
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31382e302f32332d3234203d3e203436303233.roa
File: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (raw, json)
Hash identifier: 84fJ6NdePRx8rt6emF6aQ9i56bMtAD8nB35y3SPMr9k=
Subject key identifier: 63:9D:8D:6E:16:AA:5E:94:08:BB:B1:A0:B8:8E:07:38:D5:5E:15:EB
Certificate issuer: /CN=850C1E1809E2AF49A27C3E67F27A17989362D067
Certificate serial: 3E4B1701AB2F3A33A17E80040A9F3DE85AC58538
Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31382e302f32332d3234203d3e203436303233.roa
Signing time: Sun 03 May 2026 02:33:47 +0000
ROA not before: Sun 03 May 2026 02:28:47 +0000
ROA not after: Sun 02 May 2027 02:33:47 +0000
asID: 46023
IP address blocks: 103.245.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl
rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:4b:17:01:ab:2f:3a:33:a1:7e:80:04:0a:9f:3d:e8:5a:c5:85:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067
Validity
Not Before: May 3 02:28:47 2026 GMT
Not After : May 2 02:33:47 2027 GMT
Subject: CN=639D8D6E16AA5E9408BBB1A0B88E0738D55E15EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:2e:68:2c:7a:0d:0c:0b:e3:66:57:f1:d4:
52:21:b9:e9:a5:63:68:56:3d:dc:d6:c6:e2:7d:ac:
9c:0c:2f:c7:d7:4c:c7:f4:11:1c:47:df:74:41:7a:
f7:8a:b7:c2:f2:36:1e:f5:72:35:c6:2a:b7:62:96:
bd:33:a4:87:1b:1c:d4:29:8d:b3:50:27:75:4e:77:
f8:5d:b2:ce:c5:85:8b:a5:f6:65:6e:58:ed:7b:06:
46:16:90:7a:d3:e2:2e:8b:2c:16:4a:fd:dd:fe:d6:
53:1b:11:9c:dd:7d:b0:a9:16:d7:83:e3:8e:1d:e8:
8a:ac:6c:e6:56:0e:a1:34:c9:2e:6f:3b:1a:88:2a:
af:83:54:80:99:0c:e4:a8:0b:c2:31:c6:0d:78:cf:
51:4a:a8:13:f5:9c:98:cf:8f:63:81:00:07:9a:cd:
0e:f9:5a:36:b4:61:23:b4:04:cc:2d:db:0a:37:ec:
b5:4a:54:07:8e:4d:70:46:d8:fc:34:71:13:04:fe:
e9:a3:a2:7e:0e:98:d1:fa:4b:cf:e0:af:65:57:2a:
f2:09:d6:4c:d1:11:f9:d7:1c:79:f9:b7:d2:2b:dc:
58:c0:69:1f:c7:d5:f4:89:8e:2c:39:79:9f:7d:93:
49:98:39:81:37:0e:8e:08:7c:31:03:9d:59:1c:4d:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9D:8D:6E:16:AA:5E:94:08:BB:B1:A0:B8:8E:07:38:D5:5E:15:EB
X509v3 Authority Key Identifier:
keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31382e302f32332d3234203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.18.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:da:e5:b4:56:e5:ea:d3:83:2d:27:c8:67:fc:6a:a4:84:8e:
45:02:52:b4:d7:6a:9f:a4:cb:74:00:c0:42:c1:92:4e:08:c4:
9f:2b:52:57:aa:48:ba:3b:e5:fe:69:3a:15:88:64:35:66:09:
42:cb:95:92:85:1a:bf:90:fc:21:8b:c2:39:ed:ed:f2:d7:ff:
66:c2:f2:45:4b:e1:a5:0f:ab:20:08:9c:c3:b8:66:6e:d1:0f:
c0:43:d7:9d:c6:53:45:37:47:75:d6:a5:35:ee:36:6b:6c:d9:
5c:05:66:f4:34:26:3c:be:94:d3:d9:50:61:bd:b0:2c:32:69:
91:6c:96:00:78:12:ae:b0:4d:56:b8:42:41:36:a3:72:6e:2a:
63:db:51:10:7c:18:a9:5a:1a:79:17:8a:28:af:0e:51:2d:9a:
d0:c9:27:61:9b:ab:57:2a:4c:e9:3d:cc:9e:cb:ee:87:5e:16:
78:50:d3:f4:7a:bb:13:72:2f:21:59:ec:9c:cd:2b:5d:5f:92:
17:17:76:26:3a:64:61:09:79:68:09:07:08:b1:8e:44:a5:d1:
51:ae:06:35:e3:10:60:d6:ed:78:df:a2:3f:3d:d5:a8:bd:db:
14:7c:82:b7:be:9b:0a:a9:04:f5:a6:df:9e:b3:77:b0:44:89:
98:1f:08:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:28 2026 by rpki-client