
$ rpki-client -vvf rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa
File: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (raw, json)
Hash identifier: eqd0E+Lb4EVtDoQqymHQTLKTQ6HfKOpFx++L2qv+u+A=
Subject key identifier: 47:25:07:1B:0A:EA:B9:23:31:1D:18:33:E0:64:51:2D:68:4B:07:88
Certificate issuer: /CN=3559C104797053AE8E5C72BE7726BF44C2878CF1
Certificate serial: 2AD00BC13444B202CD9CCE1636A3909693D66783
Authority key identifier: 35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa
Signing time: Sun 03 May 2026 02:33:00 +0000
ROA not before: Sun 03 May 2026 02:28:00 +0000
ROA not after: Sun 02 May 2027 02:33:00 +0000
asID: 149951
IP address blocks: 103.111.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl
rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d0:0b:c1:34:44:b2:02:cd:9c:ce:16:36:a3:90:96:93:d6:67:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3559C104797053AE8E5C72BE7726BF44C2878CF1
Validity
Not Before: May 3 02:28:00 2026 GMT
Not After : May 2 02:33:00 2027 GMT
Subject: CN=4725071B0AEAB923311D1833E064512D684B0788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:f9:cd:4d:70:21:27:34:e0:da:4b:54:8a:
76:9d:ba:90:2c:09:a0:73:2c:9a:03:d3:c9:53:22:
aa:69:a2:58:8d:7c:80:49:e0:fa:71:28:e7:a4:78:
fd:2b:54:a0:be:65:1a:f8:c9:0d:4d:36:98:99:b8:
35:27:ad:b0:99:09:aa:1d:9b:00:49:30:5e:cc:f6:
76:61:9e:25:ac:a2:4d:f8:3e:81:16:4a:be:b1:ac:
fe:dc:32:e5:ae:b8:6a:39:d0:2e:83:b6:fb:4f:5d:
e9:b6:f3:c8:64:46:ca:eb:4d:ce:ab:f8:cf:2f:fd:
00:fd:1b:42:d4:3b:51:da:48:c8:cc:c6:78:8d:cd:
a9:83:97:47:69:1e:d8:33:d5:ff:00:bc:e0:2f:98:
66:ea:42:04:f3:4b:95:0d:95:0b:d9:6b:96:a4:2c:
38:8c:12:51:5a:a7:e4:da:3d:af:02:b9:3e:64:84:
46:cf:0c:42:c0:12:ab:21:8a:d8:fa:6c:9f:ec:ee:
c8:22:5d:7c:bd:15:93:f2:58:75:e3:b2:13:2e:0b:
26:78:82:42:dd:d2:35:04:f6:df:7c:4c:2a:09:bc:
fe:d2:51:64:f7:f8:2e:27:d2:85:89:10:d7:fc:48:
1b:1b:d1:9b:97:59:ed:9a:95:88:8a:f1:95:1c:d4:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:25:07:1B:0A:EA:B9:23:31:1D:18:33:E0:64:51:2D:68:4B:07:88
X509v3 Authority Key Identifier:
keyid:35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.111.119.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:50:78:eb:38:61:fa:07:a8:6d:db:ed:7b:ff:bb:40:05:ce:
d3:3b:16:cd:d8:16:16:13:a6:f5:12:12:58:19:fc:31:6f:87:
b7:5b:c5:be:94:3d:d4:63:12:62:ff:75:b3:5c:b8:49:6b:a3:
c4:91:0d:82:3f:b5:9d:9d:42:f2:71:af:95:ca:dd:53:b7:74:
52:b7:8a:bc:1e:5a:7d:0a:0b:61:83:9b:ab:61:a5:e0:93:80:
23:f7:c6:e6:11:d5:e5:bb:98:82:eb:b5:44:1e:44:ec:7e:07:
51:27:4e:06:c4:40:74:c3:e9:72:4c:11:15:45:3e:25:dd:9e:
10:a3:58:8b:a6:24:d7:74:40:7f:e2:10:d2:2a:4a:c2:25:11:
b4:6e:2e:18:b3:f4:04:dc:89:9e:3c:1c:b5:c8:7e:a0:a5:5a:
9f:46:86:98:5b:a3:d5:7d:9d:eb:6d:56:fd:a7:2c:7c:75:1e:
5f:1d:29:e1:34:b5:e3:49:4d:bc:e9:db:41:ea:8b:b3:59:7c:
ab:87:7d:42:db:92:0c:d6:74:d1:20:4c:ac:f6:e1:e9:ef:92:
72:5b:f1:d8:6f:46:7f:38:f9:ce:4f:e5:62:34:df:a9:28:05:
f8:20:a7:11:d7:05:8d:89:bc:22:d4:b4:98:5d:73:61:3d:86:
f2:88:4d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:09 2026 by rpki-client