
$ rpki-client -vvf rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa
File: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (raw, json)
Hash identifier: 8lXuq/DeovKiTSw+1KX+GVyNFO7DCMSlCXzJz4jkGN8=
Subject key identifier: 10:BB:27:A6:02:FD:BE:27:24:FB:D7:0E:03:F3:76:66:F2:FC:52:CA
Certificate issuer: /CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC
Certificate serial: 4AE6CDEB83D4932F4AD6DAD5A1C76B3F8CB7B296
Authority key identifier: DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa
Signing time: Sun 03 May 2026 02:35:04 +0000
ROA not before: Sun 03 May 2026 02:30:04 +0000
ROA not after: Sun 02 May 2027 02:35:04 +0000
asID: 149880
IP address blocks: 103.189.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl
rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e6:cd:eb:83:d4:93:2f:4a:d6:da:d5:a1:c7:6b:3f:8c:b7:b2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC
Validity
Not Before: May 3 02:30:04 2026 GMT
Not After : May 2 02:35:04 2027 GMT
Subject: CN=10BB27A602FDBE2724FBD70E03F37666F2FC52CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:01:7e:4e:bd:ec:4f:44:4a:24:3c:eb:f7:a5:
ab:f9:e1:55:43:2a:1a:37:a3:8b:4d:72:20:ba:7c:
fd:ff:01:42:46:ab:fe:04:a3:af:90:1c:63:0f:4b:
8b:19:d2:c0:a3:78:b3:e9:2f:db:74:b1:21:18:d6:
02:75:12:f3:05:ef:68:55:5c:d0:7e:44:02:49:35:
07:fd:d1:ca:03:b9:c3:60:1b:56:da:40:5a:52:44:
fe:c3:b2:43:d1:57:47:da:2e:65:00:75:67:69:e3:
c4:7e:3f:70:ce:be:b4:ec:a4:cc:c8:7e:68:3e:67:
ea:c1:8d:45:f2:08:0c:2e:20:cb:9b:77:ad:18:77:
01:b2:80:88:33:7e:48:1c:19:72:aa:4b:e5:c5:cb:
38:71:d3:14:a0:cf:e8:51:1d:14:03:a2:a9:44:b3:
c0:ab:da:ab:64:9f:cf:01:6d:f1:ae:48:10:7e:5a:
9c:41:f8:d3:de:84:61:29:ce:23:70:ea:2f:fd:75:
b2:1b:2a:4b:92:1f:eb:39:52:5d:53:6f:28:c9:c8:
62:e8:82:95:ef:9c:b7:0a:4f:d1:89:fb:cb:ae:9e:
b2:6f:32:7c:0f:db:41:3f:50:2a:1d:51:27:24:bd:
51:29:ca:7c:fe:e6:e1:58:56:0a:ac:c9:32:5a:0a:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BB:27:A6:02:FD:BE:27:24:FB:D7:0E:03:F3:76:66:F2:FC:52:CA
X509v3 Authority Key Identifier:
keyid:DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.0.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b8:e0:c7:6c:02:e7:0c:78:73:3a:38:0b:97:13:12:99:d0:
dc:7d:bb:3b:0e:92:5d:84:b0:60:c4:e1:e9:e6:60:18:1d:1a:
ce:c8:7d:b4:b0:9b:ef:16:57:94:9d:f2:08:46:b7:47:bc:2e:
0b:fd:0d:1f:c2:c6:94:97:7a:ee:cb:09:44:b0:c1:2b:f4:81:
e7:b3:8d:4d:01:1e:ed:9c:2b:e2:0d:09:b3:95:e0:4a:c4:13:
7d:71:68:d2:c1:ef:54:d2:8b:e2:71:4b:9a:e2:1e:68:bd:7f:
fd:d9:90:c5:f2:ea:4f:00:a9:4b:59:a6:51:e9:10:fd:7a:20:
2d:69:0b:b7:4a:a2:3a:9e:25:d1:a7:a2:6b:e3:15:d6:a1:d9:
8d:43:90:ee:34:4f:d1:66:e5:eb:f8:48:c5:af:6b:b4:06:73:
49:74:67:ac:33:36:06:7b:27:27:c4:45:17:8e:da:d8:82:fb:
a2:69:f4:b7:be:f4:20:fb:6d:12:3d:11:64:a7:f0:cf:c8:44:
67:2e:e0:6a:34:2a:de:46:46:4a:29:9b:78:7d:b6:6b:4b:c2:
ba:a7:8c:72:f8:b2:63:b0:31:c9:ff:2f:60:49:bc:60:8c:8b:
e2:36:df:e2:8e:43:ba:c3:24:00:1b:ba:42:30:1f:94:72:e0:
50:67:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:54 2026 by rpki-client