
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa
File: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (raw, json)
Hash identifier: zpN+ZUQARf85utjXtSfFSa/KkTvAdeU606KS8jCMD5U=
Subject key identifier: E7:2E:28:D8:B3:EB:83:D6:08:7E:61:13:62:0A:9C:53:6B:6B:41:7B
Certificate issuer: /CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4
Certificate serial: 5ADBD3BC4E9F03A8415120033EDA0FE8311F88A4
Authority key identifier: 7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa
Signing time: Sun 03 May 2026 02:27:37 +0000
ROA not before: Sun 03 May 2026 02:22:37 +0000
ROA not after: Sun 02 May 2027 02:27:37 +0000
asID: 151994
IP address blocks: 103.255.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl
rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:db:d3:bc:4e:9f:03:a8:41:51:20:03:3e:da:0f:e8:31:1f:88:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4
Validity
Not Before: May 3 02:22:37 2026 GMT
Not After : May 2 02:27:37 2027 GMT
Subject: CN=E72E28D8B3EB83D6087E6113620A9C536B6B417B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:d2:2f:c3:8e:68:53:a4:39:27:6c:86:5b:
4d:da:f5:b0:b6:78:91:0a:cc:85:ac:60:76:78:b5:
c0:35:61:ae:3b:59:ae:fa:02:1e:1a:d5:d2:d4:52:
19:7a:4a:97:fa:51:42:9e:fc:91:4c:d3:85:8b:8c:
8d:75:70:73:a7:30:79:cb:30:de:0a:9c:6c:cd:f4:
13:e8:4d:49:f3:c7:17:f7:43:25:54:af:fb:3f:9e:
6a:11:74:31:38:e4:38:58:f9:24:dd:ed:cb:d6:bb:
01:2d:46:8a:41:21:c8:93:9c:37:18:0c:df:78:77:
88:cf:e0:a1:66:6b:b1:bb:c2:ba:64:ca:db:a9:6b:
84:06:c8:81:78:c1:55:12:02:82:eb:d0:93:cc:80:
3a:ee:90:34:a4:32:2d:ab:4f:88:bb:68:19:b8:eb:
bb:bf:b4:b3:57:02:c3:e0:3f:61:d4:b2:3d:5d:42:
15:7b:63:9c:ba:5a:1c:a1:1c:a6:76:e6:b6:16:93:
88:f9:0a:15:43:53:93:46:87:af:ea:02:4f:02:69:
51:97:85:6a:74:4c:85:87:2f:7f:8b:17:5a:94:43:
e1:1d:66:d1:f5:b8:7a:88:a9:76:22:22:26:5e:e3:
3d:e2:84:0d:95:aa:96:73:9e:f1:7b:47:c0:23:75:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2E:28:D8:B3:EB:83:D6:08:7E:61:13:62:0A:9C:53:6B:6B:41:7B
X509v3 Authority Key Identifier:
keyid:7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.255.165.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5a:61:29:6f:b7:09:a5:55:6c:df:5f:fd:ac:ca:c8:28:c1:
39:4e:c5:5b:ae:74:d0:4d:5b:7c:73:36:a6:79:f1:85:27:43:
3d:5d:93:dd:8a:61:25:20:93:b8:96:32:0d:fb:e9:c4:aa:61:
54:28:4a:80:9c:ca:f0:2c:f4:b6:00:01:3c:ae:0f:86:7c:fa:
b0:45:44:5e:17:24:c6:3f:f9:46:1e:c7:35:84:1c:dd:95:c5:
f7:b6:17:9b:67:73:ee:5b:d8:28:01:3a:0e:78:da:92:40:83:
0c:46:12:55:f4:07:0c:e4:be:ee:36:8a:8a:66:7d:2b:e0:85:
ee:a0:86:14:a1:58:9d:8c:41:2c:17:f2:44:2b:45:c8:e2:23:
07:23:e1:95:ba:92:55:4a:76:ec:02:f9:3e:3e:f8:dd:21:86:
3f:6e:8f:8b:92:f0:73:c0:a5:54:fa:07:ed:1a:22:b8:bf:7a:
75:cb:91:9d:c1:6a:2f:7f:68:c9:84:ce:a5:71:e1:08:72:dd:
bf:e9:50:b0:60:1e:46:6b:e1:2a:6f:ee:f3:63:16:fb:95:84:
19:c2:d4:4f:f9:3d:8b:f2:99:87:be:ce:af:01:8f:91:35:75:
35:12:5f:60:78:a2:cd:f8:64:68:78:b9:81:11:93:b9:2b:05:
45:e0:c2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:42 2026 by rpki-client