
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa
File: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier: m9XJT/DbxbJ6+jpB+KGYoQwi9JE9k1D/+aAA0o2JVf0=
Subject key identifier: AA:5D:04:46:E5:A4:2D:44:16:AB:73:55:94:F2:56:49:86:11:6A:EB
Certificate issuer: /CN=D7F0443E844F58413FEE61023C66F3C2AF619180
Certificate serial: 71D03F343FA1BC78A66E48F955989BBEF70718B2
Authority key identifier: D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa
Signing time: Sun 03 May 2026 02:45:28 +0000
ROA not before: Sun 03 May 2026 02:40:28 +0000
ROA not after: Sun 02 May 2027 02:45:28 +0000
asID: 396982
IP address blocks: 103.55.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl
rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d0:3f:34:3f:a1:bc:78:a6:6e:48:f9:55:98:9b:be:f7:07:18:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7F0443E844F58413FEE61023C66F3C2AF619180
Validity
Not Before: May 3 02:40:28 2026 GMT
Not After : May 2 02:45:28 2027 GMT
Subject: CN=AA5D0446E5A42D4416AB735594F2564986116AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:24:8b:2e:5c:dd:58:a3:34:55:ea:76:98:
07:fa:2d:4c:63:64:4a:67:54:d0:2b:4a:22:04:bd:
95:04:94:37:37:e3:6f:75:9c:2d:80:25:05:82:40:
e1:cd:ad:d2:5f:e0:93:82:c4:c2:36:f7:e8:92:e2:
71:90:d3:8b:13:7f:8d:e9:5c:e8:2e:e6:17:f5:9a:
c1:ef:88:c6:9b:c0:ec:22:96:73:57:47:1c:cd:f9:
72:43:f0:b6:90:cb:41:0e:0d:bf:fe:59:18:ea:99:
87:f2:d7:09:61:02:38:80:a2:64:cc:7f:3f:d6:69:
9d:88:3e:17:8e:ba:18:f9:dd:fc:e1:89:f9:23:87:
36:9f:54:14:88:55:7e:2f:4f:d5:c0:c3:60:7f:b0:
28:fe:ef:f4:db:5e:08:43:f7:58:5f:77:11:74:d0:
7e:1b:5f:57:e5:64:10:f4:a6:c9:15:ee:a1:66:57:
2d:01:01:c4:4b:45:18:a6:33:e2:f0:0e:4c:5f:bd:
93:79:f1:46:fb:14:1d:63:0a:91:c2:02:12:9d:3e:
29:29:7d:d4:c8:2d:0e:76:99:23:11:25:fb:23:7b:
08:b9:a0:8a:62:4d:08:5b:af:7b:75:30:70:29:b7:
40:a0:60:e5:8f:f7:01:3f:82:c4:c2:ef:21:0e:e2:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5D:04:46:E5:A4:2D:44:16:AB:73:55:94:F2:56:49:86:11:6A:EB
X509v3 Authority Key Identifier:
keyid:D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.254.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:25:ff:22:da:17:5f:5f:0d:e7:70:50:0c:d2:41:3a:e3:ad:
ed:45:92:e0:4d:80:21:ec:bf:a9:08:55:e6:37:20:30:35:77:
b8:e3:02:6e:af:c1:57:0c:c5:99:4c:11:29:9a:ee:4b:a9:03:
59:de:c1:df:84:d6:38:20:ff:f3:f8:0e:a4:15:4e:31:34:8a:
cc:7f:7a:53:4a:c2:cb:81:d3:a1:26:a6:ac:39:97:8a:a9:97:
5e:1b:9a:da:47:35:1f:64:ca:65:36:3e:b7:86:8c:2d:c6:d2:
4f:28:19:1e:d1:22:b7:61:ec:4b:a0:9a:55:ef:1b:77:9a:80:
57:2b:54:9f:92:79:6d:fd:7d:84:22:f8:c5:a3:2a:f6:f3:7a:
65:58:60:92:32:79:48:64:bb:e5:5f:54:86:6c:02:3a:af:da:
6d:73:c7:b8:b6:95:c1:e3:37:f5:59:3f:60:2f:8d:dc:7c:e0:
fd:7d:fd:61:2b:70:86:56:54:11:53:94:2f:f7:7f:fb:87:bf:
51:a9:d5:a9:42:e2:00:a2:22:f8:c4:4b:b0:84:9d:32:50:9b:
70:cc:03:63:02:af:7b:dd:fc:66:67:6f:c3:1d:16:9c:66:ab:
e7:ee:e2:85:9b:4e:78:6e:85:bd:d3:54:55:c9:fd:2e:aa:75:
ab:59:78:d6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcdA/ND+hvHimbkj5VZibvvcHGLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGMDQ0M0U4NDRGNTg0MTNGRUU2MTAyM0M2NkYzQzJB
RjYxOTE4MDAeFw0yNjA1MDMwMjQwMjhaFw0yNzA1MDIwMjQ1MjhaMDMxMTAvBgNV
BAMTKEFBNUQwNDQ2RTVBNDJENDQxNkFCNzM1NTk0RjI1NjQ5ODYxMTZBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0CSLLlzdWKM0Vep2mAf6LUxj
ZEpnVNArSiIEvZUElDc34291nC2AJQWCQOHNrdJf4JOCxMI29+iS4nGQ04sTf43p
XOgu5hf1msHviMabwOwilnNXRxzN+XJD8LaQy0EODb/+WRjqmYfy1wlhAjiAomTM
fz/WaZ2IPheOuhj53fzhifkjhzafVBSIVX4vT9XAw2B/sCj+7/TbXghD91hfdxF0
0H4bX1flZBD0pskV7qFmVy0BAcRLRRimM+LwDkxfvZN58Ub7FB1jCpHCAhKdPikp
fdTILQ52mSMRJfsjewi5oIpiTQhbr3t1MHApt0CgYOWP9wE/gsTC7yEO4o39AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUql0ERuWkLUQWq3NVlPJWSYYRauswHwYDVR0j
BBgwFoAU1/BEPoRPWEE/7mECPGbzwq9hkYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2M2MzZhNDYtMzhmZi00NDk2LTk3MjEtOGMwM2NmMDQ2MzQ1LzAvRDdGMDQ0M0U4
NDRGNTg0MTNGRUU2MTAyM0M2NkYzQzJBRjYxOTE4MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EN0YwNDQzRTg0NEY1ODQxM0ZFRTYxMDIzQzY2RjNDMkFGNjE5
MTgwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdjNjM2YTQ2LTM4ZmYtNDQ5Ni05
NzIxLThjMDNjZjA0NjM0NS8wLzMxMzAzMzJlMzUzNTJlMzIzNTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzOTM2MzkzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzf+MA0GCSqG
SIb3DQEBCwUAA4IBAQBfJf8i2hdfXw3ncFAM0kE6463tRZLgTYAh7L+pCFXmNyAw
NXe44wJur8FXDMWZTBEpmu5LqQNZ3sHfhNY4IP/z+A6kFU4xNIrMf3pTSsLLgdOh
JqasOZeKqZdeG5raRzUfZMplNj63howtxtJPKBke0SK3YexLoJpV7xt3moBXK1Sf
knlt/X2EIvjFoyr283plWGCSMnlIZLvlX1SGbAI6r9ptc8e4tpXB4zf1WT9gL43c
fOD9ff1hK3CGVlQRU5Qv93/7h79RqdWpQuIAoiL4xEuwhJ0yUJtwzANjAq973fxm
Z2/DHRacZqvn7uKFm054boW901RVyf0uqnWrWXjW
-----END CERTIFICATE-----
Generated at Wed May 13 09:51:20 2026 by rpki-client