
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa
File: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (raw, json)
Hash identifier: Tl47NYhV7p3ilyhNqNo+NuftHesBi3flI0jGsgT+BAM=
Subject key identifier: C5:7D:5B:44:6F:45:06:1A:8A:5C:31:11:CE:43:61:E9:FB:95:AC:42
Certificate issuer: /CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8
Certificate serial: 31F7D68E9141F3D610C6FB7DF07D49B410202B0F
Authority key identifier: D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa
Signing time: Sun 03 May 2026 02:59:12 +0000
ROA not before: Sun 03 May 2026 02:54:12 +0000
ROA not after: Sun 02 May 2027 02:59:12 +0000
asID: 139440
IP address blocks: 103.145.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl
rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f7:d6:8e:91:41:f3:d6:10:c6:fb:7d:f0:7d:49:b4:10:20:2b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8
Validity
Not Before: May 3 02:54:12 2026 GMT
Not After : May 2 02:59:12 2027 GMT
Subject: CN=C57D5B446F45061A8A5C3111CE4361E9FB95AC42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:47:c4:26:5d:52:e4:a8:f5:c4:5e:59:50:
d6:f9:69:c6:1b:ca:31:86:2b:74:ac:df:4f:82:af:
fc:d0:e7:0c:8e:1c:ef:54:b1:80:1c:8f:b6:5a:b6:
da:d9:86:32:f4:f5:bd:6c:93:ad:69:20:0b:26:e3:
d7:3d:f8:bc:9e:17:36:93:0c:45:0f:24:59:9b:87:
88:f8:62:37:ec:7d:a5:7b:b3:8b:97:b3:ed:cf:f4:
4a:90:fa:37:d1:b2:9c:95:84:44:b7:f3:fd:a5:82:
be:ca:2b:ce:10:1f:c5:d6:af:75:bc:50:a5:fe:ad:
b6:7e:ad:d6:e8:cf:95:85:2a:90:3f:06:3b:d8:1a:
ae:24:6d:17:c3:d1:3a:6e:ae:01:4a:5d:9d:cb:4b:
24:93:37:a9:09:f7:11:dd:0d:32:7b:56:c4:54:8e:
77:c3:08:33:5e:e3:70:07:25:2f:5f:fd:ba:2f:da:
e5:5a:c1:91:45:45:da:68:d6:0f:21:c9:e3:92:ec:
a9:98:b1:0e:be:ea:d4:31:31:92:7b:b6:66:c4:be:
de:60:59:59:77:83:bf:8d:bf:df:d5:ea:e6:6c:68:
c5:38:3b:c4:99:1d:bd:83:ea:14:9e:56:23:f7:28:
ab:1f:7e:5e:97:56:fe:50:00:92:dd:1c:ca:3a:0f:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7D:5B:44:6F:45:06:1A:8A:5C:31:11:CE:43:61:E9:FB:95:AC:42
X509v3 Authority Key Identifier:
keyid:D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.66.0/23
Signature Algorithm: sha256WithRSAEncryption
23:9e:05:30:7e:d6:8c:ef:de:68:f8:ef:60:f9:88:1f:22:e4:
ec:b5:27:3c:db:a9:8e:0d:86:eb:29:4d:5e:d7:48:97:3a:b8:
fb:b2:3d:ef:ce:95:bd:96:a1:5d:a4:1e:f7:be:08:09:3d:25:
57:46:ae:7b:e8:7a:52:79:fa:4a:f5:7a:89:8f:bd:c3:d6:d3:
11:a0:34:25:cc:ca:28:94:f0:1c:6d:7c:76:2a:46:80:f1:9f:
8d:96:53:23:d8:cc:55:6c:78:33:6e:9d:07:9b:af:91:f8:29:
81:ca:cb:38:f4:6f:34:75:86:f6:c0:c3:d3:48:ff:25:0f:1d:
e9:32:07:46:29:84:7b:88:6e:0f:59:bf:82:ab:dc:37:34:3f:
f3:50:e0:5b:96:34:e5:54:b3:64:ab:4e:25:59:ec:aa:7d:4a:
4d:fb:3f:83:e1:88:bb:d6:d8:5a:f6:9d:1d:a5:95:03:79:c0:
c9:fe:b0:90:20:84:4a:3d:eb:df:09:85:f6:d3:30:e7:a1:10:
3d:ce:1b:1d:9c:c6:3e:47:2a:10:43:4f:e9:f4:23:2c:36:c8:
65:21:d8:7c:9e:65:c2:9d:25:d6:7a:4e:81:f3:ac:e5:11:91:
ac:5c:4d:20:9a:43:b5:b1:da:fe:38:fc:3c:ca:69:9e:f4:c6:
fc:0e:41:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:31 2026 by rpki-client