
$ rpki-client -vvf rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa
File: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (raw, json)
Hash identifier: 8hArOQkZgNmI16L0WGc7RzZ5Ruf+DKiwdMQ56yopHsU=
Subject key identifier: 5E:E2:43:B2:02:8E:76:7F:C1:43:29:29:4C:60:74:C4:A8:13:A9:75
Certificate issuer: /CN=7E5852640ACB27CE4AC466E5338B30E206711DDD
Certificate serial: 7DEA83912232FAB99D6C88C9766E2AEEA73A11A1
Authority key identifier: 7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa
Signing time: Sun 03 May 2026 02:39:25 +0000
ROA not before: Sun 03 May 2026 02:34:25 +0000
ROA not after: Sun 02 May 2027 02:39:25 +0000
asID: 150261
IP address blocks: 103.22.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl
rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ea:83:91:22:32:fa:b9:9d:6c:88:c9:76:6e:2a:ee:a7:3a:11:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E5852640ACB27CE4AC466E5338B30E206711DDD
Validity
Not Before: May 3 02:34:25 2026 GMT
Not After : May 2 02:39:25 2027 GMT
Subject: CN=5EE243B2028E767FC14329294C6074C4A813A975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:3e:ae:96:51:6e:48:c5:cf:e3:7e:18:cc:
7f:ee:48:7e:e3:22:3a:22:98:dc:9b:bc:d1:b8:b7:
34:9c:f0:1e:91:10:3f:ca:72:66:48:33:50:9e:57:
be:73:08:d8:2f:19:4c:6c:02:2d:f7:9d:a9:aa:15:
32:30:12:2b:0f:6e:38:35:94:a3:31:b4:ca:99:92:
d4:41:dd:4c:48:49:9c:b6:99:5e:31:8e:23:c6:4a:
ed:fe:0a:b4:54:4f:2b:b1:82:06:ac:f0:1d:cc:8e:
30:1f:d9:a3:98:85:d7:b2:97:66:a6:ef:2f:7d:fc:
af:e9:d1:73:f9:b2:54:fe:68:bb:da:32:fa:7b:4b:
8a:d5:f2:70:05:a1:95:5a:55:81:93:87:c1:42:78:
d8:93:6c:f0:e9:34:ab:54:58:e2:77:aa:13:fe:0a:
8d:a0:4c:a3:fe:a3:08:cf:5c:6b:59:eb:78:39:42:
07:76:cb:a1:7f:62:2f:e4:57:5d:9a:dd:26:48:a4:
4d:e5:de:cd:5a:7a:a2:0e:f8:9c:74:48:83:15:ff:
18:25:a7:28:04:df:6e:92:8e:7b:57:8a:a1:3a:fe:
75:cd:28:f3:96:d3:f4:7e:e3:8e:83:13:91:cc:c7:
54:26:e1:f1:1e:1f:07:62:94:b9:4f:51:ec:c0:82:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E2:43:B2:02:8E:76:7F:C1:43:29:29:4C:60:74:C4:A8:13:A9:75
X509v3 Authority Key Identifier:
keyid:7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.216.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:8c:2d:e9:10:2f:47:d3:36:73:7c:f8:1b:10:e3:e8:c4:4a:
33:f9:4f:35:33:e4:a2:80:62:f2:29:45:f8:2c:7f:a0:79:96:
ee:b9:17:3c:8a:aa:4d:21:e9:8a:42:0e:aa:7b:9e:55:9c:66:
94:85:db:70:11:70:0a:05:04:44:bf:0e:ba:47:fb:d3:a1:02:
9e:39:95:56:36:4f:85:a1:2f:58:d0:2e:de:0a:6e:05:ce:25:
e8:e7:5b:c9:22:15:60:c0:3a:49:8f:aa:3f:22:fc:be:b6:1c:
c6:6a:ef:fc:78:ee:25:0f:23:a1:44:37:9d:7c:58:73:a0:38:
98:aa:76:e9:39:be:46:01:e7:ae:7e:e2:59:ee:14:d4:9b:3f:
b7:6b:ea:b0:bf:5b:fd:35:14:89:ee:91:3b:09:4b:68:eb:1b:
1a:3e:5f:ae:bd:88:de:90:15:09:c5:2b:39:92:d3:9c:57:41:
16:16:05:61:67:c0:0f:48:94:d4:1f:ad:7b:8f:65:c4:29:fd:
34:ad:de:28:9d:2f:7a:64:0f:a4:fe:1e:e0:69:1f:87:5b:a9:
95:29:1c:81:ae:9f:6c:7d:b8:69:9d:c6:49:52:47:1a:a4:f2:
6e:45:be:41:69:ef:72:33:5f:d4:29:27:76:72:a7:9f:1d:21:
02:e3:46:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:34 2026 by rpki-client