
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32322d3234203d3e203436303233.roa
File: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (raw, json)
Hash identifier: iUY+SdN+QQAOG22XorTDG8S2mJg0a1nPIepKaYKt6FE=
Subject key identifier: 14:AD:E9:81:79:FE:19:D2:84:C2:36:B5:6B:95:70:AE:2A:16:D7:E1
Certificate issuer: /CN=850C1E1809E2AF49A27C3E67F27A17989362D067
Certificate serial: 7A276A79C3AD9E8008B3C77D38CFECDC088A6898
Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32322d3234203d3e203436303233.roa
Signing time: Sun 03 May 2026 02:33:48 +0000
ROA not before: Sun 03 May 2026 02:28:48 +0000
ROA not after: Sun 02 May 2027 02:33:48 +0000
asID: 46023
IP address blocks: 103.245.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl
rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:27:6a:79:c3:ad:9e:80:08:b3:c7:7d:38:cf:ec:dc:08:8a:68:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067
Validity
Not Before: May 3 02:28:48 2026 GMT
Not After : May 2 02:33:48 2027 GMT
Subject: CN=14ADE98179FE19D284C236B56B9570AE2A16D7E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:d5:4d:a6:d0:04:ec:59:ba:8c:97:bd:e5:
b9:d5:47:fa:21:9f:b9:df:8a:42:4f:ee:43:8b:dd:
5d:09:57:31:74:7d:6f:9b:31:61:d8:cb:6e:2d:7c:
35:ca:c4:de:33:48:30:a3:c3:74:85:36:60:f8:b8:
c7:35:c8:c1:6d:5f:9b:a0:b1:7f:c3:56:d9:e3:8d:
67:ba:4b:57:1f:da:d0:5c:c5:22:d5:65:da:09:ed:
f8:42:7d:a3:86:20:fa:51:27:91:fa:88:61:ec:23:
24:28:22:dd:a2:67:c7:cd:c6:b7:1a:e3:64:e0:6b:
ab:1e:c1:3c:40:cc:af:12:54:93:48:53:8a:64:9a:
8a:83:de:f0:82:33:f5:c9:03:0b:a6:a7:31:9d:f0:
64:d8:c5:9d:24:c5:94:87:bc:63:de:4e:12:66:47:
55:40:bb:b8:42:01:73:23:9d:af:c3:5e:91:d4:e2:
63:5b:ff:aa:9f:22:9b:97:28:62:7f:6e:3d:6f:f5:
b5:6c:96:a5:36:9f:3d:b0:06:e4:60:5a:5b:ca:73:
b5:98:46:e5:8e:e8:5a:41:ec:4a:c3:6c:8b:cc:9b:
a9:28:02:cd:2c:71:a0:55:8c:93:ab:10:b4:92:13:
86:17:28:a7:a3:fb:e2:1c:23:b5:ed:56:ff:c6:3a:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AD:E9:81:79:FE:19:D2:84:C2:36:B5:6B:95:70:AE:2A:16:D7:E1
X509v3 Authority Key Identifier:
keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32322d3234203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.16.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:01:16:aa:52:94:27:b6:65:b6:32:2b:a5:22:c2:6a:ff:62:
74:96:a7:51:7c:9a:5c:63:8b:98:fa:8e:90:25:cb:d2:ef:2d:
33:81:ea:db:6f:a3:f0:ac:a4:de:7d:44:dc:09:ed:cb:bf:ec:
0c:6c:5e:f5:82:7e:92:76:82:29:5b:1c:63:c8:f6:fc:71:0f:
ea:44:ab:38:7b:fd:23:c4:bc:61:5e:4f:49:45:45:4e:0f:59:
8c:f3:04:4c:3d:ca:bf:47:71:a7:1e:69:1b:0a:5e:1d:11:f8:
8c:98:7b:0c:8e:76:ad:9a:78:e9:c3:94:7e:72:98:2c:d4:66:
81:db:d7:70:cc:b1:1c:a9:32:cd:b3:04:6c:ca:f9:e8:14:9f:
23:6e:a5:0b:53:18:75:98:60:9b:7c:04:7e:67:22:0b:3d:42:
12:58:f6:53:0c:58:7d:6f:be:43:9e:09:84:99:37:c4:b7:53:
34:81:11:f5:fd:04:25:cb:68:2c:93:8f:73:5e:d0:f3:db:fc:
45:b5:07:b6:9e:0f:d4:4f:88:32:bd:dc:03:92:05:4c:b2:50:
ce:06:57:2e:ea:1e:08:03:96:68:62:f7:ee:66:00:ab:8c:aa:
fb:29:20:d5:ea:28:ce:5d:ea:61:67:51:50:b4:ad:de:2d:22:
49:fe:7a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:15 2026 by rpki-client