
$ rpki-client -vvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233332e302f32342d3234203d3e203538343735.roa
File: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (raw, json)
Hash identifier: gz0mtebVHRYvwcZULFWZzRpAOfu5PGcdFQ6/2J/rYJg=
Subject key identifier: B8:66:E2:1D:CA:1C:C9:0E:82:96:CF:9E:E2:F7:9B:99:D7:A7:F0:C0
Certificate issuer: /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Certificate serial: 34F501C628362B57DD88DD3BC3139F5EB82A7D90
Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233332e302f32342d3234203d3e203538343735.roa
Signing time: Sun 03 May 2026 02:30:59 +0000
ROA not before: Sun 03 May 2026 02:25:59 +0000
ROA not after: Sun 02 May 2027 02:30:59 +0000
asID: 58475
IP address blocks: 103.23.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f5:01:c6:28:36:2b:57:dd:88:dd:3b:c3:13:9f:5e:b8:2a:7d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Validity
Not Before: May 3 02:25:59 2026 GMT
Not After : May 2 02:30:59 2027 GMT
Subject: CN=B866E21DCA1CC90E8296CF9EE2F79B99D7A7F0C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:da:4d:af:50:c3:56:88:f7:b4:c3:e3:cd:
2a:0b:a2:86:af:f9:65:2a:9c:13:d2:18:48:a1:c2:
32:a3:5a:21:d1:52:7a:63:5a:45:df:ec:56:79:1a:
d9:4d:44:8b:b4:00:9f:57:06:fa:cc:67:b2:57:aa:
85:50:0e:88:d4:6f:30:2b:67:9c:77:7b:4f:b1:94:
7e:26:f9:96:84:58:ce:53:65:21:8c:57:1c:7c:8b:
c9:d1:5f:38:34:ba:e1:ef:d3:c5:bd:db:02:de:76:
ab:fe:85:a2:70:0c:ef:a7:67:d1:ec:2d:00:2a:ff:
73:90:d3:b7:6c:4e:75:13:5f:70:5e:e7:e2:28:74:
e1:76:10:87:9a:87:51:e7:b2:51:16:1a:02:40:af:
7f:f9:5a:e0:cf:fd:0c:6c:41:65:1c:e1:e7:00:ec:
42:10:bf:ac:be:79:9e:b8:8a:0f:2d:8f:82:8f:42:
61:c0:17:d0:45:17:c5:eb:08:98:94:2f:ab:33:d5:
f4:81:86:c8:cd:93:cc:09:76:16:5c:bc:d1:00:63:
b1:54:03:d5:15:b5:36:cd:dc:64:4a:fd:49:8b:36:
08:e9:af:4e:d6:7f:8f:1b:bc:7d:f6:1d:e6:dc:67:
8f:fc:f4:e9:1d:6b:b7:f2:09:82:87:2a:b6:1f:d2:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:66:E2:1D:CA:1C:C9:0E:82:96:CF:9E:E2:F7:9B:99:D7:A7:F0:C0
X509v3 Authority Key Identifier:
keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233332e302f32342d3234203d3e203538343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.233.0/24
Signature Algorithm: sha256WithRSAEncryption
73:52:a2:44:a8:c5:ef:e9:1b:88:45:81:f6:cc:fd:b0:f0:f3:
47:50:d0:0f:ae:6d:07:64:e5:97:8d:8f:9c:a0:da:fa:28:27:
77:f5:e1:dc:36:bd:ba:a4:5c:a7:6e:d9:f5:9b:49:8a:61:cf:
61:16:83:14:d1:8f:ef:2d:9c:78:aa:dd:ef:23:37:9a:83:ec:
3d:fa:c6:3a:ad:93:e7:28:93:b0:75:38:54:3e:7c:60:5b:91:
a7:ac:16:ed:cf:aa:29:9d:fc:d4:97:f2:f8:d1:63:1f:ee:48:
f7:85:4f:1c:75:e2:60:b4:cb:6f:ca:c7:68:99:ed:d7:ea:ae:
82:1d:71:22:0b:89:9e:8e:9d:1f:14:de:d6:f2:18:d1:6d:35:
0d:4e:83:bb:c1:8e:92:28:e5:26:8c:d2:d1:e4:55:d0:97:c1:
b8:dd:db:be:2b:7f:e2:8e:65:54:45:ef:4b:1f:d8:94:c9:8a:
e8:26:28:73:7e:7d:f2:33:da:b9:78:e3:23:44:18:93:86:b1:
6e:03:2b:e2:90:f3:1c:bb:49:49:89:42:72:73:e6:19:54:34:
4b:55:36:a9:0c:f3:0b:00:4b:42:d4:ff:e9:4b:55:27:e0:e2:
cc:e2:d6:7e:d2:da:d5:92:c9:6e:aa:0a:5c:75:ca:95:04:3a:
90:44:e7:d6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNPUBxig2K1fdiN07wxOfXrgqfZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E1QTU4NjgwQTA1RDdDREE2OEFGN0MwOThBQTVFMUQx
REI2NTEzNjAeFw0yNjA1MDMwMjI1NTlaFw0yNzA1MDIwMjMwNTlaMDMxMTAvBgNV
BAMTKEI4NjZFMjFEQ0ExQ0M5MEU4Mjk2Q0Y5RUUyRjc5Qjk5RDdBN0YwQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVdpNr1DDVoj3tMPjzSoLooav
+WUqnBPSGEihwjKjWiHRUnpjWkXf7FZ5GtlNRIu0AJ9XBvrMZ7JXqoVQDojUbzAr
Z5x3e0+xlH4m+ZaEWM5TZSGMVxx8i8nRXzg0uuHv08W92wLedqv+haJwDO+nZ9Hs
LQAq/3OQ07dsTnUTX3Be5+IodOF2EIeah1HnslEWGgJAr3/5WuDP/QxsQWUc4ecA
7EIQv6y+eZ64ig8tj4KPQmHAF9BFF8XrCJiUL6sz1fSBhsjNk8wJdhZcvNEAY7FU
A9UVtTbN3GRK/UmLNgjpr07Wf48bvH32HebcZ4/89Okda7fyCYKHKrYf0gXtAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUuGbiHcocyQ6Cls+e4vebmden8MAwHwYDVR0j
BBgwFoAUelpYaAoF182mivfAmKpeHR22UTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDhmMzliZDQtY2RhYy00MWNmLTg4NTgtZDc0MTBmNjRkMTU1LzAvN0E1QTU4Njgw
QTA1RDdDREE2OEFGN0MwOThBQTVFMUQxREI2NTEzNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QTVBNTg2ODBBMDVEN0NEQTY4QUY3QzA5OEFBNUUxRDFEQjY1
MTM2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ4ZjM5YmQ0LWNkYWMtNDFjZi04
ODU4LWQ3NDEwZjY0ZDE1NS8wLzMxMzAzMzJlMzIzMzJlMzIzMzMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcX6TANBgkqhkiG
9w0BAQsFAAOCAQEAc1KiRKjF7+kbiEWB9sz9sPDzR1DQD65tB2Tll42PnKDa+ign
d/Xh3Da9uqRcp27Z9ZtJimHPYRaDFNGP7y2ceKrd7yM3moPsPfrGOq2T5yiTsHU4
VD58YFuRp6wW7c+qKZ381Jfy+NFjH+5I94VPHHXiYLTLb8rHaJnt1+qugh1xIguJ
no6dHxTe1vIY0W01DU6Du8GOkijlJozS0eRV0JfBuN3bvit/4o5lVEXvSx/YlMmK
6CYoc3598jPauXjjI0QYk4axbgMr4pDzHLtJSYlCcnPmGVQ0S1U2qQzzCwBLQtT/
6UtVJ+DizOLWftLa1ZLJbqoKXHXKlQQ6kETn1g==
-----END CERTIFICATE-----
Generated at Wed May 13 06:08:04 2026 by rpki-client