
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e342e302f32342d3234203d3e20313336313237.roa
File: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (raw, json)
Hash identifier: 3XT6Qf//u+3dqP7/6tKzMllxBOnpkDd6boyw9AssiHI=
Subject key identifier: 65:3D:45:F1:65:72:A7:99:E7:67:3F:D0:AB:11:1D:28:D4:B8:53:07
Certificate issuer: /CN=509D7A005D22B25F29771D4736A9F3273A87402B
Certificate serial: 7DAC265DF06FD0307226B2E87F82F32BDB5A1D8D
Authority key identifier: 50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e342e302f32342d3234203d3e20313336313237.roa
Signing time: Sun 03 May 2026 02:29:56 +0000
ROA not before: Sun 03 May 2026 02:24:56 +0000
ROA not after: Sun 02 May 2027 02:29:56 +0000
asID: 136127
IP address blocks: 103.97.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl
rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ac:26:5d:f0:6f:d0:30:72:26:b2:e8:7f:82:f3:2b:db:5a:1d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509D7A005D22B25F29771D4736A9F3273A87402B
Validity
Not Before: May 3 02:24:56 2026 GMT
Not After : May 2 02:29:56 2027 GMT
Subject: CN=653D45F16572A799E7673FD0AB111D28D4B85307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:44:dc:c1:5f:60:87:d9:07:54:97:fe:22:
eb:8b:7d:8e:07:e0:da:6b:7c:15:de:d8:2d:a5:5b:
80:09:35:e9:43:cb:53:3d:73:be:bd:fc:4a:8b:a1:
32:d0:7f:c8:39:fd:b1:6d:30:ea:87:42:c9:48:5e:
d7:ea:f5:d7:d1:ed:ba:0a:97:7a:3c:72:f1:ac:11:
e7:88:ad:13:73:a3:64:df:4f:ff:82:c0:89:46:e8:
e0:dd:0b:5d:af:80:0a:5f:73:2a:76:13:9e:ea:c8:
c1:90:9b:03:82:4c:58:00:d6:58:7d:7c:9a:2b:00:
39:8c:c1:3f:1a:72:b6:fc:d7:65:4a:c3:61:ed:c9:
e7:87:a8:d8:51:b4:c1:f8:46:71:72:e9:a8:72:8a:
f2:46:5f:89:76:20:f3:49:8b:09:b5:36:b2:12:b4:
22:61:38:32:6c:aa:65:1f:af:ab:d1:02:2c:b4:2f:
31:63:f0:a1:e8:1c:77:b2:65:0c:3b:9e:03:0f:0e:
02:e6:b1:16:57:a8:b8:cb:fa:0e:c2:38:16:da:87:
8f:c6:b6:4a:e1:50:d9:7c:40:2a:ae:85:81:00:97:
95:0a:4d:37:59:a1:81:e7:13:b5:cf:fa:cd:b8:b3:
65:f8:e9:6b:ab:af:50:2d:c0:2b:29:15:ad:16:93:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3D:45:F1:65:72:A7:99:E7:67:3F:D0:AB:11:1D:28:D4:B8:53:07
X509v3 Authority Key Identifier:
keyid:50:9D:7A:00:5D:22:B2:5F:29:77:1D:47:36:A9:F3:27:3A:87:40:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/509D7A005D22B25F29771D4736A9F3273A87402B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/509D7A005D22B25F29771D4736A9F3273A87402B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e342e302f32342d3234203d3e20313336313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.4.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c1:fd:9b:f5:98:f8:e5:72:3e:39:d8:4c:be:7b:1e:87:22:
1a:38:18:7a:19:a7:3a:76:c8:11:49:99:d9:1c:bc:cd:52:cb:
e7:8e:72:ac:c8:a5:cb:58:19:57:5c:09:b8:ad:c3:18:7b:50:
54:9b:63:ba:ad:5c:81:2c:1b:d6:30:70:12:ee:bf:ac:fb:ba:
26:86:31:e9:52:9d:50:32:54:0f:7c:34:d9:fd:ea:25:c6:8f:
2b:dc:74:a4:a5:59:85:b6:78:56:06:94:2d:de:f0:63:82:03:
35:1a:28:b8:d3:3e:61:12:b0:a4:5b:53:38:ad:bf:f7:0b:83:
94:b7:bd:c8:54:9a:a9:dd:d3:a8:f5:a0:ed:af:2d:dc:a4:e6:
29:ec:ab:49:40:9c:85:a9:9a:ae:aa:b7:e2:2c:52:22:6e:e3:
33:61:26:e5:64:28:b5:0d:00:27:99:ce:79:8f:82:44:3c:2d:
eb:ea:1b:3b:00:79:02:6d:42:86:a0:9b:b8:86:ae:44:9a:2e:
de:86:b4:2e:c8:52:eb:c0:68:4b:7c:5f:0e:ed:6c:61:fc:ea:
a5:02:cf:12:eb:8a:27:b1:10:4d:52:6b:ea:aa:e9:63:1a:09:
bb:a7:51:fb:3c:ed:46:c8:1f:5a:0f:4b:f9:e1:84:e3:af:8e:
1f:41:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:12 2026 by rpki-client