
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32372e302f32342d3234203d3e20313530323832.roa
File: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (raw, json)
Hash identifier: qLtwF3ISuvLzArijpMOF5fAjENE5AmrknqjjuwJX4QM=
Subject key identifier: 71:B9:66:EF:DB:C3:43:66:3B:A3:A5:1C:9F:45:65:7A:DC:19:9A:CF
Certificate issuer: /CN=286FEF74182957F840C8CD66D505DD9A8BF4A606
Certificate serial: 5FEB9E84BC55001CA532CD290E33BE1FCDA2A607
Authority key identifier: 28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32372e302f32342d3234203d3e20313530323832.roa
Signing time: Sun 03 May 2026 02:32:50 +0000
ROA not before: Sun 03 May 2026 02:27:50 +0000
ROA not after: Sun 02 May 2027 02:32:50 +0000
asID: 150282
IP address blocks: 103.43.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl
rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:eb:9e:84:bc:55:00:1c:a5:32:cd:29:0e:33:be:1f:cd:a2:a6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286FEF74182957F840C8CD66D505DD9A8BF4A606
Validity
Not Before: May 3 02:27:50 2026 GMT
Not After : May 2 02:32:50 2027 GMT
Subject: CN=71B966EFDBC343663BA3A51C9F45657ADC199ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:86:80:6a:ec:18:7d:83:ea:0c:e0:86:12:
d5:ea:d7:f5:93:18:f9:f9:32:b0:b0:c8:9e:e6:b9:
f7:00:b3:c4:a2:4e:9e:33:f3:c8:97:1f:39:55:e9:
02:2e:df:92:da:c8:38:39:1b:f5:a9:ea:12:8b:6e:
44:e3:56:ef:da:3e:a0:89:94:6e:af:09:62:ae:14:
14:a4:eb:d7:50:ef:a5:cc:25:11:d6:64:c0:a6:ad:
65:15:c1:5d:f6:30:30:0d:2e:a7:29:e1:4b:fa:df:
0f:fc:7e:5d:a8:37:55:71:03:e8:0d:c4:28:cb:81:
51:a7:22:5b:41:f5:12:5d:17:bd:ab:3c:f9:3c:39:
f7:ec:8a:3c:74:ec:5b:66:1c:9c:f3:c7:33:e2:d3:
a8:a4:61:e2:9f:32:b4:2c:9c:cd:ff:07:f2:5e:4b:
d9:51:3d:db:72:3a:58:72:6f:f2:8c:4b:b8:48:8a:
31:2f:e0:d5:36:c3:7a:2a:7d:79:a5:16:b9:5d:3f:
67:ee:3c:34:3e:97:bc:8f:f7:f3:45:ac:d8:f5:b7:
73:02:40:dc:aa:f5:c7:bf:3a:7e:6a:16:23:56:34:
18:7b:1f:2d:77:5f:59:94:ef:2e:44:89:74:c5:55:
6d:11:78:c2:50:13:a6:bb:09:ad:ca:0f:46:71:70:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:66:EF:DB:C3:43:66:3B:A3:A5:1C:9F:45:65:7A:DC:19:9A:CF
X509v3 Authority Key Identifier:
keyid:28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32372e302f32342d3234203d3e20313530323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.27.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7b:ca:98:21:c1:d9:21:c2:cd:90:37:6a:36:dc:a9:f9:1f:
15:28:ca:fd:9d:72:c5:26:00:1c:83:85:76:da:e9:6d:0e:66:
c3:64:b0:2a:db:64:bd:ce:ec:d9:e1:b9:af:5f:4f:6e:eb:04:
7b:3e:9f:df:2f:4d:32:cd:0e:7e:14:47:ba:5d:2f:44:3a:ad:
b0:fa:37:a1:15:1b:49:fe:57:96:a0:d9:9a:f5:8f:ec:8b:f6:
1a:51:18:2e:5a:5f:cd:0a:00:4b:7a:95:7d:df:2e:2b:ed:1b:
8f:b8:2b:fa:d7:e7:cc:14:1e:e1:d2:7d:c8:34:65:10:70:31:
fa:98:fe:96:64:fc:fa:62:4a:c5:94:c5:93:8f:cf:3d:bd:fe:
07:a8:b1:31:20:57:ae:d5:88:54:84:02:4a:36:a4:a0:95:0c:
1d:bc:0a:1e:c3:01:4e:66:48:ab:42:9c:ec:30:17:96:42:42:
bd:1e:e4:35:6e:c2:7d:93:2c:db:3b:d6:09:4b:e3:b8:da:2e:
ea:59:57:a5:9a:66:e8:ca:ad:eb:2d:89:23:63:99:57:b0:20:
0c:30:02:74:ff:f4:a3:f1:3c:aa:6b:6f:03:74:d4:86:23:f4:
79:c8:15:8a:e9:e8:ec:5a:32:af:a8:a9:ae:04:f2:3c:e8:c9:
d6:bb:0d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:36 2026 by rpki-client