
$ rpki-client -vvf rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa
File: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (raw, json)
Hash identifier: GheubIEbC2RH3FMbulGJZm2AS1TBwHys9ZC8vY6htKI=
Subject key identifier: C4:45:D6:0A:D1:DF:D7:95:C4:D1:E1:6A:59:D1:A6:E1:00:0A:8F:3C
Certificate issuer: /CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB
Certificate serial: 6CAF7E3EDC4F06523518E6F5763E3F5BE8B82A9E
Authority key identifier: 5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa
Signing time: Sun 03 May 2026 02:26:01 +0000
ROA not before: Sun 03 May 2026 02:21:01 +0000
ROA not after: Sun 02 May 2027 02:26:01 +0000
asID: 149913
IP address blocks: 103.191.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl
rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:af:7e:3e:dc:4f:06:52:35:18:e6:f5:76:3e:3f:5b:e8:b8:2a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB
Validity
Not Before: May 3 02:21:01 2026 GMT
Not After : May 2 02:26:01 2027 GMT
Subject: CN=C445D60AD1DFD795C4D1E16A59D1A6E1000A8F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:58:0f:ee:66:98:71:77:d3:1b:c4:09:36:
73:ab:55:b5:54:21:e6:38:7f:60:07:c8:43:2f:95:
f2:11:8e:91:6d:f2:78:a0:f2:a7:7c:a5:aa:73:a5:
19:69:ef:8e:da:99:58:5b:0e:5b:bc:c2:38:81:a7:
dd:cc:d9:c7:30:10:82:d5:8c:0f:e6:20:78:41:ad:
99:c8:89:38:ee:09:a8:3a:08:5e:b4:8c:20:4e:6f:
9e:ae:9c:0f:39:03:c3:d4:af:f0:e3:4e:59:eb:a1:
7a:a0:ba:6f:24:c7:13:98:03:f2:11:19:2c:82:c7:
e4:01:76:16:57:95:f9:ed:91:9d:e4:c8:e9:ea:13:
44:10:56:90:cb:8c:30:36:f3:d4:e8:d5:c9:31:0e:
ce:45:33:39:27:0c:71:21:6e:75:f6:ff:69:c5:03:
c9:2d:c5:37:f0:a9:68:81:07:32:b9:41:4f:5f:a8:
e1:7a:bd:45:b3:57:ff:55:48:e2:49:36:d3:7e:55:
fb:94:f6:4b:38:10:46:94:9f:17:5f:d5:76:02:b4:
e0:bf:45:9c:91:28:91:4a:ad:b8:06:74:cc:70:9e:
78:c3:65:bd:ce:f2:2c:03:8c:9e:60:f2:c1:54:39:
e6:3b:47:2f:b4:54:28:5d:33:2a:40:ce:a3:15:ae:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:D6:0A:D1:DF:D7:95:C4:D1:E1:6A:59:D1:A6:E1:00:0A:8F:3C
X509v3 Authority Key Identifier:
keyid:5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.54.0/24
Signature Algorithm: sha256WithRSAEncryption
84:20:b3:b2:a3:78:41:5c:e1:3e:e2:d6:48:32:52:8a:bd:ab:
77:5d:2a:76:0f:4d:9c:51:33:ca:a8:b9:ff:fd:0f:38:00:98:
28:28:72:ce:85:7b:c6:05:c5:13:37:9c:e1:ba:f6:01:8f:0c:
97:9e:cd:99:92:3d:5e:fb:04:46:84:98:8f:8d:cd:0d:10:06:
f9:a0:77:6d:b3:d0:ee:03:f2:7f:08:e1:68:40:46:00:47:a3:
36:d2:85:0e:03:fa:e7:76:17:29:7a:da:7c:4e:41:b3:d6:59:
70:8f:80:1c:a0:19:c2:57:3c:cf:84:51:01:26:de:e4:40:c7:
18:51:01:c8:46:bf:a4:33:90:a1:9d:b0:6f:70:b5:93:e1:bf:
0a:c4:70:90:24:98:b7:82:77:4d:1a:c3:ba:9d:99:58:21:c9:
33:ed:7c:57:b6:54:42:39:08:20:9d:a1:6d:db:c9:83:68:59:
4a:1d:33:db:21:84:15:08:cb:c2:32:61:4a:8e:f3:e6:c9:ff:
39:9c:0d:7b:34:14:a5:74:b1:76:d5:90:b8:90:61:43:de:36:
c4:dd:9f:fb:8d:43:da:5d:54:d2:a7:f1:9e:ef:84:9b:15:ad:
fc:d4:67:d9:0f:36:43:da:f8:97:d8:29:5c:b7:9e:c1:e8:a5:
99:7b:46:2c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbK9+PtxPBlI1GOb1dj4/W+i4Kp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5
QkY4MzFDQjAeFw0yNjA1MDMwMjIxMDFaFw0yNzA1MDIwMjI2MDFaMDMxMTAvBgNV
BAMTKEM0NDVENjBBRDFERkQ3OTVDNEQxRTE2QTU5RDFBNkUxMDAwQThGM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1v1gP7maYcXfTG8QJNnOrVbVU
IeY4f2AHyEMvlfIRjpFt8nig8qd8papzpRlp747amVhbDlu8wjiBp93M2ccwEILV
jA/mIHhBrZnIiTjuCag6CF60jCBOb56unA85A8PUr/DjTlnroXqgum8kxxOYA/IR
GSyCx+QBdhZXlfntkZ3kyOnqE0QQVpDLjDA289To1ckxDs5FMzknDHEhbnX2/2nF
A8ktxTfwqWiBBzK5QU9fqOF6vUWzV/9VSOJJNtN+VfuU9ks4EEaUnxdf1XYCtOC/
RZyRKJFKrbgGdMxwnnjDZb3O8iwDjJ5g8sFUOeY7Ry+0VChdMypAzqMVrtoPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUxEXWCtHf15XE0eFqWdGm4QAKjzwwHwYDVR0j
BBgwFoAUXiXnXq0U+5yHd3XPpcdoyZv4McswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mzg2ZDZiYTEtMWY3My00Nzc2LThhNmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVB
RDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5QkY4MzFDQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RTI1RTc1RUFEMTRGQjlDODc3Nzc1Q0ZBNUM3NjhDOTlCRjgz
MUNCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM4NmQ2YmExLTFmNzMtNDc3Ni04
YTZhLTRmNDUxMjA3OTJiMS8wLzMxMzAzMzJlMzEzOTMxMmUzNTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ782MA0GCSqG
SIb3DQEBCwUAA4IBAQCEILOyo3hBXOE+4tZIMlKKvat3XSp2D02cUTPKqLn//Q84
AJgoKHLOhXvGBcUTN5zhuvYBjwyXns2Zkj1e+wRGhJiPjc0NEAb5oHdts9DuA/J/
COFoQEYAR6M20oUOA/rndhcpetp8TkGz1llwj4AcoBnCVzzPhFEBJt7kQMcYUQHI
Rr+kM5ChnbBvcLWT4b8KxHCQJJi3gndNGsO6nZlYIckz7XxXtlRCOQggnaFt28mD
aFlKHTPbIYQVCMvCMmFKjvPmyf85nA17NBSldLF21ZC4kGFD3jbE3Z/7jUPaXVTS
p/Ge74SbFa381GfZDzZD2viX2Clct57B6KWZe0Ys
-----END CERTIFICATE-----
Generated at Wed May 13 09:27:26 2026 by rpki-client