
$ rpki-client -vvf rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa
File: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (raw, json)
Hash identifier: BHukqw3OCwpT8gyX9jofbrVK6NJ8azV8C28UZNn4k40=
Subject key identifier: 98:C3:95:23:D8:5E:63:CB:5C:40:BC:D6:E7:D9:B0:65:4D:B5:59:9C
Certificate issuer: /CN=5B4C702133C87BA4BC2E55E712270969ABE45A51
Certificate serial: 18A09917FDDD175742778BF7EB9B5650F407B664
Authority key identifier: 5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa
Signing time: Sun 03 May 2026 02:29:00 +0000
ROA not before: Sun 03 May 2026 02:24:00 +0000
ROA not after: Sun 02 May 2027 02:29:00 +0000
asID: 151588
IP address blocks: 103.55.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl
rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 12:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a0:99:17:fd:dd:17:57:42:77:8b:f7:eb:9b:56:50:f4:07:b6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B4C702133C87BA4BC2E55E712270969ABE45A51
Validity
Not Before: May 3 02:24:00 2026 GMT
Not After : May 2 02:29:00 2027 GMT
Subject: CN=98C39523D85E63CB5C40BCD6E7D9B0654DB5599C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:4f:2e:5b:ee:76:e1:b2:97:40:44:62:be:
65:ad:45:be:c4:0f:bf:8c:24:70:f2:b9:be:c7:b8:
e8:bd:5c:69:9b:f1:eb:85:86:65:a4:f0:c6:65:e1:
9d:6e:01:07:d1:48:81:86:a2:92:51:db:ce:8f:69:
1e:fd:68:db:ec:9a:d4:c9:49:0f:44:36:72:06:46:
d8:ac:60:70:df:3a:6e:c5:e5:8b:7e:09:16:d3:80:
55:78:dc:5a:7c:b1:93:8e:f3:8c:41:e8:6f:5f:ca:
3f:a5:5a:17:09:8d:cf:3d:34:37:62:eb:8f:6c:5c:
1c:ab:56:26:00:5f:33:36:b1:db:e2:d7:98:93:e5:
d7:17:98:b1:a3:50:e3:b3:3b:6b:71:b4:2c:6f:22:
df:c9:ec:ca:df:f4:a6:51:4c:99:65:b8:66:c2:f8:
fd:fd:ff:57:a5:62:d5:ae:53:8e:2c:6b:54:36:d7:
39:da:e3:10:01:9d:f8:94:38:37:e4:60:db:8e:a9:
f6:c4:a7:b7:80:da:9a:a3:71:60:a3:b6:31:63:7a:
c0:b0:2d:b7:93:9e:a0:38:bf:ee:26:e6:a7:ea:d4:
1f:e1:0c:a2:07:ec:13:36:6c:c9:53:ce:99:23:4f:
82:72:9d:54:23:fa:f0:4a:70:e8:57:9c:94:b1:d2:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C3:95:23:D8:5E:63:CB:5C:40:BC:D6:E7:D9:B0:65:4D:B5:59:9C
X509v3 Authority Key Identifier:
keyid:5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.252.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:0c:56:ce:7e:46:d9:78:b6:3b:96:d7:ac:cb:6b:61:69:a7:
1d:0a:33:70:19:7f:56:83:00:ea:08:29:ee:9b:7a:69:c2:b3:
5a:fc:45:48:a8:9c:ab:38:ee:3d:b5:d5:ef:95:f9:cd:f5:ec:
1f:ed:a8:ed:10:f8:a1:c7:45:e8:42:39:53:61:18:15:ce:54:
42:ac:0d:ee:d5:9a:03:de:c2:f7:0f:62:b3:15:a7:a8:5e:09:
11:ef:f5:db:18:3f:2a:60:74:f0:2b:bf:c8:8e:48:c5:14:eb:
42:1c:ca:2b:21:05:de:84:97:16:27:5d:f9:9b:a9:57:94:38:
f4:88:d2:5d:78:e7:46:90:f8:1c:68:7e:de:94:e1:58:a6:53:
d8:b9:c1:8d:f7:b2:e8:81:ba:61:aa:2b:53:57:07:b8:20:24:
5d:4a:06:29:b2:64:83:10:a3:27:24:6f:2d:ec:44:14:8e:47:
c2:79:99:3c:57:92:08:1c:aa:07:25:b5:5a:cc:23:c1:c5:92:
5d:ae:4f:b2:57:25:bc:d0:ea:62:e5:86:9d:78:51:40:31:8e:
ee:da:c6:eb:0a:00:dc:69:84:a3:30:60:08:88:41:ec:51:89:
8b:61:5a:1d:65:66:ae:db:45:50:0d:0f:0f:d2:46:55:76:22:
b2:cd:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:48 2026 by rpki-client