
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa
File: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (raw, json)
Hash identifier: ohDVM2o2IOUVSNhwh1E7felK+Pc0SKnjsPpIi1yZSaw=
Subject key identifier: 2F:02:ED:60:19:4B:01:D0:E8:D6:6B:61:10:76:37:84:7E:86:53:62
Certificate issuer: /CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116
Certificate serial: 31F494EC18559F7F23287D9835B9D54C99A2EB8F
Authority key identifier: 25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa
Signing time: Sun 03 May 2026 02:32:18 +0000
ROA not before: Sun 03 May 2026 02:27:18 +0000
ROA not after: Sun 02 May 2027 02:32:18 +0000
asID: 136070
IP address blocks: 103.157.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl
rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f4:94:ec:18:55:9f:7f:23:28:7d:98:35:b9:d5:4c:99:a2:eb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116
Validity
Not Before: May 3 02:27:18 2026 GMT
Not After : May 2 02:32:18 2027 GMT
Subject: CN=2F02ED60194B01D0E8D66B61107637847E865362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:4d:53:e1:10:e3:20:06:e5:78:50:87:12:
a4:e8:34:72:8a:e7:c3:8f:29:d3:9c:ca:65:80:07:
5c:03:99:bc:6d:0d:27:f8:df:28:d4:23:73:7c:4a:
2a:65:6e:2b:b1:f8:c3:61:41:ae:63:0e:ea:93:e1:
fc:cd:39:63:24:22:8e:8e:26:6d:19:06:fe:c8:11:
c4:94:b5:84:43:29:7e:13:71:72:28:ab:03:52:89:
ac:25:0c:d2:a1:ca:6f:f9:19:75:5f:1f:62:d5:6f:
50:66:93:f6:be:58:bc:2b:91:1c:d5:a9:d9:75:e9:
1c:d0:52:86:45:7c:ae:13:9e:4e:82:8e:3d:1a:d5:
9d:e9:f1:ac:c2:60:d2:2e:77:1d:fb:ea:11:3d:2b:
15:05:05:ed:8a:d3:82:55:23:5d:5e:97:33:4b:e1:
f3:f8:f5:ef:9b:8a:03:72:46:97:4f:11:71:6d:a1:
8b:95:13:76:67:a3:fb:70:aa:03:b4:fe:1a:55:ac:
11:51:d2:ba:02:ab:3d:29:0c:49:e3:af:90:5f:e3:
89:9a:c4:1b:e2:12:54:a9:00:30:03:26:22:49:d4:
15:b5:f9:05:1a:0b:5c:62:63:e2:5c:1c:fe:af:91:
df:8b:bd:4c:c4:f6:b7:36:df:82:62:90:9e:79:ec:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:02:ED:60:19:4B:01:D0:E8:D6:6B:61:10:76:37:84:7E:86:53:62
X509v3 Authority Key Identifier:
keyid:25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.157.55.0/24
Signature Algorithm: sha256WithRSAEncryption
45:38:57:e0:8c:b8:fa:ff:fa:eb:ff:11:a0:4c:71:57:c1:12:
60:a2:47:96:24:40:eb:7e:9e:c5:70:55:43:f3:ce:da:e4:59:
28:ad:15:51:16:fc:1f:bd:2c:b6:df:49:1b:c0:b7:33:15:1d:
c7:6e:9d:f9:eb:16:8f:1c:62:af:17:e9:08:b0:c5:a5:d9:e9:
66:8d:a3:b6:43:f7:2b:1e:0b:72:a1:ae:8c:44:cf:62:73:e0:
50:c5:17:59:92:5f:f0:8e:1b:ab:97:c4:53:8b:10:2b:d1:66:
bb:ac:76:8b:85:7f:3b:dd:2f:54:5e:eb:de:cc:44:13:0a:ba:
f8:64:75:3f:60:00:c1:34:c3:5e:c3:79:ee:cf:7a:f0:52:72:
11:72:59:21:35:a0:bb:f0:2c:de:76:cb:3c:24:e0:7b:6a:e5:
8b:0a:5f:38:6d:e3:22:e8:75:0d:3e:37:ac:27:3b:3f:95:8a:
ac:a1:1e:3d:83:5c:8d:85:2b:67:6a:e7:8e:c4:b4:8e:5f:b4:
0f:2a:b5:ce:fe:44:01:4f:43:65:fb:5b:3e:8e:56:f9:a9:3c:
b2:3e:5a:65:21:95:5a:08:60:95:e7:ad:e6:38:7a:6f:db:80:
e2:6b:40:49:d3:28:1c:3f:3c:11:ff:f1:92:72:19:6b:f3:2c:
c9:50:36:3d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMfSU7BhVn38jKH2YNbnVTJmi648wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2
Q0Q4NDExNjAeFw0yNjA1MDMwMjI3MThaFw0yNzA1MDIwMjMyMThaMDMxMTAvBgNV
BAMTKDJGMDJFRDYwMTk0QjAxRDBFOEQ2NkI2MTEwNzYzNzg0N0U4NjUzNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXk1T4RDjIAbleFCHEqToNHKK
58OPKdOcymWAB1wDmbxtDSf43yjUI3N8Siplbiux+MNhQa5jDuqT4fzNOWMkIo6O
Jm0ZBv7IEcSUtYRDKX4TcXIoqwNSiawlDNKhym/5GXVfH2LVb1Bmk/a+WLwrkRzV
qdl16RzQUoZFfK4Tnk6Cjj0a1Z3p8azCYNIudx376hE9KxUFBe2K04JVI11elzNL
4fP49e+bigNyRpdPEXFtoYuVE3Zno/twqgO0/hpVrBFR0roCqz0pDEnjr5Bf44ma
xBviElSpADADJiJJ1BW1+QUaC1xiY+JcHP6vkd+LvUzE9rc234JikJ557PNTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQULwLtYBlLAdDo1mthEHY3hH6GU2IwHwYDVR0j
BBgwFoAUJcKs/7g2GWVmo7zONCHbuWzYQRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGYzNzc3MTEtMWUzZC00ZTVhLWE0YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZC
ODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2Q0Q4NDExNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNUMyQUNGRkI4MzYxOTY1NjZBM0JDQ0UzNDIxREJCOTZDRDg0
MTE2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRmMzc3NzExLTFlM2QtNGU1YS1h
NGFjLTA1YTFjNTAyYWQyOC8wLzMxMzAzMzJlMzEzNTM3MmUzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ503MA0GCSqG
SIb3DQEBCwUAA4IBAQBFOFfgjLj6//rr/xGgTHFXwRJgokeWJEDrfp7FcFVD887a
5FkorRVRFvwfvSy230kbwLczFR3Hbp356xaPHGKvF+kIsMWl2elmjaO2Q/crHgty
oa6MRM9ic+BQxRdZkl/wjhurl8RTixAr0Wa7rHaLhX873S9UXuvezEQTCrr4ZHU/
YADBNMNew3nuz3rwUnIRclkhNaC78Czedss8JOB7auWLCl84beMi6HUNPjesJzs/
lYqsoR49g1yNhStnaueOxLSOX7QPKrXO/kQBT0Nl+1s+jlb5qTyyPlplIZVaCGCV
563mOHpv24Dia0BJ0ygcPzwR//GSchlr8yzJUDY9
-----END CERTIFICATE-----
Generated at Wed May 13 11:59:27 2026 by rpki-client