
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/3130332e3135322e35322e302f32342d3234203d3e20313431303532.roa
File: 3130332e3135322e35322e302f32342d3234203d3e20313431303532.roa (raw, json)
Hash identifier: ajRVgGN4gMUd4j39yvek6vpf46EiM5S4d3QDYc3oIa4=
Subject key identifier: 1A:F5:64:36:5B:06:6F:1F:74:17:3F:46:34:96:44:21:51:B7:D0:66
Certificate issuer: /CN=C0DF2950676479309D2FBC873ADFE7F5B6058640
Certificate serial: 2E84459B30BD0E9A9A8FBFC0479BDA41CEB0D16A
Authority key identifier: C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/3130332e3135322e35322e302f32342d3234203d3e20313431303532.roa
Signing time: Sun 03 May 2026 02:57:45 +0000
ROA not before: Sun 03 May 2026 02:52:45 +0000
ROA not after: Sun 02 May 2027 02:57:45 +0000
asID: 141052
IP address blocks: 103.152.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl
rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:84:45:9b:30:bd:0e:9a:9a:8f:bf:c0:47:9b:da:41:ce:b0:d1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0DF2950676479309D2FBC873ADFE7F5B6058640
Validity
Not Before: May 3 02:52:45 2026 GMT
Not After : May 2 02:57:45 2027 GMT
Subject: CN=1AF564365B066F1F74173F463496442151B7D066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7c:6d:2b:43:b3:45:12:f1:8a:ce:37:59:fe:
a1:27:e6:25:71:49:c4:45:fd:b8:90:82:16:f4:e3:
46:eb:c7:86:42:38:93:32:76:55:39:4e:4b:e3:93:
c8:44:d8:40:d5:52:2f:cf:6b:45:2e:f9:dc:24:94:
d2:17:d1:f6:c1:43:27:3c:5f:28:1f:17:0d:7b:71:
53:d8:33:90:95:5f:48:dc:3b:be:6b:10:e9:e4:ef:
0a:1a:92:5e:a1:83:66:fd:54:99:f1:78:a7:ce:4b:
29:82:cc:4a:2d:9e:9a:d3:f1:e0:73:f1:94:85:39:
33:d0:75:03:45:b4:c2:0c:f4:9b:6b:53:e5:5f:56:
9c:99:cd:8a:e8:da:17:ff:4c:db:e3:15:f6:1b:32:
fc:61:42:7d:9e:5c:a9:a4:4c:64:84:f5:98:5b:74:
25:f5:c9:f7:2e:21:f2:e7:a1:bd:62:de:3d:a3:d5:
cd:3a:63:59:f7:11:45:35:6d:6a:6d:9e:18:29:59:
43:6c:8d:d2:bb:f4:14:4d:f1:84:cd:e8:58:ba:dd:
40:63:31:be:44:02:04:76:7f:65:1f:f0:35:44:c8:
da:3c:1d:c1:50:81:73:0a:8c:74:9c:d7:02:56:c4:
ad:1a:90:38:70:17:74:e1:f2:1e:bd:58:6c:58:ae:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:64:36:5B:06:6F:1F:74:17:3F:46:34:96:44:21:51:B7:D0:66
X509v3 Authority Key Identifier:
keyid:C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/3130332e3135322e35322e302f32342d3234203d3e20313431303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.152.52.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:16:1e:50:e7:0b:ad:33:38:ba:e5:d8:55:51:fe:e2:98:57:
da:3c:e0:49:24:a8:e9:3b:b9:95:87:1c:44:60:a0:bb:df:a0:
e0:f3:80:de:a7:eb:97:12:0d:8b:7e:72:ae:ab:a1:9c:b9:a5:
3b:0f:21:80:0f:7d:dd:75:50:85:aa:2b:38:99:c5:40:18:b0:
ab:68:82:47:15:c9:71:46:43:6e:da:c1:18:3c:88:e1:1a:03:
8b:04:80:29:82:16:3d:0f:f7:0d:12:1b:2d:a4:bf:a0:79:35:
2f:10:e8:10:11:0a:7f:1c:96:b5:4e:ae:8d:bc:5d:92:de:fc:
73:ca:3f:5f:c5:d7:42:96:c1:68:19:b2:1c:77:9e:da:93:c8:
ac:27:74:39:fa:d4:31:a3:77:0e:fc:7f:c1:80:25:69:d1:9d:
04:52:60:6d:6b:05:2c:3b:7a:56:46:85:c1:bd:6b:01:76:e2:
9d:a0:bd:98:52:06:33:d2:bd:94:54:6d:a2:14:78:55:39:16:
48:80:71:46:fd:66:2b:2b:e7:72:15:d5:b3:64:9f:e6:44:be:
7f:ba:b3:fd:9c:cb:c0:48:45:98:c2:d8:12:bf:3b:b4:68:33:
24:11:f8:2c:a9:5c:db:6b:e5:da:dd:dd:cd:20:58:65:2b:89:
c8:ad:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:43 2026 by rpki-client