
$ rpki-client -vvf rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa
File: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (raw, json)
Hash identifier: 8nfqVf8K62If0oVwSrWfcY/25sPP59HiQxAYVsP0CsI=
Subject key identifier: 32:5B:73:3D:A7:8D:D3:23:B0:ED:51:48:EC:B4:8A:09:4A:BB:C6:AB
Certificate issuer: /CN=51D2872389FAB3963625D56D9C53751581B4095A
Certificate serial: 39B0951CC45C5CB3A538358028690C8065ED69D8
Authority key identifier: 51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa
Signing time: Sun 03 May 2026 02:28:44 +0000
ROA not before: Sun 03 May 2026 02:23:44 +0000
ROA not after: Sun 02 May 2027 02:28:44 +0000
asID: 59133
IP address blocks: 103.243.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b0:95:1c:c4:5c:5c:b3:a5:38:35:80:28:69:0c:80:65:ed:69:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51D2872389FAB3963625D56D9C53751581B4095A
Validity
Not Before: May 3 02:23:44 2026 GMT
Not After : May 2 02:28:44 2027 GMT
Subject: CN=325B733DA78DD323B0ED5148ECB48A094ABBC6AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:46:44:b0:fc:06:02:43:d3:65:3f:67:8c:
35:d2:00:c9:25:14:26:c5:03:46:60:99:ca:67:4c:
60:d9:9e:77:0f:c9:d6:ca:03:24:82:36:69:bd:91:
c4:74:25:3c:02:37:d2:bd:8a:82:71:64:9a:14:77:
32:9d:50:52:e3:de:3a:51:aa:8d:20:92:40:f0:0d:
70:42:cc:cb:78:af:59:ad:0f:88:2f:73:8e:a8:31:
12:07:f7:a4:90:eb:19:ca:35:60:04:63:19:11:47:
0f:c6:0d:14:ea:0b:62:8d:44:dd:70:e9:8f:8a:12:
4d:ff:1b:9d:4b:0a:42:24:08:a2:99:47:e5:12:2f:
cd:d6:98:9b:b4:f8:34:ad:40:e9:44:19:cc:f3:be:
4f:b0:c3:92:0d:81:d6:74:66:95:4b:ac:f6:97:de:
0b:3d:b5:fc:fa:95:32:20:8c:1c:e1:5b:5a:a7:a4:
1b:a3:6f:04:25:7b:2f:32:64:a5:94:d8:02:3a:ac:
ab:e0:67:e7:82:46:af:75:dd:6c:77:86:b2:46:ac:
2e:62:02:94:f5:96:a3:62:33:07:a8:8a:d7:d7:6f:
ac:af:8e:94:41:b7:4f:a7:a5:ee:eb:c6:41:e3:ee:
8a:62:26:15:12:28:4f:ea:9b:f0:52:9f:90:42:f9:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:73:3D:A7:8D:D3:23:B0:ED:51:48:EC:B4:8A:09:4A:BB:C6:AB
X509v3 Authority Key Identifier:
keyid:51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.243.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:68:ce:3c:33:32:9c:41:b3:6c:62:ec:5c:fd:31:dc:37:93:
01:0c:49:f3:65:9a:91:97:62:fd:97:eb:b5:d6:e6:e8:2a:12:
a7:48:d5:cf:0f:99:bd:91:ae:2b:97:a1:09:eb:65:e7:c8:e1:
15:48:4c:78:2b:24:ca:98:e2:bc:02:aa:24:b1:fd:f7:49:4e:
76:a7:60:85:ec:88:87:37:6c:9e:47:12:a9:4c:f8:3c:4f:fa:
bc:9e:4b:f2:03:60:41:8f:f3:2d:0c:1b:ab:80:e9:fc:55:85:
ac:d9:29:92:b2:31:2f:b1:0e:2a:bc:5d:29:67:56:88:ac:e6:
c2:d7:54:d7:ca:66:13:b0:8b:81:c6:11:d0:7c:b9:87:19:91:
75:d6:ce:58:f1:cb:36:ee:eb:3d:10:05:c1:39:6d:85:ce:7a:
70:83:5b:44:b4:36:4b:4a:21:bd:eb:1e:c6:66:7d:f7:5f:b3:
c7:54:d0:bd:55:11:c2:89:22:48:2f:09:12:77:81:af:86:fa:
69:03:8c:ca:e7:4a:d2:c6:d9:8e:26:af:d6:18:ca:d3:36:15:
fa:98:29:67:e1:6e:09:1a:3e:51:84:0c:d9:e3:42:c7:43:f3:
a1:af:85:73:c5:f8:28:b2:2d:c9:56:5f:4f:79:f4:33:08:cc:
d3:80:1b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:40 2026 by rpki-client