
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa
File: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: Sxg6YyOUpBblg3g3D4oNcKxKaQWWwQAvP3gO95G7uko=
Subject key identifier: A2:DF:84:EF:EE:9D:59:5B:54:48:53:F7:FC:25:EF:BE:EB:E6:D6:52
Certificate issuer: /CN=5109EC0B3BA28731E9E261F3B59F3600B563E644
Certificate serial: 21EBA69CF96778A05B73E7F0E9A324EA57131A04
Authority key identifier: 51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa
Signing time: Sun 03 May 2026 03:06:30 +0000
ROA not before: Sun 03 May 2026 03:01:30 +0000
ROA not after: Sun 02 May 2027 03:06:30 +0000
asID: 9341
IP address blocks: 103.117.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl
rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:eb:a6:9c:f9:67:78:a0:5b:73:e7:f0:e9:a3:24:ea:57:13:1a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5109EC0B3BA28731E9E261F3B59F3600B563E644
Validity
Not Before: May 3 03:01:30 2026 GMT
Not After : May 2 03:06:30 2027 GMT
Subject: CN=A2DF84EFEE9D595B544853F7FC25EFBEEBE6D652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:4a:bf:12:4a:c5:e4:5f:c3:87:61:1e:4d:
fb:f6:aa:b7:ed:3c:01:73:e2:71:91:25:a4:53:69:
5b:b0:71:b0:21:c5:0e:04:a1:d5:2e:23:ab:b2:df:
71:ea:40:c0:d4:ca:a0:16:5c:21:06:94:7f:b6:f1:
99:42:b7:3c:cd:04:46:e0:14:40:85:d1:ef:f9:56:
e9:31:d6:b3:55:a7:2d:ec:58:b8:17:53:0f:91:c8:
9d:c5:42:01:69:31:61:e7:87:93:d5:01:02:ba:3d:
41:66:4f:e0:41:05:83:13:65:59:a3:0c:1e:50:8d:
1d:ed:f8:5e:e0:01:0d:e5:91:bc:ca:be:33:47:0e:
b6:56:90:c0:36:36:43:ca:cc:98:1b:c6:4b:e5:2d:
4a:81:9b:4e:4e:d8:90:b8:53:96:47:45:9c:10:51:
b4:30:04:7b:7e:21:e4:3d:7c:97:04:32:35:26:1c:
91:f6:23:b3:25:e1:6a:d9:dd:1f:38:55:58:c1:47:
31:1e:aa:f9:5c:4e:9c:9c:ff:4e:0c:89:13:95:da:
ae:39:21:f5:0f:f9:56:3f:fa:ff:ff:fe:83:c1:40:
56:34:04:8d:0a:fc:0e:9d:99:bb:a2:81:3b:df:f9:
7d:a2:07:23:83:49:04:cf:81:86:8d:92:a1:a5:2b:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:84:EF:EE:9D:59:5B:54:48:53:F7:FC:25:EF:BE:EB:E6:D6:52
X509v3 Authority Key Identifier:
keyid:51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.117.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f9:fd:62:09:84:ff:08:01:dd:d3:a2:21:d3:09:11:da:59:
5b:07:7a:04:03:f8:99:c1:96:b0:a5:ae:57:02:dd:a5:21:cd:
fe:53:29:c0:80:a4:80:7a:06:e7:16:d2:12:ce:fb:17:5c:5b:
f5:49:5e:4e:7c:0c:dd:67:8f:82:73:43:49:04:77:a3:05:65:
fb:51:7f:5d:f8:e7:73:c0:76:4c:29:fd:bd:e0:b6:7b:7a:0f:
13:cd:6e:64:6c:08:e5:a6:0e:de:0d:c1:27:d2:3c:41:a4:45:
9a:cd:bd:5d:6b:79:37:4b:22:48:c8:1f:31:d2:ac:03:39:41:
78:57:a5:7d:5b:68:86:09:9c:ac:20:f8:c1:82:e4:1c:dd:46:
af:ef:7f:37:cb:57:a8:51:b9:8b:12:53:6d:5a:2a:eb:21:66:
12:a0:94:0e:e3:3f:f2:8f:4d:c4:e6:c5:5e:bb:ad:6b:bd:8b:
75:be:bd:f7:7f:cc:01:6f:b7:ca:61:d6:81:4d:a2:f9:33:37:
6f:04:65:cb:89:1a:27:83:0f:c8:8a:a2:3f:1e:af:bc:b1:ec:
eb:00:8c:da:40:d8:f8:6b:30:d5:f8:fe:37:74:b1:a7:83:5f:
6a:ff:7f:7f:8e:a8:b7:24:9c:fd:cd:bb:90:fb:5e:3c:44:bd:
8b:f1:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:29:31 2026 by rpki-client