
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/3130332e37312e32352e302f32342d3234203d3e20313530323333.roa
File: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (raw, json)
Hash identifier: Yu7TLcR1tuusuhDSrYnM4of9BN5qOWkNLvH5+MvtCeE=
Subject key identifier: D8:7C:40:9E:3F:37:16:FE:41:52:D4:F8:57:86:F3:56:79:C7:50:C7
Certificate issuer: /CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED
Certificate serial: 0575245E1A9818B52392D3E860D856F8A21C1DEE
Authority key identifier: 2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/3130332e37312e32352e302f32342d3234203d3e20313530323333.roa
Signing time: Sun 03 May 2026 02:27:43 +0000
ROA not before: Sun 03 May 2026 02:22:43 +0000
ROA not after: Sun 02 May 2027 02:27:43 +0000
asID: 150233
IP address blocks: 103.71.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl
rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:75:24:5e:1a:98:18:b5:23:92:d3:e8:60:d8:56:f8:a2:1c:1d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED
Validity
Not Before: May 3 02:22:43 2026 GMT
Not After : May 2 02:27:43 2027 GMT
Subject: CN=D87C409E3F3716FE4152D4F85786F35679C750C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:1e:55:46:a2:f2:09:7c:ed:ea:36:d2:13:
ac:15:e8:5c:d9:b8:eb:36:04:1b:16:45:0e:70:49:
53:9f:a0:88:37:4a:c7:99:3d:bb:1b:e9:73:fb:39:
79:81:0c:59:2d:47:7a:4f:d0:1c:ff:78:b2:b4:69:
bf:1e:b7:f9:3a:72:66:8b:d6:d4:33:9e:60:8a:5f:
b7:a2:65:4a:db:6b:cc:68:63:d2:e0:79:e7:56:ae:
58:f6:30:2b:d9:b5:7f:15:57:ab:c5:ba:54:10:49:
19:60:c3:a4:31:13:09:9c:73:d4:e7:35:e4:c4:85:
86:51:2b:65:75:7d:91:2c:97:b3:95:24:fd:51:62:
e0:ec:c9:c4:fd:e5:21:41:28:fb:e0:08:d5:36:ae:
b1:8d:6b:3d:0a:37:c5:b1:60:46:6b:d1:b8:a7:86:
29:b0:df:b4:3e:19:86:85:72:1a:4b:82:b5:6d:f7:
83:53:8c:02:c0:3a:e7:3a:4f:1f:0a:5e:6f:b9:d0:
9f:02:b6:a0:2f:13:77:de:8e:ff:9d:9e:71:2c:25:
e3:92:e6:3f:92:49:55:02:71:8e:1f:3e:b6:23:88:
6f:54:81:c2:d5:6e:b0:85:37:8c:3a:21:a2:24:9b:
e5:af:4d:ee:9b:e3:50:ea:50:40:e7:d7:45:1b:96:
e3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7C:40:9E:3F:37:16:FE:41:52:D4:F8:57:86:F3:56:79:C7:50:C7
X509v3 Authority Key Identifier:
keyid:2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/3130332e37312e32352e302f32342d3234203d3e20313530323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.25.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c2:fc:cb:8a:9e:cd:84:c9:f9:82:2d:81:c4:b4:9e:9a:8b:
6c:c3:31:3a:68:ee:5d:11:35:ff:55:a4:50:ca:6c:16:3d:71:
62:b2:9f:87:4d:7c:95:80:d8:70:79:b1:94:25:39:9d:b3:94:
ab:dd:a7:d2:3c:dc:c0:c6:b8:8d:1d:50:cf:85:1a:c2:51:17:
cb:ba:c8:8d:28:8f:04:d1:48:03:1a:fb:1e:60:e9:46:f0:bb:
df:d7:ab:50:86:d3:8b:48:56:7a:3f:86:84:c5:b1:5b:23:80:
9e:6b:40:9f:eb:6d:60:7b:5e:f2:74:ad:d1:44:1b:19:fd:97:
e7:da:60:06:2e:9e:93:68:0c:dd:c5:7f:3d:3e:99:bf:36:81:
0c:c2:12:f2:86:e8:69:03:70:2a:1b:0d:9d:1e:ac:12:3e:27:
ff:06:7d:67:a5:92:4a:0d:0d:de:04:14:3a:bf:d0:bf:40:65:
38:ba:4e:3b:2f:b5:77:42:28:72:65:fa:29:56:19:bb:4c:e5:
09:00:f5:7b:dd:cb:c7:48:f8:89:b8:41:09:b0:d9:6b:c1:79:
40:60:4f:60:a5:e5:ce:04:31:72:96:eb:55:ef:4b:c0:7d:62:
22:e9:91:58:e3:21:aa:5d:1d:1c:16:17:fc:87:a4:5f:8f:5b:
52:ce:3f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:44 2026 by rpki-client