
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa
File: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (raw, json)
Hash identifier: PFdBLc9JDIxArwgoU/YzuObUbGI99im6tjm/eoPLbM8=
Subject key identifier: 22:6A:2C:2D:7B:82:84:1C:BE:7E:3F:F7:5A:D1:E5:A2:3F:AE:69:41
Certificate issuer: /CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B
Certificate serial: 38CE1B700E855EDF5D10A59A3125C8CB616956B8
Authority key identifier: 56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa
Signing time: Sun 03 May 2026 02:29:11 +0000
ROA not before: Sun 03 May 2026 02:24:11 +0000
ROA not after: Sun 02 May 2027 02:29:11 +0000
asID: 150262
IP address blocks: 103.27.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl
rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ce:1b:70:0e:85:5e:df:5d:10:a5:9a:31:25:c8:cb:61:69:56:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B
Validity
Not Before: May 3 02:24:11 2026 GMT
Not After : May 2 02:29:11 2027 GMT
Subject: CN=226A2C2D7B82841CBE7E3FF75AD1E5A23FAE6941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:61:13:ac:28:c7:e2:93:55:b5:0d:2a:f7:
31:39:e7:24:31:04:10:47:4b:fc:e1:cf:ae:ff:da:
56:f6:0a:da:8c:8a:4b:0a:c4:86:2b:50:66:57:5e:
e9:9b:bc:68:16:d2:a9:88:10:5d:3a:15:7c:71:ef:
31:ab:3f:b5:ad:c4:2a:bc:13:7b:cb:bb:f3:74:dc:
e5:e8:9d:3f:ee:27:14:25:b8:5b:f3:55:f7:87:c2:
75:a9:fa:69:f5:a2:3e:4a:a8:5e:d4:92:35:41:37:
09:c2:30:e1:43:6b:78:73:a7:98:e7:ef:bf:a8:1b:
6f:d0:8e:74:65:50:f0:8a:45:f9:bb:72:a3:e5:79:
fa:25:88:09:3d:ff:c7:4d:5b:11:4b:4c:e8:04:c5:
fd:8e:28:56:b6:9e:95:53:78:01:48:69:6d:c5:6e:
28:ae:6d:f0:84:60:40:8b:db:91:11:fe:f9:16:0b:
b1:19:c8:05:b9:cf:36:b6:c1:89:fa:c9:7a:3a:0c:
7a:db:f6:90:96:fa:eb:6d:49:14:5d:f8:e6:19:6e:
af:0d:eb:6f:12:b5:b4:41:24:a7:08:d8:da:35:8c:
f5:65:a6:8b:97:83:ac:23:ab:87:91:94:7f:02:f9:
a7:1f:2b:a6:c2:b6:4e:4d:ba:82:68:8d:99:dc:ca:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6A:2C:2D:7B:82:84:1C:BE:7E:3F:F7:5A:D1:E5:A2:3F:AE:69:41
X509v3 Authority Key Identifier:
keyid:56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.192.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:68:77:7b:cc:4c:0f:9b:21:09:41:10:6c:34:31:04:8d:cc:
b6:dc:2d:bc:df:7b:c7:55:92:ad:0c:2e:26:44:32:c6:2d:b8:
33:52:e2:bf:8f:9f:53:2c:66:ce:c8:d0:c4:c9:de:62:65:af:
d5:af:8d:7b:ae:1c:37:0f:12:44:c0:04:28:0e:4e:ff:9c:38:
31:60:ad:9b:58:a7:7f:f9:4b:47:da:7d:61:31:5a:b3:38:fb:
46:3f:71:16:b0:4b:80:17:67:04:58:87:05:b6:c5:88:bc:1a:
2b:3e:ae:e3:c3:cc:89:2a:b9:ab:60:ac:fb:07:92:c6:7e:f5:
03:18:14:43:e8:76:1f:89:77:54:dc:ad:44:76:92:d1:e2:a7:
af:a5:84:d1:38:56:b9:76:57:75:5d:04:e6:51:57:e5:a9:49:
11:b3:b0:90:fe:3b:22:08:27:2c:20:e8:f8:85:2a:c8:59:ec:
a6:50:f3:2a:44:0e:c5:f2:bd:8f:77:87:78:47:34:8d:63:03:
cc:70:3d:e7:f6:87:45:22:ae:03:b5:9a:78:2b:e6:92:18:2f:
1f:c1:6b:73:28:88:f7:5a:f3:dc:34:79:36:1c:6f:ad:0d:0a:
c2:79:ad:0d:d9:6d:14:d9:74:6b:21:6e:7d:75:c7:d8:72:c5:
6a:15:29:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:21 2026 by rpki-client