
$ rpki-client -vvf rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa
File: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier: hmULjlvlGETEEONRtMrj0kFaR1mcxnKV/sZv1gIWDTE=
Subject key identifier: 30:24:6C:A7:D1:00:72:F7:61:D1:F7:D5:9A:D0:06:3A:BF:50:E2:C9
Certificate issuer: /CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02
Certificate serial: 77F801F5FAB75CB8CF970A65BB7125436FB72AE1
Authority key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa
Signing time: Sun 03 May 2026 02:25:50 +0000
ROA not before: Sun 03 May 2026 02:20:50 +0000
ROA not after: Sun 02 May 2027 02:25:50 +0000
asID: 138089
IP address blocks: 103.153.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl
rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f8:01:f5:fa:b7:5c:b8:cf:97:0a:65:bb:71:25:43:6f:b7:2a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02
Validity
Not Before: May 3 02:20:50 2026 GMT
Not After : May 2 02:25:50 2027 GMT
Subject: CN=30246CA7D10072F761D1F7D59AD0063ABF50E2C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:89:1e:11:49:06:c3:65:c8:99:3f:9a:a5:
b7:b3:89:7c:9e:86:23:bd:8c:76:bf:d1:7a:a9:e2:
ff:be:12:69:59:32:da:20:62:f6:70:e4:38:31:e6:
cc:40:cb:39:eb:c5:8a:a4:0d:e0:8d:e5:06:ed:29:
a0:e2:54:98:c5:19:33:c5:4a:05:ca:bf:6d:dc:d3:
fa:2a:fc:ba:a2:ee:bb:20:34:7d:31:38:83:6b:20:
f9:da:2a:05:6a:a3:34:a9:7a:f5:ae:3a:7d:ef:1f:
b5:ef:2c:d7:dd:19:79:de:a0:55:19:57:cf:4e:4f:
70:c4:f1:61:09:ae:4d:d1:ba:3c:5c:5f:de:91:e9:
f9:bb:fa:18:51:7c:1d:db:a0:f0:63:66:25:af:54:
d0:8d:ee:3f:c9:04:e4:e6:d2:6b:bc:b2:00:cd:cd:
80:a3:d5:4d:ff:d1:40:21:f7:1c:5c:86:89:7f:90:
45:23:07:19:76:60:95:db:69:5f:70:f1:82:ac:34:
2d:02:89:80:c6:ad:7e:07:b2:2b:ad:cf:ae:22:56:
f9:e7:6a:16:a3:30:6b:09:53:9f:ed:4c:15:51:cf:
5f:cb:f4:3a:52:d6:eb:d9:1c:c6:93:55:1c:39:1c:
e3:f7:70:01:37:b4:1a:35:d4:0d:51:36:f7:62:57:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:6C:A7:D1:00:72:F7:61:D1:F7:D5:9A:D0:06:3A:BF:50:E2:C9
X509v3 Authority Key Identifier:
keyid:45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4d:21:af:98:4b:df:ec:9a:02:70:5e:b5:17:4e:2a:d8:6a:
c2:05:5e:0f:b3:52:11:74:ad:7d:d9:36:97:17:a4:98:ab:73:
17:1d:23:d5:67:d5:a6:17:45:e0:44:d3:e3:91:4f:3f:06:7d:
5e:3d:91:65:2f:56:df:b8:aa:18:c5:2a:d8:57:bb:bb:af:cf:
02:ca:ee:89:a2:3e:31:a8:85:10:8f:a3:2f:da:40:2c:5c:47:
20:a5:f5:53:dd:73:39:49:b6:43:b9:79:72:72:40:39:b3:38:
0e:5c:24:d7:31:3f:45:6b:b3:78:66:79:b8:e6:ff:66:a2:45:
ea:b2:ed:3b:68:90:79:73:b0:30:8a:e4:6d:f9:66:d3:5e:d1:
84:16:86:51:e5:de:84:a3:eb:9c:5c:27:86:85:da:82:ae:e8:
37:93:d0:cc:5e:5a:ae:2b:2e:8b:40:4e:ef:da:c5:b9:9f:25:
ec:50:5f:0d:52:8c:f1:a9:b4:d4:c7:78:13:89:75:7d:08:23:
67:d7:0f:6e:ec:3a:ba:17:36:aa:bb:b1:dc:59:08:9e:87:ed:
a1:44:c9:7c:99:df:26:8f:8e:50:1c:f5:30:ec:d8:9c:48:e1:
b6:f9:f5:2f:ef:60:fb:7f:0b:c1:c1:b1:45:10:11:a8:63:3c:
e4:db:5d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:35 2026 by rpki-client