46:63:D4
X509v3 Authority Key Identifier:
keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.120.206.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2a:82:b6:ee:a7:79:c1:ca:99:21:51:e5:90:8b:c0:9f:f5:
dc:b0:6e:fd:2f:c7:6f:17:60:38:2d:83:a8:23:41:51:d5:c7:
07:8e:cf:17:eb:62:4c:6d:6c:f4:7d:00:99:07:9a:ed:74:40:
8c:5c:ec:af:f6:4a:ad:e9:de:3a:9e:68:76:bc:b2:13:ef:60:
09:e7:70:e2:bd:27:e4:b9:2f:dd:96:62:41:44:86:05:08:6a:
a6:a5:96:35:87:72:ba:25:1a:7b:5e:f0:de:20:14:20:1e:56:
4d:83:98:6a:15:b9:e4:43:f1:d1:81:9c:eb:18:e9:34:e8:65:
68:36:4d:91:40:78:b9:7c:d6:d0:8c:c6:d7:85:e8:3a:9d:e2:
eb:c9:12:d6:d5:a6:f4:c6:62:0b:60:29:04:22:44:2a:bf:2e:
15:77:7a:bf:3e:e1:5b:f3:95:22:54:43:90:e4:fe:8a:06:21:
81:40:72:43:10:d8:43:49:6f:a2:3a:f7:bb:03:e0:d4:6b:12:
1c:9c:5f:fc:b0:d5:4b:16:1a:b9:0c:33:37:d6:47:3f:19:ce:
ab:7d:2a:1a:a2:86:bc:87:75:2d:55:bf:d9:fe:5a:2a:74:ec:
96:e7:04:c6:13:91:f9:6d:df:e8:7f:be:dd:a1:ee:c3:11:d6:
46:eb:11:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:06 2026 by rpki-client