
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
File: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (raw, json)
Hash identifier: Pjcq1aEQLmtD50fhFvIOCakEkEs1luIZ8COzqjoSFhE=
Subject key identifier: 7F:C6:4D:D4:30:6B:45:B6:80:7E:C4:6C:F5:2A:48:C1:D3:84:BC:A4
Certificate issuer: /CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01
Certificate serial: 5F28A3C70310430CF58E25572660E5DB700E998E
Authority key identifier: 5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
Signing time: Sun 03 May 2026 02:28:31 +0000
ROA not before: Sun 03 May 2026 02:23:31 +0000
ROA not after: Sun 02 May 2027 02:28:31 +0000
asID: 150274
IP address blocks: 103.39.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl
rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:28:a3:c7:03:10:43:0c:f5:8e:25:57:26:60:e5:db:70:0e:99:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01
Validity
Not Before: May 3 02:23:31 2026 GMT
Not After : May 2 02:28:31 2027 GMT
Subject: CN=7FC64DD4306B45B6807EC46CF52A48C1D384BCA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:15:a6:81:48:88:27:3c:94:02:92:7d:89:
46:f5:19:95:4c:6d:b3:80:e9:a1:2d:44:d8:5e:35:
97:92:ee:92:ae:38:bd:4b:ea:f7:18:b9:d4:83:a3:
fb:e9:98:87:9d:47:22:3f:98:d4:a2:7d:7e:91:77:
ea:38:de:44:84:27:5d:5e:e4:c8:7c:54:70:bf:c2:
17:41:04:1c:58:e3:ae:cb:c2:59:85:c0:ee:03:13:
55:f6:08:10:9c:9b:b6:3c:02:f4:da:e2:ac:8b:23:
32:2e:44:40:d7:ea:c5:c0:a0:05:88:16:30:9e:e3:
d6:0a:d4:0c:c3:83:1b:5e:e3:7d:9f:c8:6a:8b:dd:
f0:8e:ad:fb:bd:4c:30:55:3d:05:58:35:d6:19:b3:
37:00:66:1d:11:d5:e8:20:e1:bd:3e:94:52:bb:de:
20:8b:6c:e5:bf:54:6f:da:27:8e:8a:f5:d7:9d:af:
50:dd:c4:79:d2:47:18:90:33:7b:33:05:78:9f:44:
6d:a2:d0:be:09:01:f6:74:03:6d:37:06:42:0f:e8:
72:f8:56:4a:55:1d:e2:e3:62:88:92:c6:d2:6d:50:
ed:46:93:3b:e9:a3:e9:90:76:76:6a:81:1c:03:8f:
a7:fa:06:c4:63:f4:f1:5a:5b:30:55:b6:8a:59:d4:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C6:4D:D4:30:6B:45:B6:80:7E:C4:6C:F5:2A:48:C1:D3:84:BC:A4
X509v3 Authority Key Identifier:
keyid:5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:63:c3:73:ee:6f:91:ee:23:41:c4:cb:ff:8d:91:30:77:79:
0d:14:f3:50:25:f4:0e:a3:ed:2b:5a:35:ff:cf:3a:b7:ee:b4:
ee:60:8c:0b:49:e6:e7:8c:e1:34:64:da:95:3c:01:97:a3:a5:
31:db:fc:78:09:ac:99:0a:c3:e2:66:fd:c5:4c:c6:73:61:95:
3f:8a:99:c5:59:5d:95:28:7c:ed:0a:20:da:2e:0e:91:2d:35:
f8:9e:87:ad:94:fc:59:b2:05:06:6d:73:98:fa:cf:4a:50:bc:
e5:c2:2c:55:e4:00:31:31:5f:68:99:fc:26:58:8d:01:41:86:
ea:50:8f:9a:ce:fe:de:f9:63:12:18:aa:98:60:61:70:76:a2:
25:a6:b2:46:77:cb:ae:48:6e:be:eb:13:dc:12:3b:1e:a7:b7:
31:a6:4c:14:b2:4e:fb:e2:72:12:18:d9:3c:e9:40:80:fc:82:
02:f1:4b:3e:57:ec:9c:39:99:89:4f:8c:b0:fd:8a:f3:40:a1:
e2:17:b8:96:e8:58:bd:de:6d:b8:ed:3c:e7:53:62:84:f8:4c:
b2:11:0c:a6:ff:cb:38:11:c0:0d:cd:d6:f4:3a:1e:6f:8a:e6:
c4:c2:85:56:d2:e4:09:a1:36:db:eb:b8:6e:93:86:cd:77:52:
2f:b5:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:26 2026 by rpki-client