
$ rpki-client -vvf rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: XTZIiTgv/n33Q5JYlr7SxuQOT3cziTd7vm76FG24Z3Y=
Subject key identifier: 70:9C:BB:DE:E3:06:FE:A1:F9:BC:27:42:F8:79:72:57:64:78:92:CE
Certificate issuer: /CN=52D9A1099AA71A2F408409BE12B3031B5511AE20
Certificate serial: 2F5E36A9C61F9EC30EA1AFCEDBC3100538E04532
Authority key identifier: 52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa
Signing time: Sun 03 May 2026 02:34:47 +0000
ROA not before: Sun 03 May 2026 02:29:47 +0000
ROA not after: Sun 02 May 2027 02:34:47 +0000
asID: 135478
IP address blocks: 103.129.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl
rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5e:36:a9:c6:1f:9e:c3:0e:a1:af:ce:db:c3:10:05:38:e0:45:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52D9A1099AA71A2F408409BE12B3031B5511AE20
Validity
Not Before: May 3 02:29:47 2026 GMT
Not After : May 2 02:34:47 2027 GMT
Subject: CN=709CBBDEE306FEA1F9BC2742F8797257647892CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:2a:f3:16:58:a6:f7:c4:1c:98:19:48:ec:
51:44:93:7f:0f:25:a9:e0:ec:d4:51:c6:4d:0c:cd:
2f:bb:96:f4:f6:43:b5:a0:79:1c:61:70:47:35:c0:
d0:d6:91:da:b4:a7:4a:eb:1f:df:76:af:20:af:ba:
06:46:48:57:0e:ef:37:2f:a8:f9:7d:85:51:3b:66:
d7:bd:68:b6:cf:75:89:55:d3:38:f9:73:ca:91:4b:
ae:b8:25:29:b4:56:6c:d3:49:74:d8:cb:88:ff:61:
b6:0e:3b:82:24:d8:bf:cd:4c:f0:c6:8c:fb:5a:6b:
19:f9:de:f0:c9:23:c1:f1:df:f6:1f:e4:90:8c:90:
2e:0f:b4:5f:0d:b0:09:0a:07:0f:c4:db:15:a6:48:
e2:61:96:05:5b:87:f6:b7:81:6e:df:2f:8b:79:f8:
44:0a:cc:90:54:08:c9:ff:8d:21:a9:5c:34:89:b8:
eb:65:8c:8f:e7:66:7f:2e:9c:40:e1:d6:9c:77:3d:
78:09:b4:0a:08:36:00:03:b4:65:c7:eb:55:c3:df:
82:cf:cb:89:91:27:23:d4:78:96:62:72:3a:a2:bd:
1c:f7:13:2e:78:5d:26:29:3b:46:a6:8c:89:bd:30:
9c:c0:33:24:f1:c4:c7:c8:b6:dc:29:1d:d0:b6:ed:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:BB:DE:E3:06:FE:A1:F9:BC:27:42:F8:79:72:57:64:78:92:CE
X509v3 Authority Key Identifier:
keyid:52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.129.70.0/23
Signature Algorithm: sha256WithRSAEncryption
14:96:23:94:28:a9:18:45:62:ef:2d:e2:b6:ce:42:a7:17:23:
29:d7:e7:3a:75:36:0c:6a:27:49:58:79:cc:49:89:40:eb:c1:
70:8d:a2:0a:da:7c:40:d6:48:43:05:19:8b:67:54:a7:35:28:
77:fb:b8:f1:b3:7e:6d:81:d7:e9:27:72:dc:cc:21:7c:c2:31:
4d:d5:05:1e:53:ca:15:0f:59:b4:5e:25:7d:14:cc:4f:61:44:
29:4f:c2:3f:5f:74:9b:64:be:9f:98:ff:8b:9b:68:bc:62:f1:
35:ac:34:39:06:14:bf:ec:99:ee:78:f8:02:ec:2d:97:2a:b0:
54:bd:fc:2e:cf:2d:d3:70:ad:d4:bd:c1:80:6c:a0:48:9f:74:
c5:6f:31:2e:de:65:15:7d:37:c7:08:e8:60:54:22:57:1f:97:
7e:41:24:5c:db:26:48:ce:43:cd:e9:50:ca:bb:c9:25:5b:7e:
fc:a7:b3:e1:dd:dd:0c:88:80:9e:d9:05:3f:17:6a:e3:65:33:
c6:4d:56:ca:c0:b7:87:09:28:63:ad:4d:61:6f:d5:ad:95:fa:
18:72:84:c6:6e:b4:b2:05:11:2d:35:41:b2:b4:25:ff:a0:76:
0f:18:24:0c:5b:92:6d:c9:b5:29:2c:5d:92:41:f7:8a:cd:a5:
6f:2f:44:43
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUL142qcYfnsMOoa/O28MQBTjgRTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1
NTExQUUyMDAeFw0yNjA1MDMwMjI5NDdaFw0yNzA1MDIwMjM0NDdaMDMxMTAvBgNV
BAMTKDcwOUNCQkRFRTMwNkZFQTFGOUJDMjc0MkY4Nzk3MjU3NjQ3ODkyQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNCrzFlim98QcmBlI7FFEk38P
Jang7NRRxk0MzS+7lvT2Q7WgeRxhcEc1wNDWkdq0p0rrH992ryCvugZGSFcO7zcv
qPl9hVE7Zte9aLbPdYlV0zj5c8qRS664JSm0VmzTSXTYy4j/YbYOO4Ik2L/NTPDG
jPtaaxn53vDJI8Hx3/Yf5JCMkC4PtF8NsAkKBw/E2xWmSOJhlgVbh/a3gW7fL4t5
+EQKzJBUCMn/jSGpXDSJuOtljI/nZn8unEDh1px3PXgJtAoINgADtGXH61XD34LP
y4mRJyPUeJZicjqivRz3Ey54XSYpO0amjIm9MJzAMyTxxMfIttwpHdC27fdtAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUcJy73uMG/qH5vCdC+HlyV2R4ks4wHwYDVR0j
BBgwFoAUUtmhCZqnGi9AhAm+ErMDG1URriAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTdmNmU1N2ItNGMyNi00NDJiLThhZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5
QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1NTExQUUyMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MkQ5QTEwOTlBQTcxQTJGNDA4NDA5QkUxMkIzMDMxQjU1MTFB
RTIwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU3ZjZlNTdiLTRjMjYtNDQyYi04
YWZjLTAzMjllZWRhZmI3Mi8wLzMxMzAzMzJlMzEzMjM5MmUzNzMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4FGMA0GCSqG
SIb3DQEBCwUAA4IBAQAUliOUKKkYRWLvLeK2zkKnFyMp1+c6dTYMaidJWHnMSYlA
68FwjaIK2nxA1khDBRmLZ1SnNSh3+7jxs35tgdfpJ3LczCF8wjFN1QUeU8oVD1m0
XiV9FMxPYUQpT8I/X3SbZL6fmP+Lm2i8YvE1rDQ5BhS/7JnuePgC7C2XKrBUvfwu
zy3TcK3UvcGAbKBIn3TFbzEu3mUVfTfHCOhgVCJXH5d+QSRc2yZIzkPN6VDKu8kl
W378p7Ph3d0MiICe2QU/F2rjZTPGTVbKwLeHCShjrU1hb9WtlfoYcoTGbrSyBREt
NUGytCX/oHYPGCQMW5JtybUpLF2SQfeKzaVvL0RD
-----END CERTIFICATE-----
Generated at Wed May 13 10:43:07 2026 by rpki-client