
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa
File: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (raw, json)
Hash identifier: s1c5Xhjj1A4MpzLQqmtjwYb0lHUpDy9QxtX6cd6J7tw=
Subject key identifier: 96:49:B4:69:84:CB:E4:23:C4:5A:5D:AF:03:66:A2:6D:82:58:6B:3A
Certificate issuer: /CN=5ABFE157E467A6732384B658909A9764D5D88AEC
Certificate serial: 550FEBA8A90C9465A86C02482AA891EF8251C920
Authority key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa
Signing time: Sun 03 May 2026 02:22:03 +0000
ROA not before: Sun 03 May 2026 02:17:03 +0000
ROA not after: Sun 02 May 2027 02:22:03 +0000
asID: 149976
IP address blocks: 103.157.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl
rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:0f:eb:a8:a9:0c:94:65:a8:6c:02:48:2a:a8:91:ef:82:51:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ABFE157E467A6732384B658909A9764D5D88AEC
Validity
Not Before: May 3 02:17:03 2026 GMT
Not After : May 2 02:22:03 2027 GMT
Subject: CN=9649B46984CBE423C45A5DAF0366A26D82586B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:62:b8:06:25:bc:50:aa:4b:6e:a2:14:e1:
60:2f:6a:59:dd:50:05:6e:f6:bf:3f:f8:4d:c3:e7:
02:6f:c7:e4:25:dd:3e:b6:bf:31:f9:65:01:60:80:
40:14:c2:b0:1f:78:d1:f9:8f:2d:c3:a3:c8:02:a8:
82:42:e8:71:14:85:f2:c9:f4:18:ad:94:e4:3c:1a:
78:68:a9:9c:3b:17:4e:c4:54:72:bf:29:1f:fe:ee:
f0:8f:5a:59:fb:9d:1c:86:89:c0:e8:2b:4e:89:4d:
64:4d:9b:66:7f:d0:a7:a0:17:ad:b9:f4:a2:9b:51:
bd:80:2b:d2:fc:2c:c8:a2:b4:ca:38:5d:8d:a6:05:
a9:b0:de:57:53:99:4d:e0:d0:e9:3b:84:1e:7b:81:
fb:db:5b:55:a7:13:52:69:d4:90:17:d4:11:6e:a3:
ba:19:4e:33:69:3b:a9:03:fd:3d:ec:71:e3:6a:be:
df:3f:07:11:66:17:32:3c:24:b7:77:41:74:d3:a6:
01:64:56:5f:ea:c4:20:64:4a:84:2d:2e:d9:17:fc:
bc:5d:5e:ea:5c:96:0b:fa:73:b9:94:dd:29:37:ad:
97:83:91:b4:33:48:36:b7:0f:23:74:94:6a:d4:3f:
a3:fc:18:42:d2:94:b6:7e:f5:55:1f:e7:79:97:ec:
42:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:49:B4:69:84:CB:E4:23:C4:5A:5D:AF:03:66:A2:6D:82:58:6B:3A
X509v3 Authority Key Identifier:
keyid:5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.157.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f4:a0:1d:fd:e9:1a:14:16:07:bd:56:95:7d:6d:eb:fe:23:
e6:13:87:ad:9d:e8:8f:53:88:cb:e9:f6:05:f8:27:42:60:55:
b1:3a:9d:ce:0a:fa:a9:21:bd:b2:2f:c1:51:fc:dd:da:1f:0d:
55:f2:95:7b:77:9e:58:f7:ee:07:20:c6:0b:8c:fb:19:c3:e8:
64:51:95:d8:b4:35:7e:99:68:b3:5b:b3:67:c3:8a:36:69:0b:
fc:f2:62:ef:77:85:00:e2:65:8b:fd:27:94:d0:2f:f4:dc:7c:
08:98:33:49:e1:ec:c1:d1:95:03:eb:96:e1:db:90:f1:c5:9b:
70:14:e0:46:a5:3e:aa:96:7e:89:04:55:d4:46:08:1a:3d:9c:
16:5c:db:8e:bc:df:92:ec:7d:2c:82:d8:5e:a1:ea:9c:b6:08:
27:64:83:52:a9:01:cf:23:87:15:00:49:e2:b3:2a:51:fd:40:
d0:19:e5:e3:bc:8a:b8:91:44:33:b6:20:93:fe:9b:85:c8:1a:
37:34:02:15:ee:52:b8:84:ec:e2:97:8c:50:b4:0d:59:a6:22:
16:d9:d5:bf:39:eb:ba:f7:09:36:d8:0a:47:e2:0f:3d:ba:a0:
0f:99:21:67:a4:15:14:62:8e:97:2d:25:16:d6:c2:12:25:1d:
0a:e7:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:51 2026 by rpki-client