
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa
File: 3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier: 8F99VevvPnC2SR7w+F2wdLh67GSWSbbQHmOucM9JJac=
Subject key identifier: D9:B0:4D:C0:66:EE:E4:53:C5:70:F8:7A:97:A3:30:24:24:34:10:3B
Certificate issuer: /CN=C855F0A07BFEA69901C5345D79932B70E2991F5E
Certificate serial: 2E6D5424A2773B272034016AFB6926C6436C1277
Authority key identifier: C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa
Signing time: Sun 03 May 2026 02:57:17 +0000
ROA not before: Sun 03 May 2026 02:52:17 +0000
ROA not after: Sun 02 May 2027 02:57:17 +0000
asID: 154410
IP address blocks: 103.169.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl
rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6d:54:24:a2:77:3b:27:20:34:01:6a:fb:69:26:c6:43:6c:12:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C855F0A07BFEA69901C5345D79932B70E2991F5E
Validity
Not Before: May 3 02:52:17 2026 GMT
Not After : May 2 02:57:17 2027 GMT
Subject: CN=D9B04DC066EEE453C570F87A97A330242434103B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:58:2a:1a:a5:d7:5f:2a:52:da:a0:1e:50:
ad:44:4a:dc:d2:cd:d2:8e:7e:05:ae:ba:2a:82:4a:
70:f7:bc:ee:24:dd:fc:91:f0:63:b7:e9:4a:75:e5:
d5:02:dd:ca:1c:82:18:ee:54:59:59:62:c8:7e:cc:
4f:15:e4:b8:a1:ca:6f:dd:72:9a:0a:3b:09:6a:99:
d1:d5:04:c0:eb:59:97:98:d0:7f:89:34:e9:63:97:
77:2b:fc:f2:5e:93:93:34:59:53:c9:65:16:58:1f:
69:67:2d:d0:4e:fa:14:0b:b3:0c:81:47:12:7e:c2:
a8:44:42:d3:bf:ad:27:ee:08:0e:4e:34:8b:df:26:
50:04:c9:09:af:5b:22:c9:25:7e:88:7c:c7:dc:03:
f4:d6:6a:98:cc:b4:02:ce:b4:81:d1:e2:4a:63:41:
88:6f:f6:f5:cb:54:c3:00:2f:6d:b1:10:45:bb:4b:
f8:de:9d:b6:29:0a:f0:26:c4:10:e9:b6:d7:05:a9:
87:d6:0f:fd:97:c1:37:9b:1e:98:fe:e8:4c:fd:9e:
31:61:43:3d:a7:2e:78:75:56:d2:8e:6a:45:ad:b4:
53:49:dd:3b:94:6b:fb:87:7d:5d:12:d9:2f:2f:b6:
c4:e6:83:11:f8:5c:6c:b0:5d:07:0f:29:d5:cc:95:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B0:4D:C0:66:EE:E4:53:C5:70:F8:7A:97:A3:30:24:24:34:10:3B
X509v3 Authority Key Identifier:
keyid:C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.143.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1c:3a:5f:27:6d:3e:1e:0d:c2:b5:e2:07:a9:9f:2b:28:b7:
09:96:9c:38:3a:13:d9:6f:c3:e1:3a:ca:57:7e:66:a0:7f:23:
8b:76:14:70:1f:c4:b7:1f:dc:4e:d2:00:c1:72:80:19:36:5e:
43:42:b1:16:ed:a0:8b:ee:21:17:6a:3c:32:ac:09:fd:cc:64:
0e:08:1b:bc:e9:5a:95:c4:d1:00:e0:92:8a:cd:f3:e8:7f:21:
e4:89:e4:b1:cb:a5:3d:72:ce:cb:71:48:03:c5:86:2e:7a:1d:
f8:0e:4d:2b:41:15:7a:db:1c:ab:2c:88:e1:65:a4:c3:35:f7:
ce:32:39:e0:06:cc:e7:81:5e:fc:3a:bb:b2:96:a9:51:eb:96:
e6:32:fa:9f:49:ae:db:ae:84:55:c8:89:d6:1e:c3:56:f2:c1:
f6:e9:45:97:47:ea:4b:7f:95:ff:e3:ed:b8:0e:ed:34:c9:14:
cc:55:53:27:f4:72:95:0d:d4:5a:2a:eb:03:aa:92:ff:7d:cc:
90:ec:e1:52:94:5c:38:b2:0c:67:eb:d9:b7:56:ba:8d:87:ef:
83:80:79:ba:24:9c:39:76:6d:53:33:68:4f:ae:ff:f5:4b:25:
de:12:be:fb:f8:bc:12:5e:2b:b6:c7:71:91:ba:1f:1d:60:c5:
e4:d0:18:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:02 2026 by rpki-client