
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa
File: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier: NpxuTMED+KkFsvGBsqYNwDD7Wr7ndBd2FBb62eDZGAI=
Subject key identifier: 7D:5F:C9:AE:7A:E2:35:65:99:E3:CE:8A:D2:B0:D7:10:97:B8:B8:96
Certificate issuer: /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial: 53220C6D889E0BA8989044464259A97749945531
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa
Signing time: Sun 03 May 2026 02:17:39 +0000
ROA not before: Sun 03 May 2026 02:12:39 +0000
ROA not after: Sun 02 May 2027 02:17:39 +0000
asID: 45305
IP address blocks: 103.142.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:22:0c:6d:88:9e:0b:a8:98:90:44:46:42:59:a9:77:49:94:55:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Validity
Not Before: May 3 02:12:39 2026 GMT
Not After : May 2 02:17:39 2027 GMT
Subject: CN=7D5FC9AE7AE2356599E3CE8AD2B0D71097B8B896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:e8:54:59:eb:9b:f1:30:89:1c:fa:f4:5b:
da:6a:46:ec:0f:07:d9:27:d3:1a:64:d6:1b:09:9d:
e4:5d:29:86:01:8a:d8:03:1b:33:c1:35:dc:a3:89:
36:4c:21:11:e4:22:e1:7e:a0:8e:98:cc:4b:e3:3e:
f8:82:1b:4c:f9:4f:3a:ce:70:b7:49:50:ac:50:50:
d4:a9:c7:3d:ed:a7:ce:07:3a:92:d2:5f:f5:5e:ec:
be:a6:77:39:1d:6f:b1:8c:f4:24:1b:fa:e7:e3:c9:
41:8a:19:fc:b4:41:59:82:47:5a:45:a5:25:9d:3d:
9a:1e:53:ff:4f:3f:28:94:a3:d6:2f:2a:e2:74:c7:
71:bc:b3:5f:3b:e2:95:5f:66:c9:1f:9c:d2:fe:f7:
45:9e:6f:bc:ac:5e:55:8f:4c:82:31:f7:2b:51:a0:
01:e2:ed:82:64:b5:3a:dc:10:78:39:df:84:91:47:
12:7d:09:c3:3d:4c:f1:26:84:bb:1a:68:bf:c2:54:
70:03:58:68:56:09:52:a0:2f:87:74:3c:ee:a5:2a:
85:40:03:f0:6b:cc:b7:d1:f5:a1:6f:72:a5:eb:90:
d5:44:0d:f2:c1:24:43:1d:b0:5c:ef:5e:68:7c:88:
fa:8c:36:48:4f:fc:55:02:00:4e:63:20:e3:80:43:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:C9:AE:7A:E2:35:65:99:E3:CE:8A:D2:B0:D7:10:97:B8:B8:96
X509v3 Authority Key Identifier:
keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.142.254.0/23
Signature Algorithm: sha256WithRSAEncryption
60:be:50:f3:64:fa:a3:02:73:4c:79:4c:56:c5:67:d3:4a:f2:
09:37:c6:8a:82:08:d0:a2:26:9b:77:fa:4f:ec:10:39:22:0a:
4b:62:6e:56:48:19:88:66:9f:61:24:5c:e5:bd:36:04:8c:2b:
7a:70:15:29:76:66:3a:13:bb:d1:9a:63:5e:7f:c8:93:67:b6:
58:f9:bf:3f:16:1e:5b:7a:a1:88:81:45:3e:6d:84:d9:ae:4a:
a2:45:cd:40:e5:9d:18:99:8d:85:04:e5:a5:39:6f:3a:36:b9:
f1:e0:05:e0:16:c4:b0:4d:ee:63:8b:52:96:8b:38:49:ac:c6:
ea:78:9e:2a:e0:08:b9:74:0a:97:a2:4a:18:a7:27:23:27:6e:
f1:9c:f2:3a:8b:ce:79:97:9e:17:07:eb:fe:cf:87:01:75:d9:
8b:0a:86:36:35:9f:c0:74:33:8f:62:c3:44:5e:55:90:a9:2b:
60:b8:1d:18:2f:00:07:f9:05:fc:7b:91:36:fd:be:5e:6b:87:
c9:65:5f:f0:81:f0:39:8c:7c:c9:45:fa:aa:e7:9f:71:71:d9:
b5:4a:2c:ea:0f:dd:76:4a:99:92:50:1c:0a:78:0d:69:01:64:
1a:b0:91:59:dd:ef:25:f3:7f:bb:1e:0e:a0:e0:8c:bd:08:ad:
93:44:e2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:34 2026 by rpki-client