
$ rpki-client -vvf rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa
File: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (raw, json)
Hash identifier: KFtuEHm37ul5faThoZcK5kQxOUy32ImJwfhhme8UX4Q=
Subject key identifier: 5D:52:65:C6:F0:50:54:DF:46:27:F7:A1:53:7D:8C:57:25:2C:DA:05
Certificate issuer: /CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC
Certificate serial: 710ED2CC5380CC2DB2A4BFD3B8FE74EBEB4AC153
Authority key identifier: 69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa
Signing time: Sun 03 May 2026 02:53:02 +0000
ROA not before: Sun 03 May 2026 02:48:02 +0000
ROA not after: Sun 02 May 2027 02:53:02 +0000
asID: 139969
IP address blocks: 103.147.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl
rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0e:d2:cc:53:80:cc:2d:b2:a4:bf:d3:b8:fe:74:eb:eb:4a:c1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC
Validity
Not Before: May 3 02:48:02 2026 GMT
Not After : May 2 02:53:02 2027 GMT
Subject: CN=5D5265C6F05054DF4627F7A1537D8C57252CDA05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:f0:25:35:32:2d:65:cc:23:ad:fe:0e:b2:
ac:e8:01:11:f3:d2:24:96:f2:ed:af:27:1a:0a:5a:
fe:2b:80:ca:fb:15:f0:1e:fd:e7:5d:fc:dc:d6:85:
e1:4a:aa:42:9c:bb:75:51:df:75:86:56:21:a7:cb:
cf:7b:82:74:4e:b6:0e:c1:9d:eb:46:db:c0:c7:68:
4d:fb:b3:37:e5:73:00:d7:3d:e0:6c:b3:3f:18:12:
f6:4e:6e:61:4e:ee:0c:d2:1c:0e:86:83:17:26:16:
b8:dd:7d:3a:eb:2d:6c:f2:51:2c:eb:bc:e0:50:c4:
f2:13:d2:ef:73:fc:06:28:12:b8:41:4a:00:c6:a3:
23:5f:db:73:9f:1b:e4:2a:54:e9:10:8b:42:77:d5:
6e:a4:2f:4e:81:76:52:fe:f3:32:4a:b1:9c:cb:08:
87:9c:c7:e1:a0:05:e6:b0:7b:e5:ec:2d:58:52:73:
03:f4:ed:8d:a3:79:a8:ec:55:80:bd:28:ce:9f:a3:
b7:c2:d2:71:bc:a8:b9:6e:4b:26:83:b4:79:a5:a0:
dc:4d:b4:ed:85:b8:d7:ab:a8:6c:c5:63:85:49:30:
e5:76:53:66:86:61:29:4a:8d:21:e1:1f:69:e4:bf:
92:1b:71:71:a7:c1:46:42:e7:c6:3c:b7:f0:06:1e:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:52:65:C6:F0:50:54:DF:46:27:F7:A1:53:7D:8C:57:25:2C:DA:05
X509v3 Authority Key Identifier:
keyid:69:1B:A9:D2:8B:A9:B2:06:7D:A7:60:6F:F4:B5:AD:03:1F:0B:58:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/691BA9D28BA9B2067DA7606FF4B5AD031F0B58EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.220.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:a8:82:42:05:93:d6:c8:b1:e5:d6:1b:aa:61:6e:c3:5f:20:
67:97:10:fb:28:68:e6:17:26:95:17:7f:59:8e:ea:8d:d5:23:
09:46:53:0c:e7:92:7b:0a:09:65:65:b6:39:e5:e1:1b:06:11:
cb:f1:62:bb:c3:f1:5c:3c:1d:45:2b:14:95:4a:24:45:ea:46:
86:b6:69:70:7d:81:51:fd:28:a3:3a:90:04:1a:5b:c6:e7:20:
f5:a6:ab:ad:27:97:fa:08:16:e4:d3:ff:65:b4:58:92:cd:49:
13:ae:38:ad:e3:ff:d2:d8:f7:b7:76:b9:38:6a:69:9d:44:c3:
b2:6b:42:a3:34:e4:a8:c1:59:0c:c1:30:f1:58:71:a6:35:21:
8e:d2:bd:de:da:e2:84:47:a6:5a:28:80:18:3f:83:34:e6:c2:
ed:c8:0f:12:f3:df:df:55:73:f8:f3:99:8c:32:35:53:87:a4:
e7:d8:34:d3:d9:d9:35:59:60:04:b2:c8:e7:72:83:9f:a1:42:
80:64:ee:88:09:bc:65:fc:3e:65:48:e4:6b:f0:fd:06:07:a8:
6e:93:06:d6:0a:ae:e3:7e:7b:fb:0f:5e:7d:96:0e:ac:86:6e:
e7:31:ec:39:1b:c1:78:b6:6f:d5:12:3f:b1:81:36:20:fa:63:
2f:b2:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:01 2026 by rpki-client