
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa
File: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (raw, json)
Hash identifier: x5ipZlEC8pQiu8/sOKh5VKkOUz8rWzbz+F73T1RcjPM=
Subject key identifier: 5F:2F:CB:D2:76:B0:2A:37:E2:D6:48:8F:61:09:88:7A:CA:4D:FE:54
Certificate issuer: /CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
Certificate serial: 01C23C002455DE614A9F86B33AED2F28A8B51458
Authority key identifier: A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa
Signing time: Sun 03 May 2026 02:38:17 +0000
ROA not before: Sun 03 May 2026 02:33:17 +0000
ROA not after: Sun 02 May 2027 02:38:17 +0000
asID: 142360
IP address blocks: 103.147.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.crl
rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c2:3c:00:24:55:de:61:4a:9f:86:b3:3a:ed:2f:28:a8:b5:14:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
Validity
Not Before: May 3 02:33:17 2026 GMT
Not After : May 2 02:38:17 2027 GMT
Subject: CN=5F2FCBD276B02A37E2D6488F6109887ACA4DFE54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:30:ef:d8:88:70:4b:cb:67:e0:7f:ad:77:
ed:5f:07:1a:b8:2a:d9:87:7d:da:65:62:6b:17:45:
94:d4:a6:b7:ae:1b:f0:08:38:6e:38:d8:e9:97:51:
e7:73:a8:1d:97:c0:12:10:59:c9:62:d0:ff:58:1a:
0e:64:d1:82:91:07:69:d1:73:79:bc:f2:48:c0:22:
0e:c0:58:6d:72:5c:d7:00:8f:61:54:c9:a7:ec:9e:
a0:02:ad:96:54:a0:d7:5e:e8:e8:ef:90:2e:cc:a7:
12:f8:37:71:d3:5b:38:2c:d6:99:db:7e:29:65:b3:
21:4a:85:af:8d:c5:ce:a8:a0:b2:7d:18:18:e3:2e:
d0:5c:19:f2:1b:0a:71:26:95:0b:18:32:b9:b9:ce:
63:98:64:c0:43:bb:c1:9f:f7:f5:aa:da:b2:11:23:
2e:e2:29:fe:10:0d:fb:13:2b:11:f9:fe:10:db:19:
c1:2f:87:ab:23:06:8d:d0:41:a6:e1:c3:86:ad:38:
d4:9b:1b:04:d8:e6:7d:be:24:f4:a4:40:0a:38:f6:
e7:e7:f5:58:5a:9f:da:8c:c4:89:73:f1:48:a2:f3:
4f:72:de:eb:b3:8b:0f:08:7a:48:61:d9:d1:0a:7e:
3f:53:3b:1a:17:7d:eb:24:34:5e:6b:25:72:8a:95:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2F:CB:D2:76:B0:2A:37:E2:D6:48:8F:61:09:88:7A:CA:4D:FE:54
X509v3 Authority Key Identifier:
keyid:A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.156.0/23
Signature Algorithm: sha256WithRSAEncryption
86:b7:7c:37:0b:77:76:50:55:41:e6:cb:4c:9b:61:32:03:c7:
d3:13:27:82:3b:d3:22:d9:ed:1c:9e:52:2f:48:62:26:68:f5:
0e:80:4a:0b:8f:2f:94:29:c2:3f:8b:e8:f0:2a:93:ac:a9:d0:
aa:39:e1:35:4d:e9:54:f3:87:fa:a4:1d:35:41:c7:42:f4:4a:
e6:51:60:c5:9b:a4:ae:b9:c2:a2:55:eb:be:e4:28:26:15:b4:
09:16:4a:62:26:34:8a:c7:ea:2c:ef:56:28:e1:e3:fe:09:3d:
c8:03:c6:c6:39:e1:ec:eb:22:2e:80:d3:f9:92:6c:24:34:99:
08:79:39:b7:0e:a6:2b:ee:49:f0:05:0b:d8:de:e9:47:bc:74:
ac:71:e9:60:d1:63:9d:ea:48:91:98:7f:77:23:4b:dc:9e:a6:
d6:37:d5:d4:8d:10:0d:65:72:9c:a9:f0:de:18:81:34:d7:59:
69:f3:71:8b:c8:21:40:d8:38:29:2d:81:a5:7a:90:7e:f0:82:
71:45:82:2e:96:26:e3:e5:9b:2d:b7:89:c5:eb:af:a5:6d:82:
cc:f5:47:13:b9:38:92:1e:07:30:f4:75:a0:cf:89:bd:1c:7a:
76:ab:54:6a:c9:48:bb:fa:75:94:78:b2:6e:b5:3b:c7:b4:25:
57:df:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:42 2026 by rpki-client