
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32322d3233203d3e203538343034.roa
File: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (raw, json)
Hash identifier: B7lLwYyGx/CkKBE8Qhv5JNipvmsoWuu5k92uqzr9wrU=
Subject key identifier: BB:99:B0:E0:82:1D:85:D8:24:CE:D9:76:5B:CA:14:00:37:55:61:2A
Certificate issuer: /CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
Certificate serial: 5B8EE926872A2EDA72EDC3D6D2B394CEC38AF061
Authority key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32322d3233203d3e203538343034.roa
Signing time: Sun 03 May 2026 02:41:36 +0000
ROA not before: Sun 03 May 2026 02:36:36 +0000
ROA not after: Sun 02 May 2027 02:41:36 +0000
asID: 58404
IP address blocks: 103.28.12.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl
rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:8e:e9:26:87:2a:2e:da:72:ed:c3:d6:d2:b3:94:ce:c3:8a:f0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
Validity
Not Before: May 3 02:36:36 2026 GMT
Not After : May 2 02:41:36 2027 GMT
Subject: CN=BB99B0E0821D85D824CED9765BCA14003755612A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:e9:43:30:8f:5a:8d:35:4f:6f:22:79:58:
57:65:15:b0:db:f2:02:92:fa:40:c3:4c:ef:a1:95:
52:a8:71:88:17:10:6c:54:02:4b:43:ca:ef:ad:9b:
49:a2:fd:21:cc:42:18:2d:10:40:78:cf:1c:b1:54:
8a:67:4d:28:ac:da:95:c5:61:6a:97:1d:bb:5a:20:
0e:48:fc:7b:00:49:97:83:30:3a:78:c1:ad:e8:18:
97:18:47:8c:c0:9f:f4:fe:21:65:9f:28:7b:c4:41:
26:a6:37:b8:27:fa:e5:72:50:d2:cf:03:2a:94:81:
af:ea:ac:ce:46:23:ed:7c:97:7e:70:60:6d:fe:c2:
0f:fa:05:44:c9:8f:57:9d:9a:ae:45:98:01:cd:ec:
2a:11:f0:62:2b:e4:82:3f:a7:ae:11:81:e7:5f:76:
e6:97:90:a9:c6:c6:1e:ac:a6:ba:84:93:23:e8:aa:
23:99:8d:67:e0:aa:d9:22:49:2e:57:2e:cd:3e:1d:
3b:f6:58:00:f0:cf:d0:d0:7e:d2:d8:2f:77:b4:63:
2a:35:0f:6f:6c:97:6d:c0:99:5e:5c:53:1c:6b:fd:
f8:36:14:2d:90:98:7e:17:fa:24:5f:c6:50:c6:69:
f5:a2:a6:3a:9b:e9:b9:00:69:91:d5:41:fa:96:c9:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:99:B0:E0:82:1D:85:D8:24:CE:D9:76:5B:CA:14:00:37:55:61:2A
X509v3 Authority Key Identifier:
keyid:9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32322d3233203d3e203538343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.12.0/22
Signature Algorithm: sha256WithRSAEncryption
70:3f:51:f6:8a:fc:50:b0:1f:8f:a6:fd:e4:d1:d1:d2:af:c6:
80:66:ba:b5:9a:3e:fd:a8:be:24:e2:9b:52:c6:56:05:c3:4b:
bb:1a:5d:4a:ca:eb:71:4b:2a:93:81:bc:0e:45:62:b0:02:c6:
a6:b2:1b:82:94:4d:b4:28:29:2e:52:81:e6:5e:a1:28:f6:14:
4c:f2:e7:db:fb:01:e5:ff:09:5c:4b:90:3c:35:a1:3c:71:38:
eb:68:92:02:66:9d:c4:98:fa:a9:92:a2:76:e9:f6:05:ca:22:
1d:66:c9:8e:df:db:99:f1:9a:34:4e:81:9d:d3:ce:b0:56:02:
4b:4e:9a:58:ad:32:0f:33:87:4a:1b:d6:a9:5d:40:43:5c:aa:
a8:00:d7:fa:68:31:b9:2c:14:a0:33:47:0b:2a:00:3d:ad:e1:
af:ae:53:87:15:d1:d2:10:72:4f:6f:b5:1d:33:8f:e5:f0:7a:
f7:08:2f:6b:7e:e8:59:c8:0e:c3:7f:be:07:e3:be:b5:14:70:
13:8e:b1:cb:ac:69:04:cc:ca:6b:7b:92:67:6a:6d:c1:24:a7:
2c:e0:59:a1:12:25:ca:ae:f8:96:6b:28:d2:46:e1:a7:72:7c:
8d:c8:d7:e1:27:09:90:7d:9f:8d:78:22:da:b3:9a:2a:73:c2:
04:67:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 23:01:28 2026 by rpki-client