
$ rpki-client -vvf rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa
File: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (raw, json)
Hash identifier: sLHnpPIHUxO29WSb75hs0N2E96R8Wj78zUMN4pLDvZ4=
Subject key identifier: A7:A3:BB:FC:6B:D5:AA:A2:28:22:5B:76:D4:E7:B4:33:99:F7:50:96
Certificate issuer: /CN=5B4C702133C87BA4BC2E55E712270969ABE45A51
Certificate serial: 76C39F298A3D5B182AD428819150CB6F1F3EA0CB
Authority key identifier: 5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa
Signing time: Sun 03 May 2026 02:29:00 +0000
ROA not before: Sun 03 May 2026 02:24:00 +0000
ROA not after: Sun 02 May 2027 02:29:00 +0000
asID: 151588
IP address blocks: 103.55.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl
rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c3:9f:29:8a:3d:5b:18:2a:d4:28:81:91:50:cb:6f:1f:3e:a0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B4C702133C87BA4BC2E55E712270969ABE45A51
Validity
Not Before: May 3 02:24:00 2026 GMT
Not After : May 2 02:29:00 2027 GMT
Subject: CN=A7A3BBFC6BD5AAA228225B76D4E7B43399F75096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:10:a2:db:26:29:6a:49:94:59:52:99:a9:
f1:08:b8:dc:46:d3:a6:39:e0:87:48:47:ca:e9:a2:
86:66:bb:e2:01:5c:04:7f:89:89:71:be:95:5c:6b:
f8:07:81:a7:e1:35:f8:47:d4:99:40:63:68:67:10:
c4:03:a2:2a:f2:cd:35:73:fa:5e:30:c8:63:5d:ac:
89:25:09:a3:75:4d:bb:bd:d1:d7:2e:0c:8e:05:3e:
b3:9d:12:c8:9c:05:c7:8b:09:ac:94:d3:a1:88:17:
a1:aa:42:00:f5:5c:e9:d3:a1:d4:b5:43:4f:8b:ef:
90:99:74:35:09:48:98:19:c7:64:40:a5:dc:88:ba:
ed:fe:db:bb:17:38:7c:f4:43:ac:83:6e:ee:d7:59:
95:7f:eb:e1:db:04:2c:c1:1b:d4:19:8f:eb:b1:b9:
38:8c:91:db:94:1e:9f:2f:e7:54:78:55:dd:d2:f0:
27:9a:33:42:72:f6:5e:43:e8:d0:3e:ae:5b:8e:0a:
e3:6e:ae:16:10:cb:fb:9e:a3:52:9c:bd:a4:5d:f9:
31:ab:1a:60:31:ae:49:cc:20:d7:b4:eb:a8:14:24:
16:1b:48:26:67:cd:03:98:39:c4:d2:bf:1e:52:e1:
cd:e2:cd:6e:d6:3f:90:8f:29:54:b7:37:8f:50:c8:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A3:BB:FC:6B:D5:AA:A2:28:22:5B:76:D4:E7:B4:33:99:F7:50:96
X509v3 Authority Key Identifier:
keyid:5B:4C:70:21:33:C8:7B:A4:BC:2E:55:E7:12:27:09:69:AB:E4:5A:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/5B4C702133C87BA4BC2E55E712270969ABE45A51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B4C702133C87BA4BC2E55E712270969ABE45A51.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.252.0/24
Signature Algorithm: sha256WithRSAEncryption
57:e6:45:9a:2b:82:0a:86:b2:c8:f0:22:69:57:19:b5:dc:d6:
7a:49:70:6e:99:e3:78:ae:b1:18:ad:43:9e:10:e9:e1:64:18:
5d:4b:62:88:04:d9:f9:98:31:ca:01:1e:d2:48:e5:ae:6f:24:
5d:25:2d:e0:9c:0e:a1:21:2a:3b:10:4b:79:3e:bf:44:63:8a:
e8:3b:e2:0f:ed:2f:1b:e9:44:e1:5e:c7:b1:1e:13:55:ba:f4:
99:8e:ab:98:f7:a5:44:61:62:eb:67:ac:d5:d7:55:74:3d:43:
d4:15:15:97:68:12:f2:4b:0d:de:4b:bb:be:25:2e:4e:9f:9e:
71:42:d1:7f:9d:fd:31:93:40:09:aa:85:c4:88:0a:95:d3:e2:
e3:56:90:2a:e4:18:e6:fe:e2:68:84:0c:5e:38:12:d7:75:89:
e5:48:b0:18:00:e2:79:32:82:e8:80:a5:81:83:b4:59:d5:2a:
84:db:23:ad:f8:b1:19:ef:45:2e:44:8e:ec:f4:6c:a9:0a:87:
8e:66:ad:bd:5c:f1:7c:63:2e:63:ef:5a:36:d9:73:69:65:9f:
b0:ae:f3:d6:a3:23:6c:ed:5d:aa:6f:37:51:8f:dd:6e:cf:e3:
5e:50:93:7d:ee:4d:0b:29:fa:e8:76:54:f1:b0:23:99:70:f0:
dd:e4:8a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:10:31 2026 by rpki-client