
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa
File: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (raw, json)
Hash identifier: V6cyc1CcqyB7Bwt4/zuikRuoVLZO2D20sD1iOp+dhmw=
Subject key identifier: 08:83:A6:23:62:6D:6B:74:BC:AC:58:BE:7B:C6:75:0B:E6:20:C9:AD
Certificate issuer: /CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346
Certificate serial: 1F4E5AD9C173079383808AF5BB10860F1D106431
Authority key identifier: 12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa
Signing time: Sun 03 May 2026 02:54:42 +0000
ROA not before: Sun 03 May 2026 02:49:42 +0000
ROA not after: Sun 02 May 2027 02:54:42 +0000
asID: 141062
IP address blocks: 103.155.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl
rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:4e:5a:d9:c1:73:07:93:83:80:8a:f5:bb:10:86:0f:1d:10:64:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346
Validity
Not Before: May 3 02:49:42 2026 GMT
Not After : May 2 02:54:42 2027 GMT
Subject: CN=0883A623626D6B74BCAC58BE7BC6750BE620C9AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:90:02:ae:e8:ae:bd:b1:71:b5:d7:1a:66:
03:95:e9:1e:b6:2b:9a:c8:64:c4:0a:05:fd:96:15:
84:4c:6e:d7:8e:de:83:8f:8f:0f:d1:22:5e:40:7b:
72:fc:62:89:8e:ff:5f:b4:a5:6e:48:fd:26:ff:8f:
d7:41:20:b0:a4:bf:53:1d:0f:57:f1:61:eb:67:03:
a9:e8:ad:c6:89:03:e7:40:ad:4a:8c:0d:b2:f9:8f:
44:d5:7a:ac:49:11:9f:47:01:83:7e:54:7b:e2:63:
c5:06:dc:59:67:ff:43:48:0b:62:4d:85:1b:8b:f1:
70:1f:b1:54:06:de:d4:c8:17:b8:33:11:ef:c9:8f:
fd:ce:cb:ca:58:de:f5:7f:ac:c9:d6:00:85:56:f8:
a5:b2:3f:e6:cb:aa:6f:e0:cc:6a:db:aa:33:16:6c:
cb:7e:3b:fa:43:e2:8c:25:75:ef:0e:46:ee:41:a1:
50:57:17:41:6f:38:f0:07:48:45:9c:4d:37:19:64:
bf:80:12:9f:e5:77:7d:93:7d:d6:fd:02:64:44:68:
94:66:bf:04:22:e0:eb:a0:7f:52:77:10:f1:7f:78:
d7:e9:f0:82:af:23:cf:9c:d3:4c:2a:25:fc:e9:5b:
36:cb:bf:a1:e7:e5:6a:20:dd:2c:eb:de:59:35:08:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:83:A6:23:62:6D:6B:74:BC:AC:58:BE:7B:C6:75:0B:E6:20:C9:AD
X509v3 Authority Key Identifier:
keyid:12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.157.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a5:a9:f7:f9:bd:a7:6d:82:d5:9a:73:4a:45:ef:6a:ac:f8:
44:57:3f:25:1c:20:1b:6d:b0:69:3f:1d:bf:2e:94:34:24:62:
9d:16:32:2f:c5:33:65:ef:ab:a7:f1:f7:ea:17:31:ef:70:95:
27:89:c8:06:96:d0:8a:f9:b2:06:61:5e:35:0e:1f:c5:0d:16:
b4:6a:12:df:32:77:68:b5:0f:85:3e:2a:25:75:2e:0f:60:9d:
3b:ab:1a:57:28:00:73:7d:26:be:cd:20:a2:53:34:c4:14:00:
1b:fe:dc:b5:68:71:87:72:14:b4:5e:8a:13:3c:00:d0:77:6d:
fb:08:34:d8:9b:2d:65:74:33:46:e5:9a:09:d8:56:81:94:6b:
a5:bc:32:90:17:f1:44:cd:0c:bf:33:05:7b:59:a3:5b:ed:b6:
61:ae:1c:73:87:48:7b:39:e7:2e:ed:a4:e4:d9:4e:0b:df:60:
ed:01:62:8e:97:3d:e2:1f:74:0a:6e:49:e4:7e:5b:b4:fc:eb:
04:9c:5a:c1:08:67:a9:97:fe:58:5b:e1:11:d5:67:d9:37:5c:
65:bf:fd:2f:d8:3e:dc:e2:4d:b6:e8:cc:1b:2f:0f:41:c4:82:
08:1b:6d:6b:c4:22:1d:55:a8:b5:53:2c:89:84:54:84:7e:da:
81:2a:70:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:01 2026 by rpki-client