
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39392e302f32342d3234203d3e20313530343639.roa
File: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (raw, json)
Hash identifier: KO5msUjW/HADSpbcbiZqt5Rho/bq6n0Bk1hJW/E0KBc=
Subject key identifier: 0A:30:8F:AB:6A:DD:86:DF:D4:06:4D:FD:E3:65:4A:8A:5F:9B:D8:6F
Certificate issuer: /CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3
Certificate serial: 1A754E4CFA6F4068E76A21BC317A6832156EF6D3
Authority key identifier: 1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39392e302f32342d3234203d3e20313530343639.roa
Signing time: Sun 03 May 2026 02:23:23 +0000
ROA not before: Sun 03 May 2026 02:18:23 +0000
ROA not after: Sun 02 May 2027 02:23:23 +0000
asID: 150469
IP address blocks: 103.51.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl
rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:75:4e:4c:fa:6f:40:68:e7:6a:21:bc:31:7a:68:32:15:6e:f6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3
Validity
Not Before: May 3 02:18:23 2026 GMT
Not After : May 2 02:23:23 2027 GMT
Subject: CN=0A308FAB6ADD86DFD4064DFDE3654A8A5F9BD86F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:56:0e:54:c0:0c:96:e0:eb:c9:cc:4d:ed:
36:92:0e:96:e4:da:8d:36:83:6d:31:be:0b:28:19:
19:c9:b9:92:95:78:d8:d3:87:f4:d6:e8:8f:89:50:
60:08:72:9c:17:37:b8:ac:16:a0:74:5f:ec:fe:9f:
65:1c:89:0d:07:c6:df:e5:cf:98:44:36:bf:ec:db:
b9:97:27:a0:0a:90:6f:c7:9b:9b:ad:54:05:95:b5:
73:6f:49:b2:92:b2:e8:1c:6d:3c:0a:18:8d:16:fb:
34:94:b3:ce:01:15:f1:42:f5:35:0d:01:e0:b4:d1:
92:c1:82:9f:16:3c:8b:ce:5a:0c:a6:60:9a:ae:cd:
76:c2:a5:88:56:7c:ef:c7:65:0e:a9:a5:41:b6:84:
8f:66:81:a9:13:7a:7d:cd:59:eb:20:e9:d1:01:0d:
ee:63:5f:16:0c:9e:c9:3a:7c:88:58:c4:04:b5:f2:
e3:35:f5:ac:91:7d:d8:ff:69:ec:88:ff:a1:a7:22:
5d:ef:8d:1c:c0:05:51:71:a6:96:dd:00:bd:90:fa:
6d:f7:0e:ab:8e:ed:32:5b:e8:47:9a:f9:24:81:27:
94:0b:8d:fe:9c:b6:fe:98:02:2f:e7:fe:c5:f3:51:
3b:39:82:d4:ba:ff:b0:76:21:aa:ed:c8:10:f5:ed:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:30:8F:AB:6A:DD:86:DF:D4:06:4D:FD:E3:65:4A:8A:5F:9B:D8:6F
X509v3 Authority Key Identifier:
keyid:1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39392e302f32342d3234203d3e20313530343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.51.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e0:59:15:ed:e1:01:7c:c6:bc:18:eb:3d:5c:54:0b:63:b1:
a2:be:e2:44:e9:33:15:3d:8f:4e:5d:47:5b:af:31:cb:d7:4e:
b7:7c:f4:82:6b:ba:9f:0a:80:78:ec:78:17:62:82:69:9d:d2:
8a:23:a1:49:fc:b0:ab:7b:19:0d:c8:d4:7e:ec:1a:f8:45:6f:
5d:0a:cc:eb:9f:ad:57:b5:5c:94:7c:d0:59:6a:83:2e:94:de:
0c:14:bd:84:33:31:2b:3b:ce:eb:ce:63:cb:2f:7c:df:7f:cc:
27:c5:62:60:2a:c0:50:cc:11:ba:69:c4:c8:ba:69:6f:5f:df:
6f:ab:18:ef:0a:a0:ef:2b:22:dd:5e:b4:fd:a4:02:5c:31:c3:
03:20:49:8d:b8:a4:e1:0b:0f:55:2f:e7:4e:c2:bf:5c:2c:22:
f3:8e:87:9f:79:be:52:2e:1c:e1:0c:40:b4:6c:70:6b:63:3b:
14:dc:ed:e9:00:34:b3:2a:97:9c:07:88:23:b8:99:1c:23:48:
70:2e:94:b8:77:42:f7:82:3c:05:24:37:c4:e1:7e:0d:08:f6:
cc:c2:76:af:83:11:98:ff:9a:f0:e2:3e:c6:7a:e1:82:2b:d0:
f9:5a:96:a2:fa:af:6a:92:7f:6f:8b:39:47:e7:8e:0f:d0:54:
fd:ba:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:26 2026 by rpki-client