
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa
File: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (raw, json)
Hash identifier: OebTseoVB0ZNUnkGTm7RpHNzeV5/zFx7NUgoswqD6v0=
Subject key identifier: F1:66:AF:4D:03:A4:AC:8E:54:DB:75:19:83:19:B0:29:87:BC:C7:09
Certificate issuer: /CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5
Certificate serial: 039FF841A8E6C6C88233970BD7F7652B2E91B25C
Authority key identifier: 54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa
Signing time: Sun 03 May 2026 02:17:11 +0000
ROA not before: Sun 03 May 2026 02:12:11 +0000
ROA not after: Sun 02 May 2027 02:17:11 +0000
asID: 147086
IP address blocks: 103.172.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl
rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9f:f8:41:a8:e6:c6:c8:82:33:97:0b:d7:f7:65:2b:2e:91:b2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5
Validity
Not Before: May 3 02:12:11 2026 GMT
Not After : May 2 02:17:11 2027 GMT
Subject: CN=F166AF4D03A4AC8E54DB75198319B02987BCC709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:9f:ec:c7:14:05:5d:fb:7e:cc:00:88:9e:
8e:c8:83:23:f9:1a:42:52:cd:26:2e:27:0b:dd:08:
34:3d:c9:70:34:d4:78:1a:e3:2c:a7:ce:34:a4:c2:
49:db:eb:ff:4e:48:6a:62:d6:c2:cb:65:79:5e:ab:
85:98:14:78:23:2f:e5:32:81:f3:e9:6b:db:3b:17:
49:37:a3:9a:93:b2:54:c0:22:4a:89:22:d5:3d:ce:
e5:a8:d6:ef:79:03:cd:98:1e:cb:21:0a:22:a5:8a:
9d:fe:07:35:ef:78:81:0d:21:c9:e6:15:85:fd:ea:
9d:d0:ba:fc:91:f9:12:36:4c:e2:95:39:3a:89:de:
14:cc:66:66:7a:3f:cc:c9:3a:9c:c8:f5:fd:61:17:
08:c2:2e:7d:cd:5e:d9:87:a5:2d:bd:ff:b8:7f:ca:
cd:f5:36:ca:3d:35:c4:b9:81:71:29:7e:fa:47:84:
80:5e:e3:e2:19:b0:72:04:15:57:20:8f:64:af:ba:
5e:38:72:2b:49:a9:bd:b7:c8:96:7d:b5:f4:08:18:
83:3d:de:48:f9:e1:83:5a:8b:21:a8:cd:c7:9b:e6:
a7:9e:5e:82:bb:b3:af:6c:9d:b7:7d:ac:61:b8:c2:
46:10:7e:20:e7:13:34:78:59:54:4f:24:c4:d3:43:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:AF:4D:03:A4:AC:8E:54:DB:75:19:83:19:B0:29:87:BC:C7:09
X509v3 Authority Key Identifier:
keyid:54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:33:8a:c3:1b:0d:d1:3c:8f:b6:14:70:36:0c:08:c1:13:21:
ea:0a:1f:79:c5:e9:42:a2:56:b2:5f:75:1c:bd:b0:7c:e3:81:
6a:61:86:6f:2b:be:69:25:7c:2c:57:a4:5a:bf:c0:f8:b5:78:
fa:7b:f4:3d:a2:cb:2f:f5:21:d6:9c:3b:bf:ae:11:94:25:c9:
32:27:c2:a4:15:22:ea:7c:46:10:ef:a9:4d:ef:8c:a5:9a:a5:
7b:db:93:1e:ab:a8:5a:db:0f:bd:6b:38:da:47:10:32:fe:47:
ee:c8:ec:ea:09:85:4e:a1:50:82:84:59:21:74:de:20:0c:ac:
64:28:07:b2:95:69:ca:14:42:c3:c6:53:25:ff:04:df:b1:61:
6e:ff:39:a1:81:a7:fd:ce:d2:de:f1:cd:50:54:94:7f:72:5a:
31:b0:a5:36:1e:ac:bf:04:7a:99:b5:4e:e4:04:5c:0e:14:70:
fc:03:60:dc:6b:80:34:79:61:d7:72:8a:1b:0d:8a:70:4c:fa:
44:06:15:44:15:55:0d:34:91:3b:9f:d6:b5:c3:3f:91:ce:98:
6a:8d:a4:a1:b0:76:45:85:ac:3a:4f:61:7c:29:f1:f0:c4:38:
6b:78:2e:f0:75:e0:a0:2a:a7:c0:8e:69:84:d5:26:f2:d0:fe:
42:4c:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:36 2026 by rpki-client