
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32332d3234203d3e203435333035.roa
File: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier: MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=
Subject key identifier: 35:3B:A6:89:45:71:B9:B6:A4:F0:33:21:E0:7E:6A:F8:54:AE:1B:86
Certificate issuer: /CN=02A914400077F3E213C8972280DBD775A6B4C27C
Certificate serial: 5150896032412FB7FBFC9C9734C5FB2CE4587E08
Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32332d3234203d3e203435333035.roa
Signing time: Sun 03 May 2026 02:56:29 +0000
ROA not before: Sun 03 May 2026 02:51:29 +0000
ROA not after: Sun 02 May 2027 02:56:29 +0000
asID: 45305
IP address blocks: 103.189.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl
rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:50:89:60:32:41:2f:b7:fb:fc:9c:97:34:c5:fb:2c:e4:58:7e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C
Validity
Not Before: May 3 02:51:29 2026 GMT
Not After : May 2 02:56:29 2027 GMT
Subject: CN=353BA6894571B9B6A4F03321E07E6AF854AE1B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3b:b0:6d:38:3f:d9:c4:3f:a2:6f:00:b5:4f:
29:65:89:84:b2:cb:2b:44:02:46:18:56:d6:cc:f7:
41:43:8e:2c:7f:29:a2:68:46:a9:a3:c9:55:d6:35:
94:59:4b:3a:c7:c0:38:a1:76:14:26:d6:b0:f4:e1:
76:b1:8b:c3:77:8e:6a:bb:e1:9c:ce:9d:23:0b:b4:
2f:7d:f5:97:a2:95:7a:4e:6b:94:08:67:79:61:38:
24:d1:7b:d4:c9:0d:1e:07:f3:b3:ce:5a:d4:ae:b3:
df:59:ea:11:15:2f:b1:73:10:64:0b:81:43:49:d2:
85:8e:4c:ae:62:fe:35:cb:fc:8d:61:f9:0b:05:a9:
d3:ff:f4:ac:9f:ed:d6:e1:f4:2b:e8:3d:4b:09:d6:
5e:17:2c:1d:07:b4:47:20:81:b0:1f:ab:5e:74:08:
f6:da:bc:84:03:bf:10:92:66:b4:75:a2:8d:8f:be:
7a:e8:6e:4e:f7:fe:6a:17:2b:5f:ce:02:91:83:f8:
43:5d:26:e3:7d:b5:85:1f:b2:ca:76:89:0d:4f:96:
ac:3c:07:41:8d:73:26:85:c3:89:d0:4c:7c:0b:b4:
a5:bf:09:d7:3d:80:89:83:c7:ec:b0:3e:5b:ca:6e:
7e:ba:f0:c8:81:7e:77:79:28:c3:42:2d:5d:a4:4f:
b6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3B:A6:89:45:71:B9:B6:A4:F0:33:21:E0:7E:6A:F8:54:AE:1B:86
X509v3 Authority Key Identifier:
keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32332d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.96.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:92:10:25:0c:22:f0:c5:68:27:08:03:78:8e:0f:65:cd:b3:
72:8f:86:dd:e3:e9:ab:5a:dc:bc:27:01:78:db:a0:c0:c9:85:
eb:21:63:5c:93:3d:c3:8c:73:01:04:1e:3d:bf:00:f8:a5:97:
16:dd:45:53:af:61:e0:95:19:9d:dc:23:86:c1:11:81:7b:d7:
8b:cb:39:9d:7d:79:82:99:1d:4b:72:13:0b:0f:d1:70:1c:69:
67:05:be:22:93:35:3f:dc:98:d6:6d:dd:7c:5c:b8:a6:4e:62:
cd:a5:e7:f1:d5:c4:70:48:ce:a8:b6:c7:65:b3:a6:df:e8:34:
2a:19:7f:39:48:8c:ce:e3:52:6d:9b:38:28:c3:1c:c9:d8:b4:
67:3c:e5:d9:9f:be:d6:bd:01:2e:ac:ae:87:4b:e0:95:7e:f7:
bd:3e:26:a3:b7:cf:79:13:68:72:8f:8a:e0:27:a1:eb:74:c9:
31:00:94:2a:6d:3b:1b:c5:cf:6e:d0:e8:c6:51:8c:f2:af:a6:
13:ae:06:30:e4:73:17:01:25:c5:48:11:fe:f4:ff:be:64:ec:
15:18:99:17:1f:1e:44:68:0e:a3:b3:ee:00:f4:13:de:a4:8b:
d7:b3:a5:cf:a1:6a:19:3b:19:45:5f:4c:ff:f3:71:6b:e3:31:
b1:45:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:39 2026 by rpki-client