
$ rpki-client -vvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa
File: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (raw, json)
Hash identifier: v65XV+5ddOqAbRU1/IxSl2v0vrbo4M4xD55oScBfz3w=
Subject key identifier: 32:3B:99:2B:76:E7:87:5B:E9:33:55:BF:73:24:DD:32:50:47:32:D1
Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481
Certificate serial: 258EE87DB694B6572D7AEDD3A748C3F9FE20515C
Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa
Signing time: Sun 03 May 2026 02:33:15 +0000
ROA not before: Sun 03 May 2026 02:28:15 +0000
ROA not after: Sun 02 May 2027 02:33:15 +0000
asID: 136052
IP address blocks: 103.15.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl
rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:8e:e8:7d:b6:94:b6:57:2d:7a:ed:d3:a7:48:c3:f9:fe:20:51:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481
Validity
Not Before: May 3 02:28:15 2026 GMT
Not After : May 2 02:33:15 2027 GMT
Subject: CN=323B992B76E7875BE93355BF7324DD32504732D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:21:d0:41:d6:60:96:cc:02:7a:d6:05:9d:
81:65:c3:7c:02:69:42:d8:9c:54:c9:cb:3d:f8:c0:
19:8e:f1:2a:92:ef:37:0e:fc:94:0d:5d:e9:d0:ed:
ed:c7:16:85:0f:83:78:4c:fb:6f:46:9d:84:34:17:
69:38:64:49:30:e7:45:e0:d2:0a:ba:2b:91:5f:6b:
10:c9:a1:4e:b2:9f:b2:35:84:c7:5d:67:54:5b:bc:
8d:a1:45:ef:db:64:4a:a9:b4:46:c5:5d:a7:5b:0e:
e2:ed:8e:17:84:67:1f:20:01:2d:c4:f6:02:74:50:
e8:85:e7:38:d6:e3:85:3d:10:17:c4:9c:92:04:4b:
19:67:e9:35:6a:7a:f0:b9:0d:c2:5c:18:f3:fb:1d:
95:fd:77:93:4b:9e:99:af:ed:c7:d7:c7:a4:44:bc:
d8:da:e8:f9:54:50:56:d4:b7:40:ff:e9:42:20:4f:
5a:09:5f:52:8c:bd:8f:e3:0d:3f:b0:2a:b4:cf:7d:
b8:ff:51:a1:70:3d:79:f6:3a:75:7d:ae:54:81:38:
1b:a0:33:d0:e6:c8:38:42:f1:f2:3f:26:7e:22:bd:
82:a1:7d:7b:25:be:54:0b:e4:b8:70:34:66:82:7e:
e4:d4:63:a9:65:8d:f9:08:7b:67:4d:ed:e7:67:1a:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3B:99:2B:76:E7:87:5B:E9:33:55:BF:73:24:DD:32:50:47:32:D1
X509v3 Authority Key Identifier:
keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.15.226.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:29:2a:2c:ca:63:47:44:55:c9:79:5a:65:d1:07:b6:f8:cd:
5f:f9:0b:2a:6c:86:47:02:1c:f1:21:3f:23:1e:96:fd:08:86:
e4:2f:24:d0:93:20:32:50:c5:1d:0a:03:23:83:18:cd:1a:31:
ed:04:6d:70:5d:3e:5d:f2:9e:2f:cc:9e:5f:f1:62:f7:0a:c1:
a3:ad:b9:dc:63:ea:22:a8:52:3f:4b:f1:d0:12:87:93:9c:ff:
c0:87:84:78:f6:be:dd:2d:32:7a:4a:6c:6c:60:f0:7c:bc:66:
79:a8:16:59:cd:e1:c7:01:ad:a6:60:8a:9e:2c:3c:c3:e1:8d:
f7:6e:66:47:7e:4f:bd:93:e6:6b:e7:5a:65:98:12:a2:a4:66:
53:9e:2e:7e:e0:fb:42:5c:88:2d:94:6f:ca:f9:7e:38:67:de:
fa:45:5f:1a:fa:90:76:29:29:3c:f5:53:6c:68:d7:6e:58:27:
56:02:47:21:ec:d6:60:b7:6c:76:a1:c1:67:e9:c3:51:9d:7d:
6a:aa:7a:20:3a:86:9c:60:6e:51:d1:80:8c:b1:73:13:9a:f8:
c1:06:c7:07:61:fc:2f:34:21:2f:42:ac:ba:5f:04:5a:c6:ba:
66:04:1e:52:b0:7f:03:39:f4:00:a7:43:2a:88:4b:47:9a:44:
e2:06:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:10 2026 by rpki-client