
$ rpki-client -vvf rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/3130332e3138392e39342e302f32332d3234203d3e2034383030.roa
File: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier: 98Zyj+fTMsxtD+mvmsmI4mvcK/mVqZbbqGkLKnUzRb8=
Subject key identifier: 2B:1D:A2:29:11:12:D3:76:94:55:94:CA:40:71:1F:20:9C:86:5D:F7
Certificate issuer: /CN=57A1C37C2054FB49FB12C6EC7DF20B77943F9014
Certificate serial: 3015E4FF727936734DEC544C4B6D486CD567272F
Authority key identifier: 57:A1:C3:7C:20:54:FB:49:FB:12:C6:EC:7D:F2:0B:77:94:3F:90:14
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/3130332e3138392e39342e302f32332d3234203d3e2034383030.roa
Signing time: Sun 03 May 2026 02:29:27 +0000
ROA not before: Sun 03 May 2026 02:24:27 +0000
ROA not after: Sun 02 May 2027 02:29:27 +0000
asID: 4800
IP address blocks: 103.189.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl
rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:15:e4:ff:72:79:36:73:4d:ec:54:4c:4b:6d:48:6c:d5:67:27:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A1C37C2054FB49FB12C6EC7DF20B77943F9014
Validity
Not Before: May 3 02:24:27 2026 GMT
Not After : May 2 02:29:27 2027 GMT
Subject: CN=2B1DA2291112D376945594CA40711F209C865DF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:c5:6d:88:66:c3:66:f9:a4:9e:71:5d:e4:
1c:c5:4e:6a:3e:0d:78:3b:a1:33:2a:bd:88:51:40:
16:08:f7:f8:38:20:6d:f4:57:05:79:9e:95:39:83:
b3:af:cf:71:e7:7a:ab:dd:2c:ea:3c:6e:9b:01:3d:
12:56:fa:49:59:7e:b3:ed:b3:be:8f:94:54:05:d5:
66:91:59:28:45:4e:b8:e7:46:a1:bf:04:69:86:45:
02:4a:fa:88:93:61:80:cb:b0:6a:e6:b9:37:a7:06:
4b:51:bd:76:7d:c8:fe:38:1e:94:70:63:0b:ee:3d:
2e:91:fe:b1:cb:b0:a2:f3:e2:e4:47:b0:98:3b:95:
bb:a6:47:90:1c:34:db:ea:13:08:08:36:4b:89:67:
9e:18:34:95:bc:29:ef:db:05:55:13:9a:81:76:27:
cd:14:6e:43:1c:a2:51:f6:9f:47:17:9d:5f:c4:cd:
7b:b1:23:f4:9e:fd:b5:88:7e:bd:3b:c1:8c:59:f7:
33:f8:60:a1:57:62:6e:cb:5c:3e:7e:1f:b6:86:be:
c9:37:59:d8:f6:ab:4a:ee:59:97:1c:71:06:b8:43:
bf:f6:f4:2f:09:ce:fa:4b:4c:54:ae:f3:33:b3:cd:
bf:4d:16:c2:6a:81:87:7a:a2:a3:b6:3b:8e:dd:9a:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1D:A2:29:11:12:D3:76:94:55:94:CA:40:71:1F:20:9C:86:5D:F7
X509v3 Authority Key Identifier:
keyid:57:A1:C3:7C:20:54:FB:49:FB:12:C6:EC:7D:F2:0B:77:94:3F:90:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/3130332e3138392e39342e302f32332d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.94.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:62:d3:fa:e2:71:1a:68:31:e4:a4:8b:9e:11:cf:81:fb:24:
e8:d6:e2:77:cb:47:43:c1:1b:1b:17:87:b5:3d:2e:d8:0c:73:
c2:a2:8a:22:b0:40:56:1a:98:28:d3:59:c7:2e:f8:b8:1d:fe:
16:02:82:51:31:58:41:52:fa:66:11:eb:13:73:a9:7d:25:a6:
7a:54:62:84:ba:f9:c4:9a:11:51:72:95:94:69:cb:ea:7e:21:
92:58:58:11:87:7a:8e:cc:cf:5f:5a:71:d9:46:5d:8c:a3:d7:
5c:c0:5c:42:80:1f:9d:15:ef:b7:0a:2c:d2:f5:8c:10:6f:24:
6a:59:53:08:ca:c6:f0:25:fa:cd:fc:a3:50:d2:9c:b2:07:8e:
9c:59:be:16:8c:5a:d9:96:f9:98:89:0b:00:55:79:9c:8d:ee:
67:9e:6d:03:f1:e5:b5:93:eb:97:50:4b:ba:98:5a:64:98:8d:
cc:fd:ce:33:c8:75:96:96:87:68:9e:2b:d8:01:e7:de:83:7b:
81:45:32:a8:1f:e7:fe:b9:16:5c:6f:98:ea:5e:df:36:b2:f2:
c2:d1:f4:d0:5a:8c:fb:e1:0f:3a:8f:9b:4e:65:09:a4:06:dd:
f4:45:2b:26:89:0d:cc:ee:24:e4:5b:44:db:ad:6b:51:45:88:
4a:c8:d4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:31 2026 by rpki-client