
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa
File: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (raw, json)
Hash identifier: /1UO8tVQ+wLCWDJC+/9ddMEbFB3CgcFjCBFNxuu9120=
Subject key identifier: 97:96:A5:2F:C8:AF:45:83:92:22:89:51:2A:92:EA:E1:59:FA:F4:F8
Certificate issuer: /CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5
Certificate serial: 408233BFEA6EBD373F4E618985EB363D1CC77C7B
Authority key identifier: 5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa
Signing time: Sun 03 May 2026 02:13:03 +0000
ROA not before: Sun 03 May 2026 02:08:03 +0000
ROA not after: Sun 02 May 2027 02:13:03 +0000
asID: 140479
IP address blocks: 103.154.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl
rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:82:33:bf:ea:6e:bd:37:3f:4e:61:89:85:eb:36:3d:1c:c7:7c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5
Validity
Not Before: May 3 02:08:03 2026 GMT
Not After : May 2 02:13:03 2027 GMT
Subject: CN=9796A52FC8AF4583922289512A92EAE159FAF4F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:a4:77:14:8a:fa:9c:c6:ed:bd:1c:2a:9f:
7b:6e:c4:48:a5:9e:2b:09:75:79:2b:64:34:50:db:
90:c7:14:8b:4a:aa:97:90:10:9d:3b:99:b9:13:9c:
ca:b2:63:3c:fa:97:d8:a9:cd:fa:01:c9:99:cc:b0:
18:eb:9c:9e:ff:90:e9:03:c9:cb:30:3f:a4:3b:3a:
c7:9d:dd:99:f7:f3:e7:fd:32:66:76:75:94:62:78:
c2:1b:c8:7e:7e:8a:36:ae:1f:2a:4a:e4:95:5d:ef:
bc:b0:4f:d8:40:ae:f7:ab:93:9a:84:3f:60:cc:8f:
4d:57:27:b1:87:92:33:04:c0:16:0b:62:0f:b5:1b:
50:6d:58:bd:a2:40:44:18:2b:e2:de:bd:8b:56:1d:
53:3b:9c:d5:6f:01:3b:f6:2a:63:8d:30:67:a2:48:
b5:f0:a0:6c:d7:d0:2e:7e:76:05:40:5e:79:c3:47:
f3:78:0f:41:d0:ca:ac:d9:59:b3:f0:b4:0b:4f:27:
fc:59:5e:6c:24:54:2c:3c:62:9d:47:21:ec:90:b6:
5a:77:61:ca:61:9e:c7:52:a2:b2:bc:70:f8:e5:ca:
05:18:43:5f:8b:b9:ad:e4:ea:c6:99:f0:de:4b:8d:
c0:d6:b8:ab:0d:95:de:d9:d1:d5:3c:e7:07:27:68:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:96:A5:2F:C8:AF:45:83:92:22:89:51:2A:92:EA:E1:59:FA:F4:F8
X509v3 Authority Key Identifier:
keyid:5F:BE:DE:98:3A:63:22:B9:99:A4:6A:B6:AA:CC:F6:A7:C6:06:3F:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FBEDE983A6322B999A46AB6AACCF6A7C6063FB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.53.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a2:c4:5c:02:b4:57:87:3a:d5:9f:68:52:6c:7e:fa:f6:da:
49:ba:e8:31:88:6d:9c:3c:01:63:8b:c6:31:ce:da:d3:bb:87:
b7:c2:49:d2:d7:f1:9e:1a:a2:94:58:aa:b4:77:f9:96:11:d5:
6b:f8:9f:fd:ba:fa:0d:3b:85:12:af:ee:8a:d8:a1:7a:4f:d3:
4f:05:d9:2e:92:71:d7:17:21:af:3c:9b:2d:2a:7f:e3:38:bd:
22:b8:8f:bf:73:bb:72:c5:50:90:ab:6c:59:35:9a:76:14:fd:
12:42:71:af:e2:9a:70:bb:51:15:06:15:15:f6:bf:3d:91:b6:
79:23:9d:57:25:4b:18:14:65:b7:7a:f5:8c:ca:2a:bf:53:3e:
b0:9b:65:ff:a5:8e:6b:c7:51:30:2b:8f:33:19:e1:f4:42:ce:
58:79:7c:84:1f:d7:5a:d4:81:5a:f1:f1:4c:28:01:6d:e7:a0:
85:6e:e8:13:c1:0c:e9:77:4d:8c:7d:47:ce:22:92:fb:c0:e8:
35:ad:c8:84:39:65:ac:21:49:1b:9e:38:61:56:fb:5a:e0:d0:
d6:63:b6:fa:e3:e6:86:36:98:5e:e3:5d:a9:1e:4f:dc:02:0e:
04:10:56:b3:8f:db:5c:88:5d:69:e5:47:38:f8:93:14:02:f0:
fb:4d:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:32 2026 by rpki-client