
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa
File: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (raw, json)
Hash identifier: 8eEz6hzQ+vunwmpuzCRDL78SRiuZLqQtnLKEvllRxT8=
Subject key identifier: 0F:39:08:3B:0F:CF:98:56:6D:F5:83:2C:83:AA:53:2F:79:8E:DE:1E
Certificate issuer: /CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D
Certificate serial: 0AE95CADC86BA42DCE93C6D6813339FB12E67685
Authority key identifier: A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa
Signing time: Sun 03 May 2026 02:58:33 +0000
ROA not before: Sun 03 May 2026 02:53:33 +0000
ROA not after: Sun 02 May 2027 02:58:33 +0000
asID: 139400
IP address blocks: 103.143.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl
rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e9:5c:ad:c8:6b:a4:2d:ce:93:c6:d6:81:33:39:fb:12:e6:76:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A588748400B35DB8271F7C5C42E4B026C96E7B0D
Validity
Not Before: May 3 02:53:33 2026 GMT
Not After : May 2 02:58:33 2027 GMT
Subject: CN=0F39083B0FCF98566DF5832C83AA532F798EDE1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:4c:d0:43:dd:89:55:ab:c1:72:9e:6c:b7:
e0:8a:1c:c6:c3:21:b1:26:3f:9e:63:44:88:f0:1d:
fb:fc:b1:e8:07:ff:77:a0:81:9c:3a:d2:ca:b7:bf:
cb:72:bb:ab:41:8b:11:76:a0:f8:64:ca:b8:d3:20:
e2:b8:bd:a4:bf:d7:c3:0e:29:dd:45:1d:f2:7b:dd:
53:4c:0d:13:9c:01:af:ee:93:5d:f0:b9:c7:5b:e9:
a1:98:cf:ed:28:9a:62:8e:7a:e1:81:e7:8d:d1:e1:
e7:90:d7:3b:e6:8b:61:c6:3c:17:bf:cf:5a:52:3d:
d2:12:01:18:35:23:c4:5c:ca:11:e3:e6:bd:48:80:
b1:06:71:83:5e:44:aa:36:6a:a0:83:b6:17:51:f6:
bc:fc:f1:c4:0a:db:2a:bb:04:97:59:f6:f6:ff:7d:
cd:a7:5e:74:bd:9a:63:d8:23:d1:0a:1e:f3:50:1c:
d6:42:17:3d:50:84:db:4e:32:e7:6d:76:a1:5e:23:
80:f0:1c:ac:b4:4b:af:10:fe:04:f6:d9:5f:82:25:
a8:74:05:b7:9b:36:9d:fe:75:33:a5:8d:0d:43:f7:
e5:63:ac:22:4a:d6:93:c1:3e:33:72:3e:24:12:ed:
ed:3d:38:16:dc:b5:f4:fd:dc:c2:d2:19:f4:12:6f:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:39:08:3B:0F:CF:98:56:6D:F5:83:2C:83:AA:53:2F:79:8E:DE:1E
X509v3 Authority Key Identifier:
keyid:A5:88:74:84:00:B3:5D:B8:27:1F:7C:5C:42:E4:B0:26:C9:6E:7B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/A588748400B35DB8271F7C5C42E4B026C96E7B0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A588748400B35DB8271F7C5C42E4B026C96E7B0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.170.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:b1:5b:34:8c:0c:f2:fc:3d:ab:29:07:de:46:f2:5e:6f:04:
5b:30:62:3e:d5:5b:81:40:e8:5c:29:7a:b0:1f:b9:52:33:e4:
5a:1f:89:38:a1:c7:a6:dd:31:55:e1:38:22:5b:b0:df:01:3f:
48:01:eb:34:bc:85:3c:63:23:25:0b:2c:54:6b:aa:09:a5:2b:
12:a1:f1:d3:7c:a1:9a:7c:b3:67:e8:7d:55:f4:be:b7:a8:26:
ca:9c:ab:b1:9b:19:58:98:98:d2:20:c6:d2:57:a7:79:0c:5c:
72:c5:e8:d6:a6:f9:1e:9f:86:97:6b:08:5f:2b:93:ba:ec:11:
e2:e8:77:95:f0:3c:b3:fe:0f:a3:34:57:52:66:c0:24:9d:ae:
5b:69:ca:b9:a1:c9:c4:ff:50:87:55:4a:de:88:45:47:f3:51:
7a:91:fb:1f:08:e4:06:f7:d9:cd:24:9c:40:47:45:f6:d8:f2:
5a:93:eb:ac:83:29:9d:69:0d:47:72:97:a5:97:23:9e:93:a1:
e7:9a:18:0c:6f:29:55:e2:d3:46:a7:d4:b9:5e:61:6f:c9:60:
57:e6:f1:27:78:0d:33:18:fd:98:56:da:ee:ac:9a:61:cc:49:
58:cb:c9:67:da:65:77:b8:b8:0b:2b:2b:be:4b:0e:7a:d5:e1:
4c:d6:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:12:12 2026 by rpki-client