
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa
File: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (raw, json)
Hash identifier: GkQ8eVgQ8r/gDw/x4qIJQCYsnJYsQySSoX0lOgA5GAk=
Subject key identifier: F1:23:4B:EE:69:10:2B:59:38:51:0B:53:8C:ED:F2:2B:DF:BA:21:62
Certificate issuer: /CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7
Certificate serial: 1CA79AF7643C8882C951A4A458D1CF6742E548E6
Authority key identifier: A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa
Signing time: Sun 03 May 2026 02:18:19 +0000
ROA not before: Sun 03 May 2026 02:13:19 +0000
ROA not after: Sun 02 May 2027 02:18:19 +0000
asID: 140482
IP address blocks: 103.152.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl
rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a7:9a:f7:64:3c:88:82:c9:51:a4:a4:58:d1:cf:67:42:e5:48:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7F257AB233C8B2F1C6388FCB94F34206063ACA7
Validity
Not Before: May 3 02:13:19 2026 GMT
Not After : May 2 02:18:19 2027 GMT
Subject: CN=F1234BEE69102B5938510B538CEDF22BDFBA2162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:d1:1d:5f:20:fd:d0:76:94:2a:31:b6:5f:
04:b7:ca:22:d7:3a:d7:db:dc:29:7e:cb:38:57:05:
21:95:15:2e:4e:d7:2a:2a:a8:a0:55:ad:4c:6a:75:
33:54:c2:13:66:a2:69:0c:02:45:2c:19:79:99:4d:
06:28:ec:91:a2:d2:2b:ae:0f:da:2e:e9:04:19:b1:
97:41:b5:fe:0e:c8:eb:5e:3d:b9:35:a6:ac:87:7f:
a8:1e:18:f6:ac:8f:8b:9a:37:fe:fa:3e:46:e9:73:
89:e7:7c:96:35:9b:2c:da:d5:18:0d:d6:3d:b6:63:
51:cc:93:6e:16:43:d5:3f:42:92:63:4d:01:0f:37:
66:17:7b:15:69:2c:19:76:4e:7f:fe:6e:69:82:95:
b7:ef:c7:65:cd:df:6c:4b:f1:df:bc:bd:cf:9e:56:
7c:64:46:eb:a9:4c:2d:1d:04:14:78:2d:68:22:2d:
4d:a6:47:bc:72:81:62:6d:50:a1:bf:c3:83:92:c1:
15:e8:28:57:df:c1:9b:c6:2a:c1:e5:c7:2d:a4:36:
97:13:a3:69:be:7d:41:9d:d0:fa:c9:09:ad:15:0b:
95:53:83:45:56:4b:00:a7:5f:75:c6:e4:59:18:ae:
38:7c:9e:20:7b:ea:54:df:c6:b5:6d:1f:80:e5:69:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:23:4B:EE:69:10:2B:59:38:51:0B:53:8C:ED:F2:2B:DF:BA:21:62
X509v3 Authority Key Identifier:
keyid:A7:F2:57:AB:23:3C:8B:2F:1C:63:88:FC:B9:4F:34:20:60:63:AC:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7F257AB233C8B2F1C6388FCB94F34206063ACA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.152.140.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:cb:34:a6:70:03:5b:13:e4:1f:77:21:60:b1:1e:7d:45:71:
ec:9d:b9:32:c9:d2:54:7c:6c:09:45:04:54:15:fc:3b:14:bc:
2a:3b:33:5e:f0:73:2b:f8:21:e8:ce:0c:f8:a5:fa:fc:1f:4a:
ff:b8:f7:51:73:6d:26:9f:6a:6c:86:90:3c:bc:76:50:c8:1e:
c0:11:44:31:a8:cd:94:c9:0e:c9:c3:9e:7d:39:67:81:31:9c:
4e:13:36:40:70:d9:c6:ff:97:51:2a:27:9d:8e:05:75:10:43:
cb:fb:6c:36:8c:8d:dc:3e:d5:31:8b:89:0d:3d:1b:f8:c1:ce:
bf:1e:54:bc:cc:76:b8:54:b1:79:0f:0b:a4:a5:9e:0e:70:ec:
09:af:4d:ce:0d:83:7a:6e:17:e3:1f:88:68:f4:3d:fd:35:cb:
96:18:1f:02:64:d4:76:d6:42:85:a8:bf:54:b3:f5:65:5b:25:
2c:b4:1c:6d:fd:57:3a:ba:18:cc:02:4c:25:df:ba:10:f6:b8:
5d:0f:42:c5:73:6b:1a:78:17:23:2b:96:6a:9c:48:5f:a8:f0:
ce:94:97:75:26:a5:2d:c8:22:c1:96:48:89:84:ed:9f:21:2f:
e2:c1:af:f2:7c:c2:9b:95:8b:cf:a1:d4:23:d7:78:c3:33:b6:
f3:e1:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:06 2026 by rpki-client