
$ rpki-client -vvf rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa
File: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (raw, json)
Hash identifier: ZMjpq12yq0Ybu/ztv35lMr6v5CZiyWpAJWCedHpTXXc=
Subject key identifier: AD:5C:5C:C0:65:C1:63:A8:C3:81:A5:C3:6F:3A:8C:E2:9C:01:C1:FC
Certificate issuer: /CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E
Certificate serial: 2559567D5B9451A747E922ACE4D3DFC698FE9198
Authority key identifier: 43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa
Signing time: Sun 03 May 2026 02:10:32 +0000
ROA not before: Sun 03 May 2026 02:05:32 +0000
ROA not after: Sun 02 May 2027 02:10:32 +0000
asID: 142327
IP address blocks: 103.168.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl
rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:59:56:7d:5b:94:51:a7:47:e9:22:ac:e4:d3:df:c6:98:fe:91:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43E7A30A597BB32973CB2B6179D9AD8969F4829E
Validity
Not Before: May 3 02:05:32 2026 GMT
Not After : May 2 02:10:32 2027 GMT
Subject: CN=AD5C5CC065C163A8C381A5C36F3A8CE29C01C1FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:dd:62:78:76:0f:7f:ce:af:aa:9b:3b:4f:
2d:dd:62:b4:d3:ef:5c:cb:31:09:b4:97:63:34:32:
16:20:95:21:65:6a:e7:2c:07:e3:6b:f5:f5:b9:ff:
54:cc:a0:50:69:10:4d:4b:80:11:b6:c8:cd:ac:61:
27:e3:57:be:95:62:0a:9d:fd:3e:46:b9:89:cc:5d:
90:96:ea:c0:d9:b3:ea:ce:52:70:21:13:73:29:0d:
2e:70:11:15:6a:f2:3e:78:8c:b3:19:c5:e4:4d:3a:
13:fd:0e:c6:a8:52:be:a8:d1:4f:4c:46:b2:fb:47:
15:f1:45:17:03:83:c4:6a:a8:14:19:1f:01:10:1e:
78:0e:58:6e:5c:0e:c9:c8:2d:03:36:d8:de:20:f5:
8c:fe:a8:be:72:e9:20:e5:d5:ea:27:12:eb:a4:b5:
c3:d2:c9:51:8d:b6:e5:e0:00:25:4f:a1:74:b2:50:
ed:e4:50:9d:9e:23:53:87:f6:73:24:b5:9f:6b:0f:
6d:17:54:1c:60:f6:12:53:08:c8:88:14:b8:fd:20:
b3:22:e9:08:2f:6e:ed:47:82:08:f0:96:8c:9d:f8:
fe:9c:b5:60:23:c8:0f:1e:c2:77:10:6a:25:15:50:
e6:85:cd:b0:fe:46:2e:0a:ce:d8:24:d5:33:da:97:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5C:5C:C0:65:C1:63:A8:C3:81:A5:C3:6F:3A:8C:E2:9C:01:C1:FC
X509v3 Authority Key Identifier:
keyid:43:E7:A3:0A:59:7B:B3:29:73:CB:2B:61:79:D9:AD:89:69:F4:82:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/43E7A30A597BB32973CB2B6179D9AD8969F4829E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E7A30A597BB32973CB2B6179D9AD8969F4829E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.250.0/24
Signature Algorithm: sha256WithRSAEncryption
41:38:56:c2:1c:bd:6b:ae:e2:50:d1:40:ff:c9:77:7f:69:34:
49:ae:e4:5d:c0:e6:b9:ad:40:0b:51:0d:33:95:fe:9c:67:65:
4c:61:dc:b8:19:a5:44:44:85:df:9a:5a:8b:27:83:89:ab:38:
6d:4f:51:d6:5d:ca:07:0b:c6:9a:f3:7b:fc:c2:5e:6d:cb:88:
ab:93:b5:56:07:58:df:01:d8:01:37:78:85:82:ce:e7:5c:92:
02:1a:cf:b3:5b:2f:47:41:de:bd:68:41:7a:a1:10:42:a3:1f:
3b:b2:ac:fd:79:5f:59:51:07:c6:c4:bc:b3:35:56:f8:e7:6f:
ed:da:63:3f:d7:6a:7c:84:c7:81:7a:05:9d:9b:5c:a6:27:29:
3e:47:69:fa:39:a6:ab:95:8f:59:a7:0f:21:f5:a0:19:66:93:
2a:89:b1:18:28:58:88:84:84:b1:b7:12:af:84:b9:79:f5:af:
3a:71:37:df:6a:0c:d7:4c:93:c0:c9:4a:1a:47:99:1b:2a:e7:
df:31:fd:f6:85:0f:4d:c7:2c:ca:75:5b:9f:e0:62:87:09:ea:
e0:86:fb:26:00:34:b8:ef:e3:ad:f5:b1:35:d8:a6:c2:69:e1:
8d:22:07:a0:5b:0c:8e:09:50:97:4a:78:45:50:5c:3d:d3:1f:
2f:f3:d5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:06 2026 by rpki-client