
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37382e302f32342d3234203d3e203438343635.roa
File: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier: hoI4Z+yZlJFn+WHGYBiSiySAQlgqw69H0i3XEwm8T7w=
Subject key identifier: 1B:F6:B1:81:F4:69:9B:60:94:53:E3:95:3C:53:ED:E3:95:D7:94:C5
Certificate issuer: /CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3
Certificate serial: 2DFBB7A69DD1674A3626E18595BE23DA616A93EF
Authority key identifier: BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37382e302f32342d3234203d3e203438343635.roa
Signing time: Sun 03 May 2026 03:18:05 +0000
ROA not before: Sun 03 May 2026 03:13:05 +0000
ROA not after: Sun 02 May 2027 03:18:05 +0000
asID: 48465
IP address blocks: 103.140.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl
rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 08:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fb:b7:a6:9d:d1:67:4a:36:26:e1:85:95:be:23:da:61:6a:93:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3
Validity
Not Before: May 3 03:13:05 2026 GMT
Not After : May 2 03:18:05 2027 GMT
Subject: CN=1BF6B181F4699B609453E3953C53EDE395D794C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:60:8b:11:f2:d2:e2:a1:de:fb:fb:ba:40:
0c:ad:90:e8:2f:86:c1:21:d2:4b:4a:29:dd:95:f6:
35:48:1b:35:c3:05:a4:e7:af:40:8c:d9:47:77:06:
05:22:0b:49:2e:bb:0c:3a:61:9e:15:93:35:79:ff:
1c:5b:f6:a1:36:9f:23:5a:92:28:b7:b5:cb:d8:dd:
c5:32:3f:eb:96:1e:55:94:24:ca:cd:b5:cf:4a:ac:
2c:57:75:91:48:5a:25:66:f6:2f:4b:2b:8b:ca:46:
95:6f:f6:11:dc:91:70:33:46:02:78:84:4e:64:43:
82:06:88:a1:66:15:25:08:ef:82:0d:9d:2f:c7:1e:
4e:fe:0f:a6:56:5a:43:3c:3c:da:d8:bb:29:13:d1:
f5:5f:4b:8e:6f:b2:da:98:18:32:26:dd:cc:42:dc:
aa:12:48:71:63:44:c5:87:60:4e:7d:95:05:de:70:
9f:cf:75:54:75:f6:26:90:67:f5:b9:16:dd:4f:a5:
81:fa:a9:94:49:78:a9:c0:1a:07:c9:7e:45:c8:3f:
1b:95:d9:8f:9f:ee:7f:4c:be:37:2b:57:54:19:90:
74:23:8c:98:69:3b:85:16:94:e5:74:c2:8f:0b:a6:
66:cb:17:4a:2f:8d:11:b1:77:b7:66:c3:26:42:13:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:B1:81:F4:69:9B:60:94:53:E3:95:3C:53:ED:E3:95:D7:94:C5
X509v3 Authority Key Identifier:
keyid:BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37382e302f32342d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.78.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:76:8f:22:04:a8:b1:49:14:97:62:c1:12:2f:bb:33:fa:e8:
5c:c7:3d:26:20:c3:1c:3c:14:16:54:8d:5d:8b:bf:c5:2f:bd:
97:8f:57:d0:05:d9:a2:dc:c6:97:92:e1:91:fd:71:0a:21:a8:
58:ff:b4:a5:85:b9:a8:55:d6:a0:d0:6d:79:d7:8a:53:6a:91:
42:96:b9:c1:bb:d9:f1:c9:1b:06:0c:c6:1d:0d:cb:c9:f3:eb:
c5:dc:b2:40:1c:9a:de:97:a3:2a:41:e7:05:1c:e1:99:f2:7a:
d1:8b:1a:dd:0e:26:03:09:df:91:2a:a6:b6:2f:31:b7:44:03:
cc:26:a5:e0:9b:10:a1:df:1c:ac:e8:c4:65:3f:c8:ed:b3:00:
e5:4d:3a:fa:27:2c:e2:67:12:17:c1:5d:53:95:21:41:52:78:
ba:05:5f:e5:89:53:39:7c:18:14:c5:7f:19:04:36:5d:46:fb:
50:7b:98:2e:66:40:d5:b1:bc:37:e8:2c:e3:47:d6:5c:ea:76:
87:53:98:62:ae:d1:70:25:ba:4e:d2:68:5e:35:d6:22:ad:53:
77:88:1b:04:d1:6f:9c:c5:2f:e2:b6:b4:6f:41:f7:61:06:a0:
1b:b5:83:19:5c:7e:8f:ed:fa:20:40:21:31:29:a8:8e:dc:15:
b4:dc:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:55:35 2026 by rpki-client