
$ rpki-client -vvf rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
File: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (raw, json)
Hash identifier: TDHHkU7auhZbGybqQy/XY5A0u3/rxbPGk544rbieSIw=
Subject key identifier: 84:5A:A6:02:DE:48:B3:9B:EE:C5:AB:9F:B9:93:53:C8:58:BD:2B:7C
Certificate issuer: /CN=3559C104797053AE8E5C72BE7726BF44C2878CF1
Certificate serial: 15D8D0C3A8C2E1AAA95DA591572EADEF8B063C90
Authority key identifier: 35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
Signing time: Sun 03 May 2026 02:33:00 +0000
ROA not before: Sun 03 May 2026 02:28:00 +0000
ROA not after: Sun 02 May 2027 02:33:00 +0000
asID: 149951
IP address blocks: 103.111.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl
rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d8:d0:c3:a8:c2:e1:aa:a9:5d:a5:91:57:2e:ad:ef:8b:06:3c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3559C104797053AE8E5C72BE7726BF44C2878CF1
Validity
Not Before: May 3 02:28:00 2026 GMT
Not After : May 2 02:33:00 2027 GMT
Subject: CN=845AA602DE48B39BEEC5AB9FB99353C858BD2B7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:be:f1:d7:1c:f5:9b:f2:46:3a:6f:02:77:
2a:db:67:3a:c9:6b:19:40:05:e9:9c:f8:72:fc:a4:
aa:1f:09:3c:1c:94:42:0b:96:53:60:36:1e:e1:54:
ff:4c:c4:3a:eb:13:90:8e:b2:06:31:a9:01:f2:f8:
28:6e:e6:42:e3:ea:5b:19:94:99:28:c2:20:7c:63:
7e:14:31:28:da:4b:3e:9e:b1:e2:d9:5a:70:84:5c:
e7:00:34:49:2d:80:11:fd:4b:ce:db:41:15:8d:5b:
82:f8:59:84:87:fd:9e:05:60:33:58:5c:d0:83:ec:
6f:f1:a7:c4:54:05:17:93:0b:11:94:76:c9:3e:f9:
3e:d2:3d:8d:41:61:77:8d:5a:94:45:8a:d9:a7:d0:
4d:89:99:59:b4:c1:5e:cf:c4:51:02:87:c4:91:51:
e1:50:78:7b:88:a6:58:a6:13:9b:ef:55:65:c3:33:
dc:b2:e6:95:46:45:77:a5:6e:40:a2:14:31:b6:d4:
79:11:b2:a9:75:84:73:98:3e:3a:ad:db:7e:e4:7b:
f3:ce:bd:93:4a:c1:11:81:30:e7:f3:7f:de:45:a9:
21:bb:f8:7c:75:72:62:95:e0:7e:c9:e7:f6:2c:9d:
54:ca:65:a1:55:c7:c8:e8:81:5b:71:64:06:14:af:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5A:A6:02:DE:48:B3:9B:EE:C5:AB:9F:B9:93:53:C8:58:BD:2B:7C
X509v3 Authority Key Identifier:
keyid:35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.111.118.0/24
Signature Algorithm: sha256WithRSAEncryption
99:87:9a:ac:54:1c:76:98:bd:59:7c:e2:c4:b1:2d:0d:3e:be:
bd:27:24:ab:df:b5:ab:68:99:d1:ba:da:c7:6a:0f:a9:7f:cf:
b9:0c:f8:1c:0a:a8:02:3f:b8:4c:4b:15:c4:12:64:03:72:22:
3f:27:36:2b:2b:d3:4f:21:0a:dd:58:5d:6a:fc:2d:f9:52:39:
ce:69:1a:a9:c9:3f:71:ec:47:e5:d9:cb:18:d6:83:b5:25:f0:
30:95:36:b6:0b:25:ff:82:09:03:5f:34:94:d0:65:a9:a9:6b:
c8:9b:61:4a:5c:6e:d7:48:a0:28:1c:59:28:e9:68:ae:9c:50:
fa:20:13:15:30:74:e2:93:15:a5:9a:0f:3d:9b:b7:bc:83:c2:
8b:d1:29:39:89:77:5e:76:90:7c:66:3b:38:f2:40:c3:f2:d6:
d6:dc:4d:e1:6b:ea:ee:19:9a:9e:5a:ac:bd:77:76:28:f6:71:
d5:ae:f3:31:d9:0b:b7:e0:c5:d1:b9:76:69:c9:50:e0:a4:d0:
b8:79:8a:58:cd:26:df:4f:59:47:d4:d0:58:8c:a0:e3:ac:2c:
56:20:c9:d2:75:28:54:c2:c0:a0:ce:15:7e:88:dd:4b:ab:0b:
7a:09:46:3e:45:03:f5:3e:6b:c5:34:09:9b:ab:10:d2:5c:b8:
0f:f5:46:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:13 2026 by rpki-client