
$ rpki-client -vvf rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa
File: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (raw, json)
Hash identifier: JtYJWwvzpXOf4hheAO+k8IOGayyc4dYyOp8DCvruUrg=
Subject key identifier: BE:60:D5:B6:F4:CD:26:9D:6C:10:A8:C2:A9:16:8A:08:DA:0C:8F:E2
Certificate issuer: /CN=CB1DBC8005A976151FCB40B190D2FB007257926D
Certificate serial: 034D69CB0EAC5D8FE77E4A715597DF622C9B7273
Authority key identifier: CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa
Signing time: Sun 03 May 2026 02:32:43 +0000
ROA not before: Sun 03 May 2026 02:27:43 +0000
ROA not after: Sun 02 May 2027 02:32:43 +0000
asID: 140404
IP address blocks: 103.151.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl
rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4d:69:cb:0e:ac:5d:8f:e7:7e:4a:71:55:97:df:62:2c:9b:72:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB1DBC8005A976151FCB40B190D2FB007257926D
Validity
Not Before: May 3 02:27:43 2026 GMT
Not After : May 2 02:32:43 2027 GMT
Subject: CN=BE60D5B6F4CD269D6C10A8C2A9168A08DA0C8FE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:33:dd:aa:c0:19:ba:e8:b0:22:66:ae:d3:
9a:74:cc:07:22:6d:4e:b8:21:b4:e1:93:78:e1:6f:
7e:c8:2d:24:fe:da:f3:31:0e:21:a6:36:25:85:45:
de:67:8a:cd:04:67:97:80:e0:84:8a:e3:4e:47:69:
91:b3:76:c6:38:d6:38:93:a2:58:bb:ef:89:90:3f:
e3:31:0b:09:68:3d:e4:c6:d2:4a:bc:c1:21:f0:3f:
a3:26:18:a0:d5:53:00:9e:c7:4f:8a:9e:1d:ae:7c:
e8:c3:da:05:6d:c0:f6:bf:f3:78:9f:57:47:7e:60:
60:d3:c9:2d:1b:e6:e5:8c:bb:62:d7:b9:30:39:b1:
1c:e5:3c:41:dd:04:2c:06:4c:fa:08:34:c9:14:eb:
c4:ac:a7:01:d4:51:50:b1:ca:16:4b:99:91:fe:ce:
d5:0d:35:a8:a1:44:fc:ba:eb:f1:fe:4b:d3:ee:ad:
33:6a:5b:6d:7d:2e:75:04:4d:dd:8f:3d:d4:94:18:
2f:34:fe:ae:aa:d9:e4:f0:a0:e2:1b:cb:22:aa:d4:
4a:ac:5b:7b:8a:db:5e:fd:20:b5:fe:8a:a0:7e:36:
d6:99:b3:fc:cd:8d:13:76:fb:85:64:fe:42:55:e6:
40:97:67:e8:1c:8b:09:d0:82:19:82:d4:58:60:e0:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:60:D5:B6:F4:CD:26:9D:6C:10:A8:C2:A9:16:8A:08:DA:0C:8F:E2
X509v3 Authority Key Identifier:
keyid:CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.151.23.0/24
Signature Algorithm: sha256WithRSAEncryption
01:cf:b7:80:3b:9f:61:c5:e4:27:1f:63:a5:00:7a:be:fd:d5:
fc:fb:ec:3c:1d:58:85:80:31:fd:04:89:ab:fe:df:4c:e2:20:
9f:41:44:17:01:9f:ab:b4:21:36:cb:c1:b4:f9:fa:b9:65:1c:
67:e6:4f:8a:95:f4:94:9b:a5:4e:57:41:e6:71:77:7c:b0:6d:
6a:8b:06:cc:df:db:62:cd:3d:3d:00:71:f0:59:a9:30:17:9e:
7d:32:d9:9c:87:2b:27:4d:a7:89:21:04:1c:e5:eb:63:14:1a:
71:e4:6c:9c:b4:d5:40:20:a6:58:4c:05:36:0f:6b:b1:11:ef:
db:20:3b:f5:4f:2b:8f:ac:ea:a3:5c:f5:b9:d7:39:1d:96:84:
73:03:bd:58:2f:03:da:c3:27:4a:e6:99:45:1d:f1:72:41:d8:
2a:f2:f6:6e:a7:1e:83:e7:29:f4:87:6c:07:75:f7:dc:ad:a9:
47:49:f4:b9:c0:c3:32:eb:91:5c:e9:a3:11:bd:e8:68:e8:f2:
f6:ca:94:89:73:ab:b6:c1:49:91:6a:52:02:19:33:d7:e6:bd:
fc:05:d0:da:15:3e:1b:09:83:a9:fe:39:01:3f:36:56:d9:e8:
80:a7:d5:a4:e6:06:8e:c1:2d:a9:4b:5f:bb:6a:82:2d:3b:04:
8e:5a:be:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:31 2026 by rpki-client