
$ rpki-client -vvf rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa
File: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (raw, json)
Hash identifier: VL+yGGs45eeKxi6k75PI3vnPXDk9Qwklp2W/skU92Zw=
Subject key identifier: D5:C4:48:D1:76:BE:CC:C4:6B:DD:FF:EC:5F:D2:E5:C4:A8:EB:4A:04
Certificate issuer: /CN=1072303E63837C5CAD6D6208D064394F85518DC3
Certificate serial: 230CD7A0D4EA4CA764F0F1AEF8C055992F5A3C0C
Authority key identifier: 10:72:30:3E:63:83:7C:5C:AD:6D:62:08:D0:64:39:4F:85:51:8D:C3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa
Signing time: Sun 03 May 2026 02:21:17 +0000
ROA not before: Sun 03 May 2026 02:16:17 +0000
ROA not after: Sun 02 May 2027 02:21:17 +0000
asID: 149388
IP address blocks: 103.181.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.crl
rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:0c:d7:a0:d4:ea:4c:a7:64:f0:f1:ae:f8:c0:55:99:2f:5a:3c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1072303E63837C5CAD6D6208D064394F85518DC3
Validity
Not Before: May 3 02:16:17 2026 GMT
Not After : May 2 02:21:17 2027 GMT
Subject: CN=D5C448D176BECCC46BDDFFEC5FD2E5C4A8EB4A04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:4c:3f:cc:5d:f4:8f:50:d7:29:be:38:53:
0d:94:13:1d:35:b8:59:6c:ec:3c:d4:0f:8e:8a:67:
1a:b8:95:1a:ec:a9:d2:5f:3c:9b:bb:e3:e1:5e:60:
ea:a0:67:32:fe:e9:df:2c:90:22:e8:06:4a:68:90:
4e:5c:f1:42:95:12:ba:26:01:96:1b:e9:cc:3e:ab:
4e:5d:30:2d:24:09:3d:91:ce:96:3e:f6:69:1a:29:
e3:a4:89:c3:ff:f7:d0:71:1d:2e:15:29:20:d8:e2:
72:9d:0e:e1:5e:85:10:de:b6:31:ab:78:30:ad:d6:
23:31:ef:36:f1:a7:29:a1:49:24:c8:62:60:63:9f:
17:e8:35:99:37:c6:1c:01:73:da:0f:c2:4c:94:25:
2a:b7:e6:c1:63:67:88:3c:77:55:97:90:b3:36:77:
86:ef:07:f3:5b:b3:f6:8f:75:94:f8:cb:b2:ad:b3:
5c:86:d7:38:bd:02:0c:38:7d:27:fd:f5:28:d4:c2:
8b:a2:3b:42:43:5f:e1:66:92:55:3d:3e:ce:23:78:
5b:5c:bc:ad:fc:0d:d1:b5:5f:24:2a:e2:d8:6e:32:
bd:71:01:21:99:f2:ef:a3:fc:1c:cd:f4:c9:4a:15:
e2:8a:b6:1d:4e:55:a1:66:1e:6d:13:c0:4a:78:98:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C4:48:D1:76:BE:CC:C4:6B:DD:FF:EC:5F:D2:E5:C4:A8:EB:4A:04
X509v3 Authority Key Identifier:
keyid:10:72:30:3E:63:83:7C:5C:AD:6D:62:08:D0:64:39:4F:85:51:8D:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.252.0/23
Signature Algorithm: sha256WithRSAEncryption
18:5d:90:d5:0f:63:2c:c6:39:6b:96:dd:b8:01:6c:f1:fb:60:
bd:4c:a1:fc:b2:f2:05:eb:3e:f7:93:2a:b9:62:6a:e1:2e:47:
b1:d2:f0:2a:69:9b:8e:78:98:21:aa:78:bf:cf:d6:22:eb:f1:
f6:00:ad:59:90:62:9e:75:6e:28:6b:4c:37:76:14:a0:38:5d:
81:9f:f0:b5:b9:b0:ff:40:dc:0c:cc:54:6a:37:59:bb:8f:3e:
02:14:60:31:fc:67:ae:ac:d6:19:93:01:63:ca:2c:58:a6:f5:
07:f7:17:52:39:62:10:43:8b:93:fc:4e:7f:0f:1b:d1:89:ea:
e0:69:c8:d9:5d:03:b3:3e:16:2a:30:70:fb:77:82:c3:a8:cf:
26:52:d3:ec:12:38:f9:9d:d9:88:d4:7c:49:1c:0d:55:0e:5d:
ca:90:be:66:20:ef:13:97:83:c4:9b:cd:8b:f8:64:1f:51:79:
9d:17:d7:cc:03:bf:54:cd:e4:b7:aa:55:ee:20:3a:e2:aa:07:
0c:f2:a5:b9:50:8f:47:b4:1c:ae:e7:8c:48:ed:6b:d9:b3:34:
d0:74:32:75:ec:23:18:d3:27:e6:3f:78:f4:f4:a3:44:f6:59:
89:31:ad:77:8b:91:a4:53:e5:b3:c0:78:93:68:86:64:2e:48:
64:81:e8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:43 2026 by rpki-client