
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa
File: 3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa (raw, json)
Hash identifier: 7dkFUu32DL2jSfYzy5jgRuT2T7srzm+iE5Davgyx2Mo=
Subject key identifier: 4D:75:42:19:D0:F1:63:BE:0C:0C:C5:83:55:47:1C:69:D8:E1:46:B2
Certificate issuer: /CN=80117DDDA92CEB015665BA52420E9AFF403CD87A
Certificate serial: 10BA7D1DF96B7395328D0E28AC8B77C0AA2559BF
Authority key identifier: 80:11:7D:DD:A9:2C:EB:01:56:65:BA:52:42:0E:9A:FF:40:3C:D8:7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80117DDDA92CEB015665BA52420E9AFF403CD87A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa
Signing time: Sun 03 May 2026 02:36:17 +0000
ROA not before: Sun 03 May 2026 02:31:17 +0000
ROA not after: Sun 02 May 2027 02:36:17 +0000
asID: 152062
IP address blocks: 103.225.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/80117DDDA92CEB015665BA52420E9AFF403CD87A.crl
rsync://rpki-rsync.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/80117DDDA92CEB015665BA52420E9AFF403CD87A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80117DDDA92CEB015665BA52420E9AFF403CD87A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ba:7d:1d:f9:6b:73:95:32:8d:0e:28:ac:8b:77:c0:aa:25:59:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80117DDDA92CEB015665BA52420E9AFF403CD87A
Validity
Not Before: May 3 02:31:17 2026 GMT
Not After : May 2 02:36:17 2027 GMT
Subject: CN=4D754219D0F163BE0C0CC58355471C69D8E146B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:8c:93:5b:0a:ba:a6:29:07:5d:e5:83:61:
c1:39:bc:58:03:1a:2a:5a:b4:b0:ce:18:01:e6:55:
a5:b3:09:17:77:77:a1:fd:da:0b:8d:a3:87:5f:a9:
a9:33:8e:2a:a9:b6:3f:9d:be:7a:b5:e1:cb:ae:97:
29:c5:44:e1:16:11:93:81:e7:70:a8:be:41:ae:54:
90:5f:f7:72:46:e6:09:1a:84:f4:ea:90:f8:9c:05:
bf:4c:0e:bf:90:01:78:c7:9b:f0:75:ed:be:80:de:
38:c9:63:41:94:37:07:68:79:9b:a5:af:ca:d1:bb:
88:56:61:b3:a0:6a:50:b7:cf:b2:42:66:69:e0:fc:
d4:e0:f4:e7:ef:9e:b8:07:15:f5:c0:28:5c:45:20:
65:01:f8:2c:29:f3:4e:01:cb:82:c3:17:e0:ff:11:
3f:31:33:dd:ec:67:14:77:8e:38:ec:5a:a2:45:b4:
8d:cb:e2:89:e7:63:8f:2a:f5:b3:bf:03:18:18:4e:
fb:c9:89:f9:a9:6a:82:79:f5:2f:e9:ea:ec:0d:cd:
1b:f5:f3:26:e5:a7:38:d6:c0:b9:2a:69:69:c6:c3:
d9:ef:81:bd:d2:80:db:77:6a:05:a2:a4:d3:b9:8a:
1a:9a:48:d7:d3:cf:52:ee:b5:48:76:80:2c:05:97:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:75:42:19:D0:F1:63:BE:0C:0C:C5:83:55:47:1C:69:D8:E1:46:B2
X509v3 Authority Key Identifier:
keyid:80:11:7D:DD:A9:2C:EB:01:56:65:BA:52:42:0E:9A:FF:40:3C:D8:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/80117DDDA92CEB015665BA52420E9AFF403CD87A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80117DDDA92CEB015665BA52420E9AFF403CD87A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.225.17.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:e6:d0:ea:54:71:ed:88:8b:98:73:3d:d4:10:e2:32:e9:1d:
38:f4:06:f3:c4:e1:78:81:02:6e:83:a7:d6:25:08:a5:4e:c1:
4e:7e:f3:5c:2f:45:90:ee:35:ee:a3:9e:70:b9:e3:e4:4a:2d:
e1:94:f5:7e:66:0d:3b:26:d3:cf:cd:35:ae:f7:73:3e:98:ae:
37:89:32:52:53:2b:11:01:8b:1c:bb:10:c5:3f:f9:eb:e5:ab:
b0:6c:8b:c3:23:22:cf:0c:71:e4:af:b1:92:83:12:eb:88:55:
f0:d3:fd:1e:54:a1:f8:dd:69:23:cc:ec:47:88:5d:98:06:7e:
ea:0d:f4:37:69:e6:11:a9:f7:68:5c:38:4b:00:63:5b:25:11:
81:d8:6b:b0:76:68:8d:68:be:12:06:6f:da:63:f1:48:df:b7:
90:23:7a:02:71:42:2e:03:5e:89:64:e0:92:03:98:e5:a5:34:
ed:30:bd:6f:15:96:e4:ed:0c:a3:36:71:8c:fd:6c:05:5f:ce:
05:96:19:4d:9f:cb:40:b6:78:87:ef:05:5b:21:d6:d0:e9:f5:
0d:b8:ba:b2:f3:b3:90:f4:cd:cb:29:cb:81:90:4a:46:21:42:
8f:b3:13:0f:0c:ab:eb:76:a7:1d:cc:d8:a5:42:70:19:e5:54:
aa:aa:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:35 2026 by rpki-client