
$ rpki-client -vvf rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
File: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (raw, json)
Hash identifier: Ud8zXVkaxOANWSpFsC422ZV+3rT9KJeF9ej6YaNldzs=
Subject key identifier: DD:7C:B4:80:40:5E:C8:FC:9E:AC:4A:5A:83:E5:FD:B1:58:F2:07:9F
Certificate issuer: /CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2
Certificate serial: 2156C09BF72472FB09F56A6AB353BEC00279A29C
Authority key identifier: 4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
Signing time: Sun 03 May 2026 02:43:25 +0000
ROA not before: Sun 03 May 2026 02:38:25 +0000
ROA not after: Sun 02 May 2027 02:43:25 +0000
asID: 150923
IP address blocks: 103.97.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl
rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:56:c0:9b:f7:24:72:fb:09:f5:6a:6a:b3:53:be:c0:02:79:a2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2
Validity
Not Before: May 3 02:38:25 2026 GMT
Not After : May 2 02:43:25 2027 GMT
Subject: CN=DD7CB480405EC8FC9EAC4A5A83E5FDB158F2079F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:8d:37:62:43:2d:3b:e4:f3:b8:ef:cc:31:
00:43:22:09:c0:85:c0:fa:da:d2:b6:97:3a:bd:64:
58:10:1c:01:54:c4:90:c0:9d:d6:41:a3:1c:32:f9:
d6:e9:26:e0:53:ac:e9:7a:34:cc:59:bf:40:44:5e:
c0:c2:83:16:19:c9:3c:91:2b:f6:3e:d8:3d:86:57:
e0:67:ed:33:45:b2:a6:a4:6d:8d:0f:16:c6:f8:14:
04:ed:f5:63:cf:9e:75:e5:d4:2b:d1:c1:ad:12:c1:
88:6a:d4:6d:df:df:21:bb:cd:ef:71:84:6d:ea:8f:
da:59:01:29:01:5f:15:e0:8d:a4:07:02:0d:9e:4b:
b0:6f:3b:c7:68:65:79:a2:a6:10:2d:a5:b0:d2:e2:
e4:e5:78:b7:7e:85:bf:36:77:1d:fb:6b:dd:aa:e5:
ac:c0:36:ba:05:81:06:6b:0e:b9:80:c5:cc:ec:9f:
ae:9a:0c:00:dd:1d:f9:26:9c:88:56:be:8b:67:b3:
d4:92:de:cf:c9:9b:a6:e1:15:95:bd:71:41:c9:b5:
22:7b:9a:fe:2e:11:cb:f5:1b:48:b4:19:1b:9d:5b:
e1:91:5e:e1:fd:39:e6:70:50:1a:b5:92:a8:24:f0:
ef:29:b9:bd:fb:48:b9:a5:de:62:01:e7:ed:6f:4c:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7C:B4:80:40:5E:C8:FC:9E:AC:4A:5A:83:E5:FD:B1:58:F2:07:9F
X509v3 Authority Key Identifier:
keyid:4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.224.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2f:49:c4:16:5c:5c:29:f1:c2:d9:ef:5b:8f:3e:42:47:7c:
4a:0d:4d:20:b5:3f:a8:b4:1f:f5:a0:fa:03:6b:42:a3:5f:e3:
ee:c3:92:a8:95:ee:cf:1d:64:2f:f6:ad:1a:ce:cf:9b:c6:7f:
9f:48:03:d0:0b:22:f1:db:61:b3:9f:dc:f8:91:cb:39:1a:dd:
57:13:94:ce:6d:3f:9f:2c:f3:3e:08:d5:a3:af:64:0d:e9:80:
41:0e:24:17:b0:4b:e7:c8:a4:47:38:51:e0:dc:ec:36:eb:7b:
b2:f5:64:80:bc:0f:8d:6b:7f:af:7b:5a:a0:f9:71:9d:88:e3:
f5:38:4d:99:57:7c:e2:ff:b7:51:60:5e:58:b3:70:af:a7:25:
20:a0:62:a2:62:9c:cf:15:4f:54:b2:38:b8:98:14:e2:c0:85:
a8:5a:1c:bb:54:81:48:27:d6:81:f7:8c:11:55:b9:92:fb:3d:
7f:36:63:d2:db:d3:bb:1a:ce:59:03:dc:dd:a3:2b:60:d7:69:
ca:a9:d6:65:d7:ab:6c:70:f6:74:b1:29:fe:f0:7c:3f:21:cc:
ef:14:5e:24:5f:62:c1:f3:b0:8a:72:ac:f4:80:ac:2c:26:ab:
f9:5e:d3:d9:50:7a:8d:25:eb:78:68:d0:09:d0:21:6d:a8:a4:
ba:4c:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:47 2026 by rpki-client