
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa
File: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier: p5VGWtHjvpIWNYWejy2oeQf0oISTWP+7YBr4TnXtjDM=
Subject key identifier: 11:82:2F:58:BD:60:95:2E:9F:BF:12:F2:AC:F5:78:1F:F2:FC:B4:BD
Certificate issuer: /CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116
Certificate serial: 31194EB3C66DFE2D5806E584360625FE5A1A9A02
Authority key identifier: 25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa
Signing time: Sun 03 May 2026 02:32:17 +0000
ROA not before: Sun 03 May 2026 02:27:17 +0000
ROA not after: Sun 02 May 2027 02:32:17 +0000
asID: 396982
IP address blocks: 103.157.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl
rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:19:4e:b3:c6:6d:fe:2d:58:06:e5:84:36:06:25:fe:5a:1a:9a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116
Validity
Not Before: May 3 02:27:17 2026 GMT
Not After : May 2 02:32:17 2027 GMT
Subject: CN=11822F58BD60952E9FBF12F2ACF5781FF2FCB4BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:b5:12:45:bf:7a:f3:b5:54:98:fd:ba:04:
76:1f:ff:8b:83:9e:a6:d0:62:24:6b:f8:fd:eb:96:
1e:b0:1c:58:dd:5b:5a:7c:68:ed:30:c0:46:00:af:
a6:b9:c9:a8:86:92:cf:b0:9f:a2:7d:d3:3d:43:e2:
27:a7:5b:a6:4a:bb:66:44:98:25:91:92:62:c4:0c:
71:aa:b8:41:6e:bd:d4:65:31:f6:49:4b:29:81:01:
ab:33:e7:9e:74:51:2a:ee:95:b7:bb:d2:57:2d:dc:
92:2e:ad:e9:ac:e7:1a:40:32:29:fc:d1:af:18:47:
bd:fc:de:86:9b:a3:70:ae:19:a5:ca:fb:35:9f:88:
00:19:a6:13:73:80:ff:4d:95:af:4c:dd:f3:53:26:
f6:4c:54:79:7e:8a:d5:f5:cb:7c:2c:b8:95:e8:a2:
14:7d:df:d7:e5:bc:f1:a4:1b:b7:d7:c1:04:cc:85:
a2:25:f8:e3:89:39:73:04:ba:9c:96:59:1f:ca:af:
74:bd:3e:81:88:bb:be:95:55:a3:fd:b4:ea:cc:2f:
f7:66:9b:37:31:39:5c:b0:0f:cd:54:da:e6:c7:0e:
17:89:72:1a:e3:04:a5:80:f7:d8:9d:32:3c:ae:53:
47:e1:93:78:42:66:83:0f:89:ae:c8:82:ac:3d:85:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:82:2F:58:BD:60:95:2E:9F:BF:12:F2:AC:F5:78:1F:F2:FC:B4:BD
X509v3 Authority Key Identifier:
keyid:25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.157.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e2:d1:c5:fb:f4:bb:a4:ca:2e:c2:9f:25:c4:e2:be:52:ae:
fe:23:f8:cd:6f:42:7d:20:b0:c4:aa:f1:3b:79:ab:b5:e4:75:
ab:03:20:8a:00:c5:8e:15:50:ab:95:fb:c3:4d:1c:e8:8b:3e:
90:d5:9f:e8:f3:36:86:d7:12:df:91:4f:33:72:90:24:66:2c:
f6:bf:ef:4d:15:14:f0:5a:86:47:90:c1:91:56:67:d4:d6:23:
72:48:cc:3a:52:cf:dd:0a:1a:82:5b:b7:c1:1b:74:89:0c:ac:
16:b3:b4:b6:b0:cc:37:c7:09:89:ee:0c:5c:37:53:78:05:eb:
6a:2f:6b:07:1e:e9:99:33:04:17:bb:9b:37:45:aa:2c:90:5a:
dc:dc:b3:15:0d:ef:43:db:c6:f4:3b:bc:75:82:ed:c3:6a:a9:
1c:e6:9d:8b:27:d9:b1:e9:5e:ea:c1:09:aa:21:52:03:40:30:
9b:c0:23:6a:3e:4a:dd:48:49:56:df:51:8b:cd:44:60:25:e8:
fe:58:50:ca:51:f2:74:3d:ba:20:91:95:ed:c5:c3:2a:1e:de:
fd:7d:e6:52:18:16:2c:63:35:ef:2f:2b:aa:05:f7:7e:df:b6:
dd:12:cb:1f:ec:bd:37:ef:f6:58:46:84:17:3e:3c:57:e3:10:
64:5b:d5:ab
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMRlOs8Zt/i1YBuWENgYl/loamgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2
Q0Q4NDExNjAeFw0yNjA1MDMwMjI3MTdaFw0yNzA1MDIwMjMyMTdaMDMxMTAvBgNV
BAMTKDExODIyRjU4QkQ2MDk1MkU5RkJGMTJGMkFDRjU3ODFGRjJGQ0I0QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKrbUSRb9687VUmP26BHYf/4uD
nqbQYiRr+P3rlh6wHFjdW1p8aO0wwEYAr6a5yaiGks+wn6J90z1D4ienW6ZKu2ZE
mCWRkmLEDHGquEFuvdRlMfZJSymBAasz5550USrulbe70lct3JIurems5xpAMin8
0a8YR7383oabo3CuGaXK+zWfiAAZphNzgP9Nla9M3fNTJvZMVHl+itX1y3wsuJXo
ohR939flvPGkG7fXwQTMhaIl+OOJOXMEupyWWR/Kr3S9PoGIu76VVaP9tOrML/dm
mzcxOVywD81U2ubHDheJchrjBKWA99idMjyuU0fhk3hCZoMPia7Igqw9hWg1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUEYIvWL1glS6fvxLyrPV4H/L8tL0wHwYDVR0j
BBgwFoAUJcKs/7g2GWVmo7zONCHbuWzYQRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGYzNzc3MTEtMWUzZC00ZTVhLWE0YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZC
ODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2Q0Q4NDExNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNUMyQUNGRkI4MzYxOTY1NjZBM0JDQ0UzNDIxREJCOTZDRDg0
MTE2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRmMzc3NzExLTFlM2QtNGU1YS1h
NGFjLTA1YTFjNTAyYWQyOC8wLzMxMzAzMzJlMzEzNTM3MmUzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzOTM2MzkzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ503MA0GCSqG
SIb3DQEBCwUAA4IBAQBK4tHF+/S7pMouwp8lxOK+Uq7+I/jNb0J9ILDEqvE7eau1
5HWrAyCKAMWOFVCrlfvDTRzoiz6Q1Z/o8zaG1xLfkU8zcpAkZiz2v+9NFRTwWoZH
kMGRVmfU1iNySMw6Us/dChqCW7fBG3SJDKwWs7S2sMw3xwmJ7gxcN1N4BetqL2sH
HumZMwQXu5s3RaoskFrc3LMVDe9D28b0O7x1gu3Daqkc5p2LJ9mx6V7qwQmqIVID
QDCbwCNqPkrdSElW31GLzURgJej+WFDKUfJ0PbogkZXtxcMqHt79feZSGBYsYzXv
LyuqBfd+37bdEssf7L037/ZYRoQXPjxX4xBkW9Wr
-----END CERTIFICATE-----
Generated at Wed May 13 07:45:06 2026 by rpki-client