
$ rpki-client -vvf rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa
File: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (raw, json)
Hash identifier: K0RHUYKMgdp0wpj2LpgjeiPXy+duWorfZjM80sQwxyc=
Subject key identifier: AC:CD:B1:24:A9:C2:0B:DA:09:FC:38:D7:C6:A3:5B:EC:FE:73:34:57
Certificate issuer: /CN=5D885821D2406437CDFEC04380E967515A67AECC
Certificate serial: 6C12BF6930B168002F99C8F176E5A6352520639A
Authority key identifier: 5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa
Signing time: Sun 03 May 2026 02:47:27 +0000
ROA not before: Sun 03 May 2026 02:42:27 +0000
ROA not after: Sun 02 May 2027 02:47:27 +0000
asID: 136052
IP address blocks: 103.54.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl
rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:12:bf:69:30:b1:68:00:2f:99:c8:f1:76:e5:a6:35:25:20:63:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D885821D2406437CDFEC04380E967515A67AECC
Validity
Not Before: May 3 02:42:27 2026 GMT
Not After : May 2 02:47:27 2027 GMT
Subject: CN=ACCDB124A9C20BDA09FC38D7C6A35BECFE733457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:99:b1:c0:a2:71:50:9e:aa:69:33:28:f0:
58:cc:6f:bf:97:17:07:06:d7:03:9e:a8:43:d1:13:
f7:6e:0d:01:92:8d:27:5f:00:8d:ee:4f:a6:47:8d:
13:41:1b:c2:ac:a0:44:47:9d:c7:c5:af:61:b2:ab:
95:51:19:20:1f:bc:92:81:07:2a:1c:be:77:20:96:
78:d6:65:4f:68:7c:84:eb:5d:4b:16:8c:d8:8b:e5:
a0:3a:a2:b1:ee:ff:04:8c:ed:6b:bc:e8:84:f1:b1:
1f:de:1c:3b:04:d0:b1:72:33:c9:e9:f4:19:db:10:
f6:ac:26:ba:3c:63:d9:3f:88:ec:01:96:42:c5:16:
87:a6:37:a3:6c:fb:03:67:f1:bc:7e:be:35:63:5e:
a8:7f:25:34:7a:0e:4e:8f:dd:11:e1:18:4b:51:ed:
bd:c6:a2:a1:e8:d3:a6:c0:3f:5b:46:75:8a:e7:5c:
d9:8b:7c:03:1d:70:3e:ed:f1:b3:78:9f:36:87:fc:
45:ac:32:2b:74:60:67:01:af:ad:31:3d:81:76:8a:
35:32:61:ee:c8:ed:39:44:36:4b:fc:75:93:ff:2b:
f0:c1:85:7b:4d:ad:c7:86:73:d0:b7:a9:22:ff:2b:
0d:2c:4d:61:ed:6e:7c:43:38:fc:1e:48:ba:dc:c0:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CD:B1:24:A9:C2:0B:DA:09:FC:38:D7:C6:A3:5B:EC:FE:73:34:57
X509v3 Authority Key Identifier:
keyid:5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.170.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:c3:19:10:4a:f1:b2:6d:a5:b5:35:e2:ec:a1:f7:f7:33:6e:
c1:48:fa:3c:86:42:18:71:58:b4:d8:25:28:d6:69:59:fe:6d:
67:5a:95:9d:21:d8:e3:8b:55:55:59:2f:89:82:7e:bb:66:54:
48:65:9e:4b:fd:97:b2:e2:62:d6:e0:29:16:51:ba:65:f5:8d:
5c:37:29:62:2b:cd:05:a2:f8:84:b4:fb:01:61:0d:1a:be:e7:
33:c7:13:53:8a:34:44:0e:e6:4b:de:76:4f:aa:36:99:0f:58:
13:7a:60:f3:be:fe:59:f9:b5:74:7d:65:42:ff:f2:1e:61:28:
04:f2:a2:7b:17:ac:93:3c:43:6c:3b:6c:0b:24:b2:d0:c7:f2:
25:a4:f0:a4:e3:7d:91:12:12:44:ba:7a:55:2b:bd:ea:76:be:
3c:a8:df:0b:92:ba:7b:86:a3:bc:d0:98:2e:f1:d5:b0:44:1f:
2e:1f:5e:33:fb:85:b9:da:ca:ad:36:04:f5:99:59:f2:4a:17:
2d:44:53:c1:4c:7c:0c:1b:25:e8:23:4b:4f:a5:dc:3a:50:bf:
6b:1a:ad:b4:7b:91:41:37:a3:32:a4:31:22:e9:c4:c7:99:39:
41:f4:c9:2c:14:e2:ff:67:92:62:8c:69:11:db:24:07:bb:be:
a7:3f:84:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:16 2026 by rpki-client