
$ rpki-client -vvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233322e302f32342d3234203d3e203538343735.roa
File: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (raw, json)
Hash identifier: iPYJKyy3LjL+wdadigRDVFan06P6sm3qFgCQgu9haaI=
Subject key identifier: 24:85:2B:56:C4:E5:C5:40:5D:30:C0:DB:4F:7D:69:3A:03:8D:0D:AC
Certificate issuer: /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Certificate serial: 6B4235427974FF4907A8829FF2517EDADCE3FA17
Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233322e302f32342d3234203d3e203538343735.roa
Signing time: Sun 03 May 2026 02:31:00 +0000
ROA not before: Sun 03 May 2026 02:26:00 +0000
ROA not after: Sun 02 May 2027 02:31:00 +0000
asID: 58475
IP address blocks: 103.23.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:42:35:42:79:74:ff:49:07:a8:82:9f:f2:51:7e:da:dc:e3:fa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Validity
Not Before: May 3 02:26:00 2026 GMT
Not After : May 2 02:31:00 2027 GMT
Subject: CN=24852B56C4E5C5405D30C0DB4F7D693A038D0DAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:89:25:36:ad:ac:93:c1:de:9d:1e:f9:b6:
4e:3d:68:b4:d2:40:39:c9:8d:38:4c:dc:1c:64:50:
bf:f4:2a:23:f7:70:32:8c:82:10:c7:16:ae:5f:1e:
cb:50:7c:97:46:17:d8:cf:43:fd:5f:1a:28:2e:5b:
f3:aa:28:8c:7a:5c:c3:fb:b8:67:e9:b4:4e:e7:68:
31:4b:ec:0f:58:2d:98:fb:46:0f:7a:13:6b:9d:c9:
c2:8b:26:df:ab:dd:fb:2e:ed:d8:89:20:0f:ef:21:
17:dd:7e:1d:06:78:89:69:e2:44:c3:10:79:83:48:
56:da:98:d1:8f:c8:ff:b3:05:38:e3:51:02:bb:8f:
1e:ed:07:fd:ef:26:77:f1:d7:c1:09:6d:74:d1:56:
89:2d:5f:7d:6c:2e:2c:00:54:26:d5:36:76:26:b9:
c8:08:be:d8:ee:1b:64:9e:73:76:2b:bb:e0:06:7f:
9f:e6:e9:9b:f4:1d:e9:bc:8a:47:39:6a:c0:66:c5:
8e:bd:62:08:19:59:bd:a7:81:2d:09:38:c9:46:2a:
44:c5:b5:a8:8c:36:34:f1:be:07:0a:cd:9b:37:2c:
60:83:f6:46:9c:6a:7f:83:e9:d4:9a:5c:9e:06:fc:
98:be:75:39:b2:c2:ff:8e:0a:8e:f4:32:d2:ba:d0:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:85:2B:56:C4:E5:C5:40:5D:30:C0:DB:4F:7D:69:3A:03:8D:0D:AC
X509v3 Authority Key Identifier:
keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233322e302f32342d3234203d3e203538343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.232.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:a8:da:12:d8:af:62:88:e5:5d:54:78:38:d8:91:1b:09:bd:
34:36:bd:28:6d:b0:b7:87:68:83:00:3a:ce:5b:79:93:a6:1c:
7b:70:c7:bc:a3:42:c9:86:a2:aa:64:45:1c:e6:8d:e9:a8:15:
bf:2b:98:9c:06:6f:54:92:fd:2a:d7:c1:2a:c5:ca:2f:2d:7f:
5c:ab:29:55:21:77:44:46:4e:e1:1e:60:0a:7c:22:d8:16:2d:
a4:c5:5a:59:65:5c:0f:14:14:dc:06:b1:90:ca:9f:47:5c:7c:
0d:b1:b8:6d:e1:95:45:a8:bd:48:4a:27:8c:4f:1f:05:1c:80:
85:b4:cf:d0:01:95:9f:e4:bb:c8:52:9e:37:ef:34:9c:93:44:
26:63:bc:31:00:46:c1:47:b9:87:a9:b7:a3:43:e1:a9:ec:8d:
bb:b9:f6:fe:55:6a:7d:74:9e:61:20:d4:7f:92:c2:2c:77:68:
88:0f:f4:65:69:12:96:b6:43:f4:95:6e:c2:2a:1e:97:52:4d:
29:c1:18:c1:98:1f:ab:68:62:8c:ad:4d:e7:db:34:40:71:8c:
27:c7:e0:1f:a4:37:80:34:27:6d:ba:39:bc:33:4b:9b:6a:b3:
23:bc:f8:96:36:b4:0b:21:88:54:3d:e4:65:2d:c8:8c:ea:a3:
b3:2d:9f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:32 2026 by rpki-client