
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa
File: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (raw, json)
Hash identifier: OzhJdHffqoSTJ5pFjxmQ04VEvXqHaJWqkM8YRHVnaeQ=
Subject key identifier: 37:C1:5A:28:7B:AE:B7:FC:F3:2D:42:C9:DF:85:5C:52:10:92:0B:0E
Certificate issuer: /CN=873409842DEE948D3DE05C618194C87A259E04BF
Certificate serial: 12E779D910CE89BEAF00D8354C63D5D365715375
Authority key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa
Signing time: Sun 03 May 2026 02:51:05 +0000
ROA not before: Sun 03 May 2026 02:46:05 +0000
ROA not after: Sun 02 May 2027 02:51:05 +0000
asID: 140475
IP address blocks: 103.153.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl
rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e7:79:d9:10:ce:89:be:af:00:d8:35:4c:63:d5:d3:65:71:53:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873409842DEE948D3DE05C618194C87A259E04BF
Validity
Not Before: May 3 02:46:05 2026 GMT
Not After : May 2 02:51:05 2027 GMT
Subject: CN=37C15A287BAEB7FCF32D42C9DF855C5210920B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:07:25:ae:65:11:f4:4e:52:cd:50:2a:ac:
57:a7:71:2c:f5:34:32:ac:0e:77:c2:6a:28:f1:55:
8e:66:c8:06:c4:08:7a:b8:8a:2e:0e:6f:b5:e5:b1:
e2:56:47:fd:b9:98:a2:30:aa:30:0a:a0:84:df:58:
27:0b:ec:32:02:ca:d8:6e:f4:f9:0d:17:90:0f:a9:
8a:a7:56:dc:34:82:bd:61:db:75:2d:c5:94:1c:26:
88:24:a2:60:a5:35:18:8c:7b:ee:62:1c:28:aa:dc:
98:ce:9c:8b:39:9b:f7:43:a8:11:dc:c2:44:24:eb:
4e:33:85:1d:dd:d5:fd:6b:41:e9:4a:b1:e0:76:86:
f8:3a:3e:41:6a:b9:39:b9:1d:9f:fe:76:0f:45:57:
a4:08:b0:30:c6:32:62:ec:36:92:fe:e3:3f:fb:54:
25:fa:c9:e9:52:8d:14:0b:45:77:66:c0:18:1b:38:
75:93:95:53:b1:4f:d3:a2:03:a7:02:c3:00:66:28:
a1:29:7d:12:cd:af:a6:f0:ad:4d:fa:fe:06:ca:9c:
3c:1f:7b:fe:e5:95:0a:76:35:26:a6:dd:bc:9b:ab:
69:fb:69:5a:78:f3:91:ed:67:0b:06:30:2f:fe:98:
c3:08:c0:dd:21:fd:2f:67:60:b5:57:4d:13:76:9b:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C1:5A:28:7B:AE:B7:FC:F3:2D:42:C9:DF:85:5C:52:10:92:0B:0E
X509v3 Authority Key Identifier:
keyid:87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.247.0/24
Signature Algorithm: sha256WithRSAEncryption
15:45:e7:72:a0:40:54:c9:b5:8f:4d:ed:f6:f0:fe:cc:11:cb:
7a:58:57:c2:90:b2:23:4a:c2:ab:7b:f6:a4:79:18:f1:22:68:
d7:7e:d1:a6:8e:97:57:12:66:08:4a:cb:0c:25:18:6f:b5:85:
c8:b6:a0:be:5e:89:7b:94:c8:94:3e:56:70:d5:b4:46:4c:8d:
6d:fa:15:1d:e0:70:43:ff:67:f2:dc:8c:df:7a:57:93:47:23:
97:27:4d:c8:fd:61:91:56:79:c4:56:63:11:f0:4c:2e:a2:4b:
91:1e:ce:8f:b7:05:d1:9f:d8:e6:ad:6c:98:b2:af:0b:ce:9f:
21:88:27:d7:c3:9a:fe:f5:23:fe:3c:b0:1e:b7:32:20:f5:33:
5f:3a:7f:9e:9b:b8:71:b8:6f:f3:74:6d:cf:ab:c5:4c:c6:6e:
35:66:11:42:8d:56:a4:d9:14:d4:6f:3d:04:d2:00:11:52:a2:
03:5d:41:6c:8a:19:a1:38:c3:8e:e2:15:f8:59:cd:4b:0d:07:
c5:e1:19:3d:c2:0d:1d:65:cc:ab:ae:a0:9c:ec:e3:7a:e4:9b:
22:ee:fe:52:bf:a0:39:24:a2:b2:7a:c3:d5:3e:4a:6a:73:a1:
d7:58:30:fb:1c:26:71:77:dd:32:c4:7c:20:8a:55:32:98:df:
c0:13:c5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:45 2026 by rpki-client