
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa
File: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (raw, json)
Hash identifier: HB5+30LBsGIIfrOeoz4NikxPDJ/kMoZQRDczvkwPbL0=
Subject key identifier: 15:F9:97:E4:31:80:09:C7:65:11:E7:54:FF:AF:7C:05:51:8E:B9:7B
Certificate issuer: /CN=A58E55B7CCE754B9CB71A0C874161981234B001D
Certificate serial: 2D9699CDDFF46CBFBF18FBAF4278E0717FC3AE76
Authority key identifier: A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa
Signing time: Sun 03 May 2026 02:30:54 +0000
ROA not before: Sun 03 May 2026 02:25:54 +0000
ROA not after: Sun 02 May 2027 02:30:54 +0000
asID: 141073
IP address blocks: 103.155.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl
rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:96:99:cd:df:f4:6c:bf:bf:18:fb:af:42:78:e0:71:7f:c3:ae:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A58E55B7CCE754B9CB71A0C874161981234B001D
Validity
Not Before: May 3 02:25:54 2026 GMT
Not After : May 2 02:30:54 2027 GMT
Subject: CN=15F997E4318009C76511E754FFAF7C05518EB97B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:d1:65:f8:82:fc:27:03:0a:d2:ce:71:83:
00:9c:94:0f:5b:7e:5e:fb:bd:10:6e:ec:e3:66:e5:
ad:90:ae:28:47:fe:f7:19:70:42:3e:55:2a:ee:48:
d5:46:f3:a2:8d:60:f4:21:38:5f:7a:d5:ce:24:6a:
d5:76:5e:40:27:ab:27:eb:f6:92:db:d7:8c:77:1f:
c0:23:84:8a:d9:be:f7:16:2e:7d:e6:15:54:8b:92:
1c:fa:04:7c:f2:42:59:d9:4a:90:42:03:7f:7a:d9:
53:08:bb:d8:81:20:38:fa:fe:51:77:42:a8:f2:7c:
2e:66:5b:1d:7c:33:7d:a3:31:b5:27:5d:fe:ea:42:
27:e5:18:77:57:c1:80:48:df:9b:50:7f:63:c4:c2:
a2:34:34:18:bf:a7:6d:06:df:b7:75:9a:af:b9:b4:
d7:8d:0f:ab:6f:75:d6:76:8f:f7:67:c9:97:79:64:
23:f8:bd:f9:6f:2c:fc:98:10:92:76:4b:19:b0:af:
b1:0c:0d:56:fb:35:5e:12:25:cc:b3:64:12:9e:21:
72:e1:e0:ec:c6:80:b5:0f:d2:ee:10:c7:86:c4:7b:
25:a5:fb:25:ea:d5:7f:14:42:26:0b:62:aa:d5:a5:
8e:f5:a2:48:f4:01:a5:7b:0a:d8:55:8a:44:91:e2:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F9:97:E4:31:80:09:C7:65:11:E7:54:FF:AF:7C:05:51:8E:B9:7B
X509v3 Authority Key Identifier:
keyid:A5:8E:55:B7:CC:E7:54:B9:CB:71:A0:C8:74:16:19:81:23:4B:00:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/A58E55B7CCE754B9CB71A0C874161981234B001D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A58E55B7CCE754B9CB71A0C874161981234B001D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.200.0/23
Signature Algorithm: sha256WithRSAEncryption
21:97:51:9f:26:69:cc:7d:42:e9:58:c0:5f:89:78:41:f7:0c:
1b:fe:45:96:a2:45:16:90:37:72:ba:d2:2e:9a:6b:8b:c4:93:
de:82:fb:58:5d:18:d0:d3:e0:23:a5:84:92:e4:b8:a1:ba:e4:
d5:a7:6e:4f:33:93:b3:c8:5a:96:34:4b:58:0e:75:26:91:af:
e2:41:5c:14:c1:7f:88:5e:00:9c:e9:c4:c5:cf:ce:72:53:7d:
08:c3:55:53:33:e5:fe:60:df:6c:33:e5:ac:82:58:62:a9:20:
c0:ea:ef:a8:dd:ab:ea:32:9a:5c:66:96:60:93:68:c9:ff:e0:
37:c4:af:5a:8c:66:bc:76:00:fe:47:c3:4f:65:cb:35:42:e3:
23:9c:0d:d9:72:8b:8a:a7:78:34:59:aa:0a:82:a7:b2:5b:b2:
f9:00:c8:ee:71:92:7e:68:4a:8e:52:66:23:9d:48:96:4c:84:
24:e0:96:d0:28:15:b0:8b:b0:9e:02:40:8f:c4:a8:e9:7e:73:
8f:9d:e3:c0:03:87:95:65:c4:90:b2:ec:15:9f:d3:31:9e:3b:
5a:14:ec:f4:8d:d9:14:68:bb:f2:b6:65:bb:0c:38:79:89:94:
54:c6:d4:0b:11:6c:d8:9f:56:4b:86:df:91:aa:25:b3:c2:7c:
9a:64:8d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:50 2026 by rpki-client