
$ rpki-client -vvf rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa
File: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (raw, json)
Hash identifier: L6gQCpLzy7aXDtfuVgbwQW0xcldnnRmpgqFEsdoAP3Q=
Subject key identifier: 02:D4:F4:87:31:E6:92:9F:00:B5:8A:07:CA:77:08:BE:60:4F:F6:D7
Certificate issuer: /CN=5D885821D2406437CDFEC04380E967515A67AECC
Certificate serial: 037155FB009DF600B4CC92F294E530D31FC53FB6
Authority key identifier: 5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa
Signing time: Sun 03 May 2026 02:47:27 +0000
ROA not before: Sun 03 May 2026 02:42:27 +0000
ROA not after: Sun 02 May 2027 02:47:27 +0000
asID: 141071
IP address blocks: 103.54.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl
rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:71:55:fb:00:9d:f6:00:b4:cc:92:f2:94:e5:30:d3:1f:c5:3f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D885821D2406437CDFEC04380E967515A67AECC
Validity
Not Before: May 3 02:42:27 2026 GMT
Not After : May 2 02:47:27 2027 GMT
Subject: CN=02D4F48731E6929F00B58A07CA7708BE604FF6D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:cb:19:ab:d2:19:f6:3e:a5:48:f3:da:1e:
cf:ec:d9:75:e3:cf:2e:2b:dc:7a:46:0a:ea:1e:47:
30:2b:3e:79:e4:5f:8e:a3:5a:27:4d:1e:20:ef:5d:
c0:f4:d0:ba:f2:c7:35:4e:49:2c:a6:c8:46:3a:e4:
65:84:48:86:97:75:de:90:8c:93:28:17:c6:ad:89:
02:ba:64:c4:a6:b0:d6:99:5a:a6:67:4d:ae:ae:cc:
ad:a3:d9:11:48:52:0a:cb:39:3b:12:b3:02:19:fa:
93:7b:57:2c:38:ae:a8:a9:e7:7f:9b:56:ab:a4:47:
f1:71:5e:a5:2f:1d:94:06:e0:60:ed:3c:3a:2c:47:
37:64:48:2e:e5:89:3c:ab:a5:5d:fd:6c:91:61:95:
5b:d9:56:bf:92:df:44:72:ed:2e:ec:18:a2:16:a1:
5c:c1:f4:e2:36:72:70:a2:c9:4c:31:12:75:8f:ad:
27:a1:78:f1:92:ff:62:ac:8c:ba:29:70:e4:1b:03:
57:5a:6e:56:d5:8b:14:78:a7:9a:cd:8e:ad:5b:cf:
65:b5:c9:ef:13:57:57:fa:20:99:01:4d:55:f6:31:
e9:fb:c7:13:63:42:b4:67:48:d2:3c:4b:72:ac:55:
94:93:02:4d:8c:ea:98:96:43:2e:12:ef:12:ea:27:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D4:F4:87:31:E6:92:9F:00:B5:8A:07:CA:77:08:BE:60:4F:F6:D7
X509v3 Authority Key Identifier:
keyid:5D:88:58:21:D2:40:64:37:CD:FE:C0:43:80:E9:67:51:5A:67:AE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/5D885821D2406437CDFEC04380E967515A67AECC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D885821D2406437CDFEC04380E967515A67AECC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.171.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:0a:f1:98:a0:63:3b:af:3e:73:5f:57:6f:a8:e3:41:e9:1c:
76:13:36:c4:0f:bf:59:e8:a6:78:8a:e1:4d:d2:d8:18:81:31:
2c:e8:86:c7:dc:2f:78:21:4f:96:e4:12:d7:65:76:aa:d8:e4:
4e:bc:79:60:fb:e0:65:94:23:27:77:f8:f3:b3:f7:8c:9a:7c:
27:21:7e:ec:d4:70:f1:a5:3a:d2:2e:9e:e0:00:1b:b2:35:72:
69:3c:44:58:dc:29:dd:21:14:9b:ad:b7:a2:8a:e0:4f:00:77:
3e:37:31:e4:24:bd:ed:11:a9:53:30:cb:a2:2d:65:47:d9:ee:
e6:97:db:90:e3:ff:4a:db:c0:5e:84:d2:0e:19:74:4f:36:9a:
ef:69:45:fa:11:30:e5:01:dc:2a:fa:45:ec:28:87:ee:94:01:
70:10:cb:fd:42:46:8d:10:2d:ca:7f:44:04:d0:f0:ee:f2:3e:
5b:7b:9c:24:57:89:ea:a7:13:27:5e:5e:9e:0a:63:d5:c2:43:
c9:c4:7f:a3:ec:e1:e7:c8:9c:83:e2:8b:1d:ee:47:cd:70:ea:
2d:5e:2a:95:45:f7:28:82:24:48:53:66:40:1a:dc:e1:80:46:
0d:79:05:eb:3e:59:08:76:d1:97:33:2d:da:c2:b0:e0:e5:75:
f9:25:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:04 2026 by rpki-client