
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa
File: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (raw, json)
Hash identifier: nG5fCmE925uHgYNeygfmhhegb7zX/kDvlyw/SCpRN+I=
Subject key identifier: D9:92:9E:70:B3:DA:1E:74:33:84:43:60:EE:6F:47:F4:66:9F:D6:AD
Certificate issuer: /CN=AEBADFA06D76BE480430EDC8D27F4BE636880149
Certificate serial: 4990B1D8733E9F0B3AE0B7331BA227F580E19D9A
Authority key identifier: AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa
Signing time: Sun 03 May 2026 02:56:43 +0000
ROA not before: Sun 03 May 2026 02:51:43 +0000
ROA not after: Sun 02 May 2027 02:56:43 +0000
asID: 136862
IP address blocks: 103.102.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl
rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:90:b1:d8:73:3e:9f:0b:3a:e0:b7:33:1b:a2:27:f5:80:e1:9d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEBADFA06D76BE480430EDC8D27F4BE636880149
Validity
Not Before: May 3 02:51:43 2026 GMT
Not After : May 2 02:56:43 2027 GMT
Subject: CN=D9929E70B3DA1E7433844360EE6F47F4669FD6AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:ca:5f:a7:ee:c3:ff:e4:4a:7b:ac:5c:48:
f4:5e:51:e9:4b:2a:92:c0:02:d5:58:68:1a:92:41:
4b:06:82:57:3e:d7:8b:6a:a6:74:b8:39:fe:02:90:
3f:52:f1:cc:31:77:54:26:68:64:37:3c:45:48:0c:
8a:53:78:d6:bd:de:8e:a4:e9:e0:79:71:fe:2e:88:
5c:a7:fa:8f:9f:ae:ae:3c:6c:d3:7e:f9:e1:da:d3:
f5:b1:3f:47:b1:cc:6b:35:98:11:78:db:eb:37:27:
36:04:3c:45:d0:1e:db:b5:9f:41:e2:34:86:90:c9:
74:27:e6:62:c5:6d:b7:81:8f:3f:bb:44:4f:63:91:
c2:77:6e:9e:b4:39:8c:88:93:92:aa:39:d4:6a:e4:
08:4d:cc:c6:22:f7:d9:60:db:48:89:ed:e9:6d:9c:
a5:89:6a:00:8a:98:31:bf:a5:34:23:47:a4:52:96:
ff:75:88:ea:84:33:43:4f:a2:19:3f:74:90:47:fa:
8c:70:be:3c:88:fc:c7:79:35:ba:64:ca:f2:d6:24:
1d:56:29:dc:34:06:bf:5f:c7:ec:39:8a:fc:30:4b:
25:28:d1:87:84:e9:8e:31:22:43:c3:e7:da:15:d5:
69:d6:42:45:67:4d:84:03:98:f3:ce:7f:d2:9a:3c:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:9E:70:B3:DA:1E:74:33:84:43:60:EE:6F:47:F4:66:9F:D6:AD
X509v3 Authority Key Identifier:
keyid:AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:f4:cd:d9:06:d5:95:8a:d3:76:c5:f4:bf:78:dd:af:6b:67:
ac:60:5e:76:38:31:ad:c6:b7:d2:bb:4e:81:0f:47:4a:cc:f8:
24:20:bf:f7:ca:8f:9f:a2:79:e5:ac:80:91:a0:48:52:ac:7d:
fe:5c:6c:2e:71:b0:ab:2b:0c:90:84:e9:e9:ec:ae:83:2c:37:
7f:14:9c:56:6b:5f:18:d7:96:21:4a:0b:0e:53:11:48:a4:83:
e2:a4:29:6a:7e:c6:43:53:b8:45:33:31:97:be:04:22:ae:08:
24:14:af:cb:d2:38:56:98:05:fb:33:f3:1b:e4:15:13:1e:7e:
a3:59:fe:ba:d9:d5:00:75:2c:f2:71:9d:a3:a2:d4:56:ff:50:
cf:a2:c1:6e:e9:bc:20:07:3a:12:b9:c6:51:0f:9b:41:5f:53:
21:bb:8f:8a:a5:86:dd:69:bf:6e:00:e7:89:00:4d:0b:30:5f:
54:e4:2a:89:03:20:a0:b8:f1:ec:8d:86:c4:1e:fd:eb:5c:b4:
97:29:07:27:23:8f:cb:bc:ca:98:f1:1f:82:69:3a:d8:3e:e9:
82:19:8f:85:57:fe:c4:7c:12:1f:e4:7a:00:4b:c4:25:85:34:
7d:23:59:5b:75:4b:97:36:b2:56:cd:5d:61:62:41:a9:38:68:
10:8d:9d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:56 2026 by rpki-client