
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa
File: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (raw, json)
Hash identifier: diFLhr4fVvfR6ElD2+x6FyfBVBmvWMODzaZCy9XdQ10=
Subject key identifier: 45:E9:D6:5E:8E:89:B3:34:F5:35:B3:DA:B2:0F:E9:21:27:2B:18:76
Certificate issuer: /CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A
Certificate serial: 075F9B3DC5416A8089DAE89FB0DE27EEE0AF6F15
Authority key identifier: 26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa
Signing time: Sun 03 May 2026 02:57:36 +0000
ROA not before: Sun 03 May 2026 02:52:36 +0000
ROA not after: Sun 02 May 2027 02:57:36 +0000
asID: 151519
IP address blocks: 103.239.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl
rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:5f:9b:3d:c5:41:6a:80:89:da:e8:9f:b0:de:27:ee:e0:af:6f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A
Validity
Not Before: May 3 02:52:36 2026 GMT
Not After : May 2 02:57:36 2027 GMT
Subject: CN=45E9D65E8E89B334F535B3DAB20FE921272B1876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:86:21:49:2e:3a:b5:6a:a8:85:6b:f7:ca:
94:83:e7:44:47:47:cc:98:58:55:b7:a4:d0:32:a1:
8a:59:96:d2:fa:81:ba:3d:2a:42:41:de:d0:a6:eb:
1c:b8:08:bd:84:5f:98:1c:2f:c5:df:df:ea:35:ac:
ad:aa:2f:68:61:60:f8:09:01:69:1f:06:cc:2a:3b:
19:5e:09:84:b9:60:c1:2f:f6:87:9c:85:b6:78:4c:
01:e3:58:cf:b2:39:e0:3a:ea:3c:70:44:7b:b1:d5:
5d:9a:46:ca:8b:ff:31:a7:0a:c8:08:b8:ff:34:ee:
e6:03:92:f3:b9:87:20:16:3c:01:e0:92:d6:c8:a3:
4f:76:07:33:1d:c9:cd:68:30:10:06:11:19:66:61:
92:18:bf:00:71:eb:9d:1c:23:c4:c2:28:ce:c1:a1:
01:b4:73:04:d5:51:fe:35:c9:6b:a8:43:fa:14:bb:
8b:d1:8f:50:1f:70:a5:8e:7a:0f:6f:b7:c8:09:be:
a0:77:83:0f:de:ad:14:2e:11:2a:f6:11:9f:f0:54:
db:55:78:7b:c1:a8:79:9f:79:b9:0c:11:b8:09:0e:
cb:fb:f6:85:61:c8:78:78:85:15:4c:43:cf:22:95:
a0:4e:e3:f2:9d:5b:62:9c:30:2e:c3:e5:56:0d:3b:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E9:D6:5E:8E:89:B3:34:F5:35:B3:DA:B2:0F:E9:21:27:2B:18:76
X509v3 Authority Key Identifier:
keyid:26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.20.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:64:9e:8e:e6:ab:f7:0c:ba:8c:b1:aa:c0:d9:76:59:32:5c:
13:36:f9:d0:a7:79:75:c5:f1:6b:86:f9:1d:0d:c4:82:22:ad:
b6:68:11:66:e9:a8:9c:a6:8f:90:bf:17:91:44:9a:4c:8e:4b:
e4:d5:7f:58:cf:03:27:c8:7e:1e:54:ac:24:2d:04:1b:4d:80:
5d:99:b9:14:0a:6c:7c:4d:8a:4b:a4:46:95:4f:af:82:76:50:
cd:c2:88:2a:ca:6c:6f:43:a6:a8:78:fc:d7:0a:cc:61:df:1d:
e9:56:0d:77:d6:f4:ad:b9:45:c5:f0:1d:b3:71:83:50:0f:fc:
7d:ef:47:6b:82:ee:93:ce:86:51:d2:57:99:19:4f:91:5a:f0:
10:11:02:d4:ab:99:30:14:67:2f:31:5b:7e:88:63:c6:82:ea:
c8:8c:fd:84:ef:5f:d0:23:93:6b:27:d6:09:d7:e7:10:9f:f2:
7a:88:16:e0:14:25:c9:e2:32:2d:28:e5:ac:37:5e:5d:8d:a8:
67:af:eb:df:cf:f0:c7:0b:14:d0:0a:4d:fe:73:d2:8e:e1:ee:
7c:59:80:db:63:0e:41:f3:0f:07:92:d5:ab:76:cb:b0:a4:b9:
9f:88:d1:9f:a9:b4:e0:b5:3d:70:4d:83:a7:2a:17:d9:cf:f0:
bc:eb:4e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:47 2026 by rpki-client