
$ rpki-client -vvf rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa
File: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (raw, json)
Hash identifier: g1g7MtGRy5qSqIwWinTtOXc9I8nzo7Y/GPnyXI8unxU=
Subject key identifier: F1:FD:E1:33:D0:6C:F2:5C:A4:6B:09:4E:27:31:58:19:74:84:47:09
Certificate issuer: /CN=51D2872389FAB3963625D56D9C53751581B4095A
Certificate serial: 31919C818D7465350D67002CA8E080B331487250
Authority key identifier: 51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa
Signing time: Sun 03 May 2026 02:28:44 +0000
ROA not before: Sun 03 May 2026 02:23:44 +0000
ROA not after: Sun 02 May 2027 02:28:44 +0000
asID: 59133
IP address blocks: 103.43.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:91:9c:81:8d:74:65:35:0d:67:00:2c:a8:e0:80:b3:31:48:72:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51D2872389FAB3963625D56D9C53751581B4095A
Validity
Not Before: May 3 02:23:44 2026 GMT
Not After : May 2 02:28:44 2027 GMT
Subject: CN=F1FDE133D06CF25CA46B094E2731581974844709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:7b:39:4e:65:c3:2a:42:25:53:38:41:1f:
cf:10:a9:c4:d8:57:13:98:5f:72:ec:6a:b5:46:27:
f3:d0:46:7f:7e:7b:7f:3a:a5:ef:46:c3:35:c2:cf:
4b:12:b0:26:a3:ec:8c:f6:1e:83:ac:de:ab:69:5c:
ac:57:f8:8c:dd:1a:b3:45:6a:7e:eb:f3:04:49:0c:
9a:40:1b:65:c6:ac:db:30:2e:5c:3d:1d:8d:1f:0d:
c0:ba:0c:76:7b:36:87:37:54:06:2c:39:7b:74:d5:
00:04:6f:4b:9b:9c:d9:7c:5c:5a:6c:36:c1:c4:b2:
ce:db:5e:f5:dc:90:b6:d5:b1:99:21:ce:1d:47:87:
84:f6:51:a0:77:54:95:dd:a9:32:6b:96:e4:d8:7d:
59:36:df:50:f7:cb:e7:2c:0c:54:24:fc:0b:33:5e:
bf:4c:72:c6:bd:0d:16:b3:32:d9:7f:7e:74:0e:40:
b3:0c:a9:cf:6b:e7:4a:c0:70:45:2f:0c:f9:fa:f7:
2c:cf:a3:4e:ca:5f:7a:64:25:44:70:fb:87:43:e7:
f6:38:28:74:5a:22:cd:d8:97:91:8d:55:47:35:d0:
2d:46:66:83:b7:ff:1f:b6:f3:e8:c9:cf:1f:d4:f9:
2d:4a:23:26:1b:7d:09:3c:f2:97:16:f9:ae:fd:c4:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FD:E1:33:D0:6C:F2:5C:A4:6B:09:4E:27:31:58:19:74:84:47:09
X509v3 Authority Key Identifier:
keyid:51:D2:87:23:89:FA:B3:96:36:25:D5:6D:9C:53:75:15:81:B4:09:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/51D2872389FAB3963625D56D9C53751581B4095A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51D2872389FAB3963625D56D9C53751581B4095A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.1.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:66:0d:32:b6:33:3e:18:27:1e:27:8c:1d:83:a2:7f:f3:77:
9a:51:53:d2:1c:ce:05:50:19:a2:84:78:80:3f:e9:04:fe:1d:
94:8a:ca:99:bb:bf:c9:a0:05:73:89:05:e3:1b:07:39:d4:b0:
cb:f1:17:80:a3:c5:3c:66:4c:7a:9c:1c:90:f5:bd:f0:ec:56:
c6:6a:ee:2e:3d:44:67:0d:d6:86:47:52:85:1e:fc:5b:ba:cf:
c5:d1:e4:64:4c:7b:89:53:56:55:5c:67:3a:ca:3e:04:dd:70:
21:32:50:d6:b4:06:cb:b9:2d:ce:21:d3:4b:bc:82:7e:47:72:
ec:17:03:42:43:9e:6f:aa:43:28:c4:06:66:88:79:c4:dc:19:
6c:e0:86:8a:ec:cf:cb:ce:21:46:43:6b:36:f2:c3:99:0a:fb:
d3:47:1e:1b:60:f6:78:54:3a:fc:3e:ae:f4:ce:24:e8:eb:f7:
b4:18:9c:6a:7a:0e:6c:d9:3d:89:73:31:d6:52:fb:cc:c9:c8:
e8:64:70:d0:0e:fc:44:53:19:3e:c8:0d:bb:d0:5f:51:6e:14:
2c:be:08:7a:48:d8:03:06:9d:d7:eb:6b:63:65:d0:52:eb:fb:
57:36:58:d1:ea:66:95:60:b7:b9:fc:b8:7e:19:88:79:f8:32:
78:e2:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:58 2026 by rpki-client