
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa
File: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (raw, json)
Hash identifier: hB2D7K4UTkw5fpBq+t9X3VNB/1j6WvNNmkdz6+J5cvo=
Subject key identifier: F0:90:A1:EE:29:D8:B0:F9:4F:B9:F5:D3:18:9E:FB:05:E5:CC:F1:86
Certificate issuer: /CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5
Certificate serial: 4280CA49B81E422E8EC9BC7E67D651F49711C505
Authority key identifier: 5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa
Signing time: Sun 03 May 2026 02:13:03 +0000
ROA not before: Sun 03 May 2026 02:08:03 +0000
ROA not after: Sun 02 May 2027 02:13:03 +0000
asID: 140479
IP address blocks: 103.154.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl
rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:80:ca:49:b8:1e:42:2e:8e:c9:bc:7e:67:d6:51:f4:97:11:c5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5
Validity
Not Before: May 3 02:08:03 2026 GMT
Not After : May 2 02:13:03 2027 GMT
Subject: CN=F090A1EE29D8B0F94FB9F5D3189EFB05E5CCF186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:0c:b1:b8:4f:13:12:79:04:28:a3:39:3a:
ef:b4:61:9f:ed:2b:ee:40:d6:f3:92:b9:83:c4:47:
c0:dc:0b:48:8d:7f:81:2b:e5:ef:ef:c5:a7:86:0d:
2a:ab:e3:22:21:1d:28:8e:9e:32:fa:e0:98:a8:26:
32:a6:a5:6e:b4:fd:94:5a:64:3a:95:e9:81:92:b1:
33:93:ce:3c:59:33:0c:9d:21:c1:3d:93:4b:06:ba:
35:56:46:12:39:ca:0c:31:a6:9f:c2:f5:67:fd:6d:
ec:10:f8:9c:f8:52:33:7a:f0:8f:31:5a:7c:fc:0b:
35:72:b1:7c:62:5c:f3:21:6f:31:85:35:cb:ce:dd:
75:58:32:e9:6d:85:35:d0:18:ae:e4:00:71:bb:40:
2d:b1:2c:fb:eb:48:7c:3e:ac:5f:bc:54:a2:4d:83:
9b:81:aa:a2:4d:78:43:81:e2:e9:bb:ab:09:ca:b3:
61:58:96:4b:da:bc:ce:ad:fa:af:59:65:f3:34:ef:
f7:5a:d8:8b:b5:9c:76:95:b3:38:75:84:92:70:ab:
ec:45:e2:cf:84:e4:8b:23:c2:06:3f:46:70:ef:7e:
27:5e:47:36:24:a2:db:9f:50:96:56:06:ce:f5:0c:
83:1f:0b:3d:cf:08:cc:ed:34:ca:e5:f7:47:50:c9:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:90:A1:EE:29:D8:B0:F9:4F:B9:F5:D3:18:9E:FB:05:E5:CC:F1:86
X509v3 Authority Key Identifier:
keyid:5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.52.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:e6:68:2d:70:3a:5a:6f:c0:e3:a7:b4:db:ea:da:f3:38:08:
2d:0c:c0:05:72:0a:f8:85:13:03:9c:c9:ec:c9:30:d8:93:4f:
cf:4c:7e:4b:1f:8e:3d:66:9b:8b:83:d8:b8:46:ef:d7:32:ee:
69:27:6d:c8:4d:99:47:88:86:f1:65:bb:8c:65:cb:df:84:46:
43:76:1b:22:22:32:39:6a:62:64:ce:9f:bf:ad:75:ab:79:93:
95:b6:45:2c:dc:92:9e:70:49:ce:4b:e5:f6:ab:d8:bc:28:35:
dc:c1:73:a3:a2:83:42:77:d1:47:ef:f9:34:cd:1d:82:05:03:
a8:eb:ae:d2:cc:78:f3:87:10:23:dc:8d:ce:01:56:6c:9f:87:
3b:1c:d2:e3:0d:cf:67:37:62:71:16:0e:76:80:cb:4e:b7:8f:
77:12:36:ff:cc:a6:95:de:2a:3c:d3:66:48:7f:9c:5e:f1:3b:
50:5b:8f:2a:a5:d7:b4:a9:53:1a:b7:fd:63:44:f8:cc:89:56:
59:58:c5:59:69:72:b4:01:b3:39:1b:d2:c5:03:bf:84:a4:67:
65:43:a2:42:26:e2:c3:bc:29:eb:a7:38:cc:c8:9a:fa:50:47:
77:be:e7:37:b9:5d:cc:c0:fd:b3:06:41:0c:ea:6e:dd:3a:2c:
0d:e7:9e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:31 2026 by rpki-client