
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa
File: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (raw, json)
Hash identifier: nGCzx9GztVX9RTrYIz2qrQucEQnhRI7SlGCvxpc25Jk=
Subject key identifier: 92:8A:C2:F5:EE:92:42:9D:AA:25:3D:41:96:FF:8D:57:D3:5C:FD:6D
Certificate issuer: /CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105
Certificate serial: 1C1E8D991DD0099C88A87D44A7E9BA0965514314
Authority key identifier: B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa
Signing time: Sun 03 May 2026 02:36:20 +0000
ROA not before: Sun 03 May 2026 02:31:20 +0000
ROA not after: Sun 02 May 2027 02:36:20 +0000
asID: 150239
IP address blocks: 103.19.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl
rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1e:8d:99:1d:d0:09:9c:88:a8:7d:44:a7:e9:ba:09:65:51:43:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105
Validity
Not Before: May 3 02:31:20 2026 GMT
Not After : May 2 02:36:20 2027 GMT
Subject: CN=928AC2F5EE92429DAA253D4196FF8D57D35CFD6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:8e:f2:3a:72:42:0f:f3:8c:ee:16:48:1f:
a2:8f:9b:6c:6c:c9:2c:39:75:2d:41:d7:7f:0a:92:
a6:72:dc:68:0c:cd:86:f0:1c:db:d5:d0:8c:25:bb:
e4:fe:49:1d:6d:28:59:cc:29:52:1f:e8:55:d3:04:
29:e9:4f:66:f3:27:09:5d:03:2f:2b:22:00:f8:0a:
b7:e4:e6:5c:0e:f7:84:cc:0e:53:84:67:ec:4c:7a:
0b:27:2e:1a:32:10:6e:05:63:19:74:e6:40:d4:54:
47:d4:f9:ea:43:a7:89:5c:8f:a0:e8:ca:09:73:36:
7b:af:65:2b:73:22:f7:e7:00:10:dd:f8:72:54:25:
66:3c:4c:cc:df:fc:5a:aa:5a:f4:de:46:1d:69:56:
8f:e0:dc:49:1d:58:0e:1d:77:27:36:f8:15:0f:ae:
85:dd:fb:8e:01:45:26:b5:30:7d:af:84:90:9d:c8:
fc:a7:3e:81:49:ca:0e:1b:cf:b7:eb:87:72:59:87:
f8:74:fc:99:2a:1d:3d:c7:ac:6b:36:36:9e:23:b5:
81:c7:d4:56:36:bd:d8:2b:36:e7:15:4b:d0:3c:77:
b7:7f:0d:67:38:5e:65:48:5a:e4:fa:4c:e3:3e:df:
5c:7a:0f:9b:20:cc:9f:20:30:23:3f:58:d8:18:ab:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8A:C2:F5:EE:92:42:9D:AA:25:3D:41:96:FF:8D:57:D3:5C:FD:6D
X509v3 Authority Key Identifier:
keyid:B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.19.158.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:05:69:2b:cb:9e:06:26:fe:d5:a7:91:46:4f:90:66:b3:29:
5e:98:a3:6e:b2:66:0a:53:8c:af:d9:06:f1:ef:94:08:eb:fa:
a1:ed:ff:c3:ed:1a:45:09:23:ec:eb:48:6b:2b:ec:4e:82:99:
ad:90:6c:47:e0:65:af:89:83:ab:b0:b2:7a:17:78:31:67:97:
6d:00:fa:25:52:42:5c:2f:4e:b1:23:6e:27:78:f9:49:e7:9a:
4d:77:db:6f:e7:39:b8:ad:e4:85:bb:a6:46:e9:b6:e7:39:06:
3f:9a:ab:dd:cd:b9:0c:12:d0:33:d0:81:5f:a9:28:24:49:be:
31:3a:5e:e8:f5:6b:cf:98:c6:f3:18:11:6f:3a:72:28:e1:fc:
4a:4f:6c:8e:6a:5d:3d:35:7a:1b:b0:41:d3:5f:ba:ee:1f:c1:
74:41:58:a0:84:c6:9e:d5:a8:40:65:fe:f2:4a:a8:9a:3e:8a:
19:75:fa:39:3c:d1:49:14:8b:f7:ae:9e:98:c6:19:ca:5d:81:
01:6c:02:70:bb:fd:e0:6d:c6:17:74:9d:08:7f:04:ce:e4:63:
70:8d:84:5e:e0:a0:58:32:f4:84:80:d9:c8:aa:2a:6e:94:10:
b5:2e:a3:27:9d:fb:25:61:83:af:c8:65:5f:75:0e:9d:1d:3c:
c3:e4:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:28 2026 by rpki-client