
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa
File: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (raw, json)
Hash identifier: UuwOEqaAvPthTROezeYmcp8tB98baeryTixXf6GL8Aw=
Subject key identifier: FF:86:52:B9:83:6F:D0:B2:F3:99:A0:FE:47:81:38:B0:FC:47:64:60
Certificate issuer: /CN=CA270F1FD051B3CD65DB930972A99335C45615EC
Certificate serial: 4150252C861E657507270E55CBD3A44478F66A6D
Authority key identifier: CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa
Signing time: Sun 03 May 2026 02:59:38 +0000
ROA not before: Sun 03 May 2026 02:54:38 +0000
ROA not after: Sun 02 May 2027 02:59:38 +0000
asID: 141656
IP address blocks: 103.162.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl
rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:50:25:2c:86:1e:65:75:07:27:0e:55:cb:d3:a4:44:78:f6:6a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA270F1FD051B3CD65DB930972A99335C45615EC
Validity
Not Before: May 3 02:54:38 2026 GMT
Not After : May 2 02:59:38 2027 GMT
Subject: CN=FF8652B9836FD0B2F399A0FE478138B0FC476460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:14:4c:09:68:4d:2a:a0:3f:69:64:ea:65:
1e:ff:ba:d4:a2:e9:99:fd:06:b1:21:cf:02:ff:42:
da:65:55:14:c5:fd:f3:97:2b:36:86:52:ce:26:79:
47:6b:c3:16:78:7a:b3:cd:5d:0e:a1:5b:ab:5c:a7:
4e:23:f5:e1:0c:a9:6b:7a:fd:2b:d6:0b:75:e3:76:
ed:90:8e:81:30:a2:13:0a:a0:7f:da:c7:64:9a:10:
10:a5:c3:c1:28:5b:55:5b:ce:92:4a:ca:4c:b7:18:
dd:12:56:25:83:82:ad:54:4b:df:9c:e8:c6:31:fa:
26:a6:7b:74:e6:88:3a:4f:61:6e:2e:12:4c:85:31:
f5:8b:d9:bb:85:1c:cd:24:a3:aa:08:34:04:f4:2b:
26:6a:c4:6e:ac:29:12:1a:ce:6b:82:9a:8e:c3:b7:
06:6d:88:f7:c0:27:53:18:a4:5b:7e:fb:f6:7a:88:
7f:3b:7d:54:00:00:bb:68:c9:b4:fb:cd:69:c6:11:
8f:8e:9c:7b:a0:e2:73:f3:dc:9f:e4:8d:b1:40:9c:
7c:24:84:30:8e:b3:ae:33:84:7a:70:e3:5b:1e:46:
38:3b:d3:64:6a:42:d7:df:91:b0:0a:9e:80:de:e2:
e2:e7:a9:a5:b3:61:37:49:0a:e8:d0:d3:8f:34:ee:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:52:B9:83:6F:D0:B2:F3:99:A0:FE:47:81:38:B0:FC:47:64:60
X509v3 Authority Key Identifier:
keyid:CA:27:0F:1F:D0:51:B3:CD:65:DB:93:09:72:A9:93:35:C4:56:15:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/CA270F1FD051B3CD65DB930972A99335C45615EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA270F1FD051B3CD65DB930972A99335C45615EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:5c:f4:49:c7:db:73:7a:17:78:ae:3d:bf:44:c5:4a:9c:99:
90:a2:13:7d:2e:a6:40:af:30:2a:c2:4c:37:c7:c4:0b:58:7f:
fe:f4:6e:37:a5:d2:22:00:1c:09:f3:5d:79:70:74:86:7a:0d:
18:06:79:ca:08:90:73:0a:16:64:97:23:7a:8a:d8:ad:2c:9a:
f6:13:a1:c1:14:3d:da:63:98:38:07:ea:4b:5e:dc:59:e0:ff:
16:b4:56:2d:d3:03:ef:76:64:42:40:cb:9a:86:d0:ba:fe:b3:
1f:53:7c:c2:ea:9c:bd:16:bb:b4:6b:10:bd:65:c7:c7:d7:9a:
b0:0e:af:b7:d2:4a:c6:0d:76:2e:aa:b2:f3:de:28:f1:b4:46:
5a:62:54:e2:5d:2b:9f:fd:19:cc:d8:a3:b8:eb:c2:7d:d5:d8:
ee:5b:74:cc:f5:97:1d:53:0d:26:7f:c8:06:ac:29:9e:bc:1f:
0c:f9:05:1c:a1:1d:25:5e:30:9d:bb:7e:63:9a:aa:5e:1e:f4:
d4:cc:cf:e3:9d:a4:73:8b:08:7d:99:2f:3f:f2:28:6e:73:64:
8e:8c:95:79:5f:09:f8:54:5e:96:07:10:b9:36:59:3c:85:e1:
b4:d9:47:f3:ca:af:96:07:7b:d4:31:0a:db:49:eb:f2:87:4d:
0b:2c:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:27 2026 by rpki-client