
$ rpki-client -vvf rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa
File: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (raw, json)
Hash identifier: qtpgdgclWZOTtoV+QMuAH0R7ZHXa3nSHqjG3rAHVlzk=
Subject key identifier: 57:C2:C4:AF:A2:C5:62:6A:99:A8:0D:46:62:23:54:E3:EA:2D:44:F7
Certificate issuer: /CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508
Certificate serial: 1951BB2F361A2E8B32065BB257FAFCD5F551223B
Authority key identifier: 1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa
Signing time: Sun 03 May 2026 02:29:14 +0000
ROA not before: Sun 03 May 2026 02:24:14 +0000
ROA not after: Sun 02 May 2027 02:29:14 +0000
asID: 149315
IP address blocks: 103.186.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl
rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:51:bb:2f:36:1a:2e:8b:32:06:5b:b2:57:fa:fc:d5:f5:51:22:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508
Validity
Not Before: May 3 02:24:14 2026 GMT
Not After : May 2 02:29:14 2027 GMT
Subject: CN=57C2C4AFA2C5626A99A80D46622354E3EA2D44F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:9a:5f:64:55:5e:95:3e:95:e7:1d:cb:bd:
32:c7:b6:c5:95:d8:31:3a:64:20:3e:e8:d4:e5:2a:
9f:2c:e0:bd:d5:c4:14:e5:15:cf:07:65:c2:89:0a:
b0:a6:56:c5:55:0d:6f:4a:8f:ee:c7:54:1b:88:55:
10:db:d6:91:a7:2e:1a:01:78:98:16:44:9a:af:79:
90:6b:1a:a8:fc:b9:75:fe:d0:c0:11:04:d7:01:8b:
f2:78:4c:78:15:24:09:c9:5b:6f:de:64:dc:52:c2:
2a:90:3d:aa:e0:62:a0:4d:f9:ca:5a:5f:66:e3:97:
8c:90:73:20:23:dc:c1:26:d7:84:7d:ed:1f:68:39:
b5:93:59:37:e3:06:92:80:83:69:36:17:46:c2:ff:
7a:20:a1:45:cc:a4:01:03:74:b0:de:97:4d:86:da:
87:97:e2:8f:b8:4f:2b:a6:b5:a5:3a:9b:9c:4a:59:
88:1b:8b:b1:cf:87:af:13:7b:a4:44:21:36:91:75:
fd:fc:1f:7f:a1:de:aa:9a:17:35:52:3e:03:80:36:
59:43:29:9f:e9:06:0c:7b:3e:82:f9:a9:8b:c3:dd:
60:da:4e:b6:53:6e:3f:60:97:74:e4:11:31:ae:75:
15:9d:88:4c:0f:70:61:a5:62:56:cc:6f:3a:51:a0:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:C4:AF:A2:C5:62:6A:99:A8:0D:46:62:23:54:E3:EA:2D:44:F7
X509v3 Authority Key Identifier:
keyid:1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.168.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ef:9d:99:b1:78:90:94:73:75:c7:e5:93:b1:2a:dc:c2:da:
11:97:3a:3e:4e:62:81:dc:f7:f0:87:ee:68:a3:9d:74:dd:0f:
b7:de:0c:3a:e6:4e:46:d6:0a:19:ea:aa:82:ad:b2:bd:d3:61:
18:75:55:8a:8d:b1:bb:fb:46:53:69:4d:4b:17:91:6c:20:59:
05:ed:64:39:20:b5:ad:81:64:a9:39:b6:e1:eb:89:9e:e0:63:
94:1b:de:c0:84:01:3c:04:91:11:13:03:1f:78:c5:31:bf:52:
12:ff:ef:fe:60:f8:cd:48:c2:1e:da:74:4c:73:24:e6:cd:0c:
19:e8:97:ee:4d:c0:85:ca:61:1a:fd:ff:36:e1:39:db:76:29:
aa:b2:a1:7c:20:e2:6a:2e:4c:d6:12:bf:ff:c2:13:80:b8:a9:
83:bc:3f:de:a0:d3:73:81:5c:f2:db:58:14:28:b6:ba:c7:34:
e6:71:3a:e1:94:42:c6:fa:e5:96:8f:0c:e5:e9:99:6c:1a:82:
9c:2c:16:f0:0e:5d:e4:8e:07:9f:58:7e:19:51:00:e8:95:65:
3d:7b:a2:f4:01:7b:11:b3:c4:fb:fc:0b:e0:0d:6e:7b:a0:00:
16:55:34:86:68:23:d2:6f:fe:7c:77:70:ca:87:b3:1a:05:3c:
16:50:35:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:13 2026 by rpki-client