
$ rpki-client -vvf rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20323135373237.roa
File: 3130332e3132352e3130342e302f32322d3232203d3e20323135373237.roa (raw, json)
Hash identifier: 03NYkPPLVfBPNGc3GX0j/D9a1kQon+xDAfJQkUY2WfI=
Subject key identifier: EA:11:08:2D:45:EF:1A:CE:64:B4:86:30:12:59:22:B8:0D:C4:96:72
Certificate issuer: /CN=E48354BE9F141988ABFB54173029C4000CF9B18B
Certificate serial: 4FF30C525E12749D8C10D2B117A2F31603D4E2C5
Authority key identifier: E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20323135373237.roa
Signing time: Sun 03 May 2026 02:48:53 +0000
ROA not before: Sun 03 May 2026 02:43:53 +0000
ROA not after: Sun 02 May 2027 02:48:53 +0000
asID: 215727
IP address blocks: 103.125.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.crl
rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f3:0c:52:5e:12:74:9d:8c:10:d2:b1:17:a2:f3:16:03:d4:e2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E48354BE9F141988ABFB54173029C4000CF9B18B
Validity
Not Before: May 3 02:43:53 2026 GMT
Not After : May 2 02:48:53 2027 GMT
Subject: CN=EA11082D45EF1ACE64B48630125922B80DC49672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:d5:62:45:fb:73:6b:28:81:c8:66:9c:99:
a1:c7:b4:7e:9d:95:98:7a:09:ba:ed:32:07:5c:77:
36:44:f0:16:be:b6:45:b0:d0:11:34:1a:22:ea:c7:
84:30:13:da:6a:70:eb:20:58:ec:65:b0:3c:a7:b9:
c5:3b:50:b7:cb:5b:68:5c:bd:93:64:c6:e3:49:6f:
34:fc:be:a3:bf:0c:92:29:f7:87:39:32:b4:7e:03:
db:7b:9b:3b:7e:92:66:5a:64:ba:d8:9d:cf:87:1e:
49:c0:f4:b4:15:f5:d0:26:ff:94:27:ff:ec:e9:fa:
8a:1a:60:05:a1:69:26:8c:33:a6:07:42:ba:3a:dd:
91:9b:35:e8:c1:f1:f3:96:25:2b:6a:5a:29:eb:1e:
9d:2a:ad:53:8e:f9:5e:74:eb:ef:2f:d1:18:af:42:
fb:a8:96:ee:11:86:92:a8:c1:2d:92:33:58:9f:d9:
65:ee:da:10:07:b0:f8:73:fe:08:46:ec:16:a1:94:
bf:66:4c:bb:3b:69:cc:51:3d:b5:f9:55:81:ec:3a:
12:48:a0:80:66:69:5c:1e:7d:de:a0:35:11:02:6d:
5d:d2:aa:30:f4:4b:40:69:eb:49:06:e2:8b:0f:ee:
9c:e3:35:f2:ff:e8:b0:ea:b5:7e:06:57:61:05:58:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:11:08:2D:45:EF:1A:CE:64:B4:86:30:12:59:22:B8:0D:C4:96:72
X509v3 Authority Key Identifier:
keyid:E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20323135373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:ed:db:b6:2b:68:5b:72:99:4d:5c:d8:75:4e:3c:4f:93:4a:
f3:d3:90:43:04:ac:74:cc:97:11:a5:11:33:fa:26:57:55:39:
e8:cf:1f:f1:1b:33:68:c4:be:94:ab:3f:c0:de:38:7d:dc:84:
fa:2f:58:49:57:aa:91:8a:cd:50:45:87:4b:32:fa:ce:df:77:
ce:b1:b3:3a:33:88:09:ea:18:c3:19:67:ed:40:ba:b2:1e:36:
08:fe:35:48:2d:61:fb:c3:5f:16:2d:bb:15:36:06:5b:73:00:
1e:43:b1:0d:84:48:59:c1:81:46:e9:26:60:80:51:8b:ce:84:
8d:ff:1c:5f:04:88:e9:9d:0d:63:27:24:10:e5:20:a8:ed:d9:
20:ab:87:fd:49:cc:49:59:c7:91:a4:d0:dd:fd:a0:f8:a5:e2:
de:c9:92:f7:b8:36:20:77:4b:c7:6b:ab:b9:23:c7:4f:e9:1c:
9d:47:14:3c:45:0b:b0:a9:46:9a:74:e8:f4:5c:6c:b9:a1:38:
b9:c7:47:0a:a1:a2:11:d2:ee:55:4e:cb:2e:99:2c:02:4f:d5:
31:24:9e:8b:7e:8e:7a:b6:4a:81:40:9b:29:de:ef:1d:02:9f:
fa:4d:a8:3e:37:b8:38:90:24:d6:8d:af:6a:8f:99:19:48:64:
61:c5:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:30:28 2026 by rpki-client