
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa
File: 3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (raw, json)
Hash identifier: qMA2mvuDFglgzD+HOLkg38KkeE2E7iG0DYOT5BZeHio=
Subject key identifier: 32:95:EA:ED:FA:84:15:C2:AA:26:39:23:C7:6B:4D:3F:9C:95:87:8A
Certificate issuer: /CN=0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958
Certificate serial: 616E0C8360FFF387F65CE3015F6D1865D20E33ED
Authority key identifier: 0F:74:5B:0D:4D:2F:7E:AF:8F:AF:5D:92:00:EE:EC:8E:E1:03:69:58
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa
Signing time: Sun 03 May 2026 02:33:55 +0000
ROA not before: Sun 03 May 2026 02:28:55 +0000
ROA not after: Sun 02 May 2027 02:33:55 +0000
asID: 139971
IP address blocks: 103.147.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl
rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6e:0c:83:60:ff:f3:87:f6:5c:e3:01:5f:6d:18:65:d2:0e:33:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958
Validity
Not Before: May 3 02:28:55 2026 GMT
Not After : May 2 02:33:55 2027 GMT
Subject: CN=3295EAEDFA8415C2AA263923C76B4D3F9C95878A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:82:59:59:75:89:4a:02:14:bb:f1:a0:c0:
f9:26:aa:cf:78:90:ec:3b:58:bd:f3:a9:60:c7:85:
26:ea:74:eb:f6:a0:a0:7e:f3:71:7b:2e:bf:bd:d4:
e2:03:e2:9b:f2:a0:4e:7c:1c:ea:18:c8:62:38:e1:
5a:1d:19:08:a9:87:e2:b6:86:f7:57:59:26:d4:2f:
cf:32:d0:e4:6b:2f:cf:97:a1:c9:36:46:b3:6f:3a:
61:3f:17:a1:3e:0b:f6:03:37:ca:94:83:29:43:98:
0a:2a:24:63:fa:92:b6:cf:71:78:0d:f1:cb:fb:d6:
5a:f4:df:65:0d:17:d8:64:ec:a0:56:69:09:42:08:
33:6d:95:dd:d5:36:96:03:bc:7a:d7:0e:3a:8f:42:
12:68:8d:1e:a2:b7:8d:8d:9c:23:57:43:12:d1:6e:
60:1d:4a:c8:74:91:3b:e6:a7:d0:d6:ad:c3:bc:62:
29:a6:80:c3:7d:83:ea:60:2b:f7:2c:0f:97:9d:f2:
85:2e:26:cc:a7:47:a7:89:3a:94:b6:1e:82:16:fe:
d0:e3:32:83:d6:4d:06:5e:4e:60:04:e5:86:17:a3:
1b:54:fd:2e:ee:69:94:bc:52:cd:f1:2e:f4:d9:94:
d2:2c:ed:84:43:6b:c3:ec:61:62:07:16:69:b7:bf:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:EA:ED:FA:84:15:C2:AA:26:39:23:C7:6B:4D:3F:9C:95:87:8A
X509v3 Authority Key Identifier:
keyid:0F:74:5B:0D:4D:2F:7E:AF:8F:AF:5D:92:00:EE:EC:8E:E1:03:69:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.236.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:18:b8:f8:8b:3f:34:63:36:95:25:fd:63:2c:ef:54:19:e8:
07:d3:a6:1c:e9:f7:e2:e1:7c:c1:08:16:e0:79:df:bf:55:0f:
7c:30:69:ed:f3:85:08:97:7e:54:98:16:2f:52:23:cf:a0:90:
e5:84:ec:7e:bc:a6:d8:cd:28:68:8d:a4:e2:c3:45:77:84:87:
a5:ca:8e:19:3a:80:bc:b0:af:52:72:de:1d:ef:c5:1d:53:4e:
f8:0a:dc:97:9e:61:bc:86:ae:3b:e9:d7:ed:72:b3:b3:7f:57:
52:4b:ae:a0:67:60:b1:b1:1e:b1:f7:40:2b:50:5a:3f:3c:ce:
d9:04:06:86:db:5e:12:e5:db:4d:a0:d9:96:87:69:02:ca:6e:
34:4b:6f:c7:02:9d:d0:ad:d7:2a:ad:0f:a0:db:57:56:c8:03:
c2:dd:83:69:43:95:f5:af:73:d5:c4:72:67:84:d4:fd:f1:fb:
16:55:e0:a6:20:5f:24:de:6d:ae:1b:6c:f5:6f:fe:1a:3a:30:
27:f3:f0:27:59:f8:98:d3:d0:be:f0:f0:4c:02:91:2b:18:cd:
97:d6:6b:2b:14:68:38:82:12:a5:83:fa:26:85:10:df:88:d7:
71:1a:e4:f0:15:db:17:71:d6:c9:f2:da:2f:1c:5e:92:5c:99:
ee:b3:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:09 2026 by rpki-client