
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa
File: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (raw, json)
Hash identifier: 4PzbZRuGW4w9K+AQtbo2sSaNspynGeSFyEx3Ih4El8A=
Subject key identifier: BE:53:6C:81:24:16:A1:19:46:15:B9:09:6C:92:36:5D:33:8E:65:69
Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Certificate serial: 5703F34C11488837A61199D9653B7AB01F96445B
Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa
Signing time: Sun 03 May 2026 02:51:08 +0000
ROA not before: Sun 03 May 2026 02:46:08 +0000
ROA not after: Sun 02 May 2027 02:51:08 +0000
asID: 136079
IP address blocks: 103.86.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:03:f3:4c:11:48:88:37:a6:11:99:d9:65:3b:7a:b0:1f:96:44:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Validity
Not Before: May 3 02:46:08 2026 GMT
Not After : May 2 02:51:08 2027 GMT
Subject: CN=BE536C812416A1194615B9096C92365D338E6569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:ad:e8:64:c4:f0:c2:be:a9:79:eb:31:1f:
d7:e1:ae:de:7f:ec:d1:e0:f9:da:2a:e2:c6:47:10:
c0:f0:dd:a0:c9:9b:79:dc:34:b6:ef:cb:a1:12:f1:
c7:1f:c4:c0:73:c9:9e:fe:20:34:fd:d4:80:32:44:
d0:2f:00:66:7a:b5:b8:af:fd:0e:1d:03:47:d0:0a:
0f:71:92:95:ed:6d:97:f3:d1:9e:4f:b9:f2:73:e7:
3f:a1:e1:5b:26:15:36:7a:59:f9:d2:20:3f:b5:97:
ab:13:64:6b:03:2c:b4:0a:99:2f:0e:12:4e:2c:1c:
8d:71:00:06:2c:d2:69:96:68:cb:37:4a:fc:ff:5d:
32:9d:62:c8:18:fd:27:b7:1e:ed:f2:4b:80:5c:c7:
e8:b1:85:81:89:81:f9:b4:d1:67:cf:a0:29:54:66:
84:62:66:9e:35:b3:12:db:6e:88:9e:73:03:c0:c7:
ee:3f:79:40:4b:c8:c3:be:ce:0b:07:d8:c3:70:42:
20:f7:71:f3:5d:5e:4a:c1:ed:58:2f:01:6f:31:2c:
94:4c:a8:a6:57:e2:70:ca:41:6a:3e:71:06:5c:7c:
9c:c6:7c:8f:9f:58:3f:2a:1c:1c:86:19:fd:cc:9f:
f6:8c:c5:9e:f4:65:8c:40:e2:17:1b:17:c7:1c:28:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:53:6C:81:24:16:A1:19:46:15:B9:09:6C:92:36:5D:33:8E:65:69
X509v3 Authority Key Identifier:
keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.100.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fa:d9:31:af:59:c0:b5:96:56:3a:b1:13:a7:2d:94:21:91:
ec:8b:fe:12:1a:89:ab:98:f0:2a:84:95:82:55:05:45:95:f6:
00:38:0e:aa:de:96:ee:ea:d4:e7:72:5f:08:3f:39:23:30:a0:
68:ee:9a:64:b9:a8:87:87:39:9a:4e:2d:69:7a:94:8b:b4:97:
36:86:24:74:4d:7d:72:48:94:d1:1c:27:cf:1c:c4:7c:b2:f4:
fa:8c:f0:a8:07:8a:14:13:dc:a5:37:12:f0:52:b6:0e:73:3b:
b8:61:b8:10:60:c1:27:4a:88:00:70:3e:1a:bf:01:9b:13:1f:
91:46:ac:02:e8:61:5d:d5:74:0a:c3:28:98:17:8a:f6:32:fa:
de:5d:56:84:ce:1d:8e:e8:72:f4:4f:55:84:be:52:89:9e:85:
20:df:91:f4:dc:6d:29:6c:f2:9e:62:89:b9:6d:a2:e5:ff:ee:
62:11:58:a4:42:3b:be:11:ff:1d:e4:f1:7b:f9:30:b3:31:9e:
32:12:6b:b9:0c:55:85:a4:ab:74:06:62:04:75:08:00:50:68:
dd:b0:06:1b:f8:2c:6a:1a:b0:fe:37:de:79:60:3f:d0:21:a9:
13:17:bf:b3:39:70:48:1e:b9:72:38:63:df:ef:6c:83:ae:44:
31:50:45:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:03 2026 by rpki-client