
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa
File: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (raw, json)
Hash identifier: GymIgmPh7c7AFMEkOazrLmR+HafDOGSOnyaAyUzJOWU=
Subject key identifier: BA:92:22:83:7F:7A:B4:99:16:A7:6B:53:BA:C1:D1:D8:4D:E1:DB:BB
Certificate issuer: /CN=7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C
Certificate serial: 026F44BF42104494B81A241DB9050D6671BB1680
Authority key identifier: 7D:51:3C:A0:27:0A:04:6B:FF:27:E9:C4:9D:A0:E9:90:3C:DD:2C:0C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa
Signing time: Sun 03 May 2026 02:15:03 +0000
ROA not before: Sun 03 May 2026 02:10:03 +0000
ROA not after: Sun 02 May 2027 02:15:03 +0000
asID: 139945
IP address blocks: 103.147.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl
rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6f:44:bf:42:10:44:94:b8:1a:24:1d:b9:05:0d:66:71:bb:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C
Validity
Not Before: May 3 02:10:03 2026 GMT
Not After : May 2 02:15:03 2027 GMT
Subject: CN=BA9222837F7AB49916A76B53BAC1D1D84DE1DBBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:1b:ef:c5:32:aa:b0:70:1c:ed:b5:5b:0c:
05:77:32:46:a6:0d:ab:42:fa:f4:54:36:84:ab:ea:
3c:5a:db:84:87:bb:9c:88:42:a7:74:04:ed:a7:8a:
f7:37:ad:ae:18:00:89:0b:eb:cd:1e:f8:b8:d0:95:
96:89:16:f9:73:01:b4:3d:8e:f3:0c:4c:e0:bb:82:
7b:fb:c5:d8:f0:2d:a0:9b:7f:12:2c:34:ad:b1:07:
23:fc:b1:7d:2c:17:29:ab:77:45:81:3e:34:4c:aa:
52:17:34:86:15:eb:a8:68:a2:1f:bc:02:43:63:bf:
0c:4f:33:25:36:7c:0e:97:ea:5d:45:9b:11:e5:67:
75:bf:24:df:66:6f:07:e3:5d:0e:f9:0f:9c:59:e5:
a8:2c:f1:8d:51:b9:58:68:bd:a8:79:4f:2b:cc:62:
fb:66:f3:06:5f:86:7e:3e:14:e6:0e:12:eb:14:3d:
8e:b5:e0:d9:9e:18:b5:c6:a2:6c:19:9c:30:76:2e:
6a:d8:de:e6:69:97:0b:fc:d5:fb:fe:cf:9a:9b:db:
0d:84:13:92:ef:ab:29:78:49:55:43:cd:0e:e8:3c:
43:bf:0e:86:55:a8:f0:bd:79:64:d2:e0:c1:60:89:
ec:f8:21:ab:67:15:37:19:6c:74:6d:41:32:a3:1f:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:22:83:7F:7A:B4:99:16:A7:6B:53:BA:C1:D1:D8:4D:E1:DB:BB
X509v3 Authority Key Identifier:
keyid:7D:51:3C:A0:27:0A:04:6B:FF:27:E9:C4:9D:A0:E9:90:3C:DD:2C:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.10.0/23
Signature Algorithm: sha256WithRSAEncryption
88:c3:57:c9:37:cc:b3:80:02:84:aa:f6:5e:59:0c:57:47:e2:
df:13:d1:71:c5:4b:e1:e5:58:f4:34:8b:a9:96:f0:92:63:cc:
86:e2:ac:ad:38:e3:6d:d8:e9:a7:d8:c5:fe:79:01:b5:16:bf:
40:f8:2a:ef:65:6b:56:21:56:24:4b:1e:de:31:8e:6c:68:e2:
28:05:6e:c7:ad:b8:1d:7c:e2:4f:7f:da:ba:3f:6d:4f:90:38:
74:f2:74:04:b7:3d:fb:6a:7a:a3:db:d5:b7:1f:6e:20:a7:2a:
ff:05:4d:ab:05:7b:43:c6:53:61:a8:6e:c5:db:e6:11:b5:c5:
81:fc:3b:0c:b6:2b:3f:44:43:78:2e:fb:3f:af:09:91:46:99:
d1:7b:be:06:9c:bd:c9:b6:fe:50:78:97:e3:8e:6c:7a:ba:4a:
87:5c:ce:8e:0b:9f:87:e4:4a:56:45:49:90:05:bc:2d:17:ef:
1f:39:59:b6:b3:5b:f6:39:07:f2:08:79:c7:86:d7:3c:57:98:
d9:c4:22:b6:76:48:35:e4:62:33:f2:a5:63:d4:22:89:f6:88:
2b:a9:d5:98:ec:a7:89:fe:7a:c7:f2:23:97:02:cb:fa:9c:b5:
fa:fd:ce:72:1d:54:cc:f1:97:84:b0:99:c7:f3:25:bd:b8:9c:
6e:a0:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:34 2026 by rpki-client