
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39352e302f32342d3234203d3e20313333383233.roa
File: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier: hMe+orbuTN2RzbgcWeM+BwpjsEbYn/EerG23yS+Aa0g=
Subject key identifier: 16:05:C4:B9:49:EF:BE:C4:A7:EC:ED:16:50:46:87:FD:BF:30:F7:44
Certificate issuer: /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial: 2819012D3C222795C82A7127D9B618DB7DAD4C7D
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39352e302f32342d3234203d3e20313333383233.roa
Signing time: Sun 03 May 2026 02:29:45 +0000
ROA not before: Sun 03 May 2026 02:24:45 +0000
ROA not after: Sun 02 May 2027 02:29:45 +0000
asID: 133823
IP address blocks: 103.54.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:19:01:2d:3c:22:27:95:c8:2a:71:27:d9:b6:18:db:7d:ad:4c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Validity
Not Before: May 3 02:24:45 2026 GMT
Not After : May 2 02:29:45 2027 GMT
Subject: CN=1605C4B949EFBEC4A7ECED16504687FDBF30F744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:03:58:d8:00:6f:54:f1:43:63:d6:06:2d:
67:49:ca:e8:53:87:8e:6a:1e:65:2a:18:80:a7:4c:
8a:fb:04:91:17:9c:9c:a1:91:ad:26:a9:de:26:4a:
ef:2b:08:80:16:6c:76:19:a1:87:ce:38:c8:26:94:
15:2b:e0:bb:4e:8f:7b:0a:af:f2:64:f0:3a:af:1e:
56:0f:d6:a5:4c:aa:9c:b4:a6:ce:9e:54:ea:4f:22:
a5:d7:65:d8:05:0d:94:0e:57:05:7c:00:93:89:d6:
da:55:0a:46:8c:23:36:57:f6:16:f5:6d:9e:bf:be:
27:d2:a1:b0:70:95:bb:44:dc:cc:f8:8e:3f:5a:27:
50:d5:1e:42:20:ce:1e:9c:5c:ff:aa:2b:06:dd:64:
a5:54:72:e5:54:88:e7:a4:35:b9:5b:ce:11:c8:1e:
ce:a7:58:e0:77:db:d3:ad:b4:26:83:e1:16:7c:da:
27:d8:65:0b:18:a7:96:68:a5:48:19:33:14:5e:82:
97:c9:da:98:b1:2f:3f:b5:73:a9:eb:6e:46:06:25:
6f:79:43:6c:fc:80:26:1d:c3:50:cd:34:e2:4c:dc:
4c:8a:44:34:1b:a1:ba:61:f7:66:3a:5f:64:36:4b:
2a:6e:09:e8:b2:a1:2e:d7:8c:a5:bd:98:4f:24:8c:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:05:C4:B9:49:EF:BE:C4:A7:EC:ED:16:50:46:87:FD:BF:30:F7:44
X509v3 Authority Key Identifier:
keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39352e302f32342d3234203d3e20313333383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:16:bc:ea:7b:85:c9:84:3f:c1:1c:32:e7:36:1b:ca:55:1f:
fe:67:20:72:66:e5:5c:6c:7e:0f:45:69:35:86:e5:01:95:3e:
76:06:7b:63:41:00:e0:d1:42:86:38:0f:bb:37:1e:a6:19:29:
f7:fb:af:e8:37:d1:de:90:e1:44:91:07:24:13:f0:08:83:30:
f5:6d:c6:5a:1a:f3:f4:0a:0f:70:2b:06:f1:85:8a:79:83:6c:
59:88:87:db:16:d1:dd:3a:a6:c3:5f:97:ef:7a:ae:ce:bc:56:
08:d8:70:00:20:94:29:d5:2b:87:a1:6a:ee:5c:10:5e:50:c7:
e9:a7:a1:5f:ea:95:9c:49:57:26:6c:37:ff:5d:ce:8d:4d:9b:
9e:a4:54:07:48:4e:65:b0:b6:5b:78:79:ee:b2:f6:87:f4:43:
2d:27:7f:e0:f4:e6:6c:58:39:9e:4a:c3:94:c3:87:37:36:b1:
7f:be:3d:41:70:38:25:5d:17:c9:d9:1f:5a:3c:72:28:0b:ca:
7a:1e:5a:e6:a9:1a:4d:37:26:c1:e7:21:75:a8:89:e4:b9:35:
65:8a:40:a7:69:9f:89:61:14:f7:99:01:33:2a:44:51:28:4e:
45:a3:46:cd:33:71:b2:43:bd:18:37:ca:75:f1:fc:72:6b:1b:
9b:75:01:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:08 2026 by rpki-client