
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa
File: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (raw, json)
Hash identifier: U5jPUQcFUSF8Cs6G3z+HWq8nVnMWiXaM/O6dl9Aru1k=
Subject key identifier: 39:6A:48:FD:B4:9F:0C:89:19:5C:67:F5:0B:3E:1F:EA:CF:AA:65:5D
Certificate issuer: /CN=855FB1394E274E698967BBB475F8817B92100FB4
Certificate serial: 06CDE8F006D2A20060C6EBE934878A4993DDDE96
Authority key identifier: 85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa
Signing time: Sun 03 May 2026 02:54:54 +0000
ROA not before: Sun 03 May 2026 02:49:54 +0000
ROA not after: Sun 02 May 2027 02:54:54 +0000
asID: 46047
IP address blocks: 103.225.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl
rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:cd:e8:f0:06:d2:a2:00:60:c6:eb:e9:34:87:8a:49:93:dd:de:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855FB1394E274E698967BBB475F8817B92100FB4
Validity
Not Before: May 3 02:49:54 2026 GMT
Not After : May 2 02:54:54 2027 GMT
Subject: CN=396A48FDB49F0C89195C67F50B3E1FEACFAA655D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:0a:38:1e:b7:1c:45:c3:19:80:a2:5d:ee:
aa:87:f0:a6:31:f0:ec:3b:7b:29:cc:af:79:e4:ce:
da:28:22:0b:65:dc:f8:02:fc:2e:be:98:f6:ba:06:
ed:fd:d0:32:e4:23:49:ad:96:05:8f:f4:f1:c4:89:
1b:98:93:8a:fc:17:75:e3:6f:ab:9d:fd:79:1c:be:
42:c5:e1:77:3d:ac:04:ce:7d:fd:7e:45:fe:79:12:
60:b3:47:bb:48:38:d0:7c:7f:0d:96:74:65:72:b3:
30:ac:3f:14:f9:da:41:e5:f0:13:b1:3c:d2:4d:23:
0d:70:cc:9b:83:5c:d4:7c:99:38:63:eb:67:1d:95:
5d:5f:34:72:09:3a:0c:53:4f:26:9f:cf:84:f4:21:
24:d9:1e:69:62:5e:c0:02:06:ec:94:ec:32:ea:3e:
97:bf:d8:35:1f:5a:53:1f:17:2f:17:6f:8a:23:20:
89:06:76:44:3e:1a:14:c4:48:cf:4b:8f:43:78:d8:
a6:23:dc:df:c1:eb:64:29:b7:14:e4:24:0d:cb:0c:
bd:27:94:10:35:72:10:53:9c:95:1e:30:d6:44:21:
bc:ea:fe:40:19:41:56:7d:3b:20:3e:eb:a8:5e:6c:
1a:4f:08:99:61:eb:ee:bb:95:17:fe:90:24:1d:9b:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6A:48:FD:B4:9F:0C:89:19:5C:67:F5:0B:3E:1F:EA:CF:AA:65:5D
X509v3 Authority Key Identifier:
keyid:85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.225.170.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:45:e0:ae:8b:2c:39:62:76:d7:cf:63:3c:d2:35:96:18:1b:
f7:63:0e:90:26:12:06:14:96:ac:a6:40:d7:34:fa:45:36:61:
28:b1:0b:49:24:14:fb:e7:38:fe:1c:bb:90:32:ee:d5:6a:5d:
d3:94:78:31:97:7e:b6:62:e0:ed:54:51:c4:c1:6f:9f:7a:0a:
7c:3a:1f:72:07:8e:2e:fb:15:9e:fa:a6:41:cb:08:f2:06:3c:
21:fe:1b:11:f4:6b:ce:c9:f3:c9:d3:ba:e6:22:e4:3e:36:3e:
cd:59:bc:46:03:d9:66:89:93:8b:0f:ab:76:88:a9:4f:89:70:
71:5d:36:7c:0d:c7:6e:7c:d8:62:fc:bc:96:cd:da:a8:3e:41:
3e:2c:b3:11:f6:fd:89:0d:ab:26:8d:79:19:ae:57:ee:12:44:
55:fc:e3:fd:c2:d3:3b:82:f3:d1:db:f5:27:cb:74:f4:64:46:
62:30:c2:30:5f:e0:d5:a7:cc:84:22:f4:c4:85:24:40:f1:d6:
d3:4e:b2:a5:f3:bc:dc:64:5f:20:7e:5c:d1:50:3a:95:38:68:
93:5d:c2:4c:2c:6d:ec:c9:1a:77:f7:e5:78:1b:1d:92:71:d1:
d3:10:b7:6f:3f:1e:69:96:dd:df:28:fc:f3:4d:0b:b1:b9:8a:
a6:6f:df:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:20 2026 by rpki-client