
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa
File: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (raw, json)
Hash identifier: oUpYjCZBUJLtFkQG6ecMP2UxGQxIQOGY4XCQZ/Ln3C8=
Subject key identifier: E2:1B:53:5E:73:F1:57:28:8D:4D:A2:2B:23:99:B2:06:3F:07:C4:BE
Certificate issuer: /CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128
Certificate serial: 0B59B9BAFA5058DB07DDF9641E7646AE4FE4F645
Authority key identifier: 72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa
Signing time: Sun 03 May 2026 02:59:41 +0000
ROA not before: Sun 03 May 2026 02:54:41 +0000
ROA not after: Sun 02 May 2027 02:59:41 +0000
asID: 150226
IP address blocks: 103.17.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl
rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:59:b9:ba:fa:50:58:db:07:dd:f9:64:1e:76:46:ae:4f:e4:f6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128
Validity
Not Before: May 3 02:54:41 2026 GMT
Not After : May 2 02:59:41 2027 GMT
Subject: CN=E21B535E73F157288D4DA22B2399B2063F07C4BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:51:74:1d:9f:81:aa:62:0c:0b:44:f7:9b:
ce:81:5b:64:c4:7f:b8:b0:1c:c2:56:bf:f1:31:df:
44:65:72:f6:c7:b5:bb:bb:66:20:9e:56:a2:0d:da:
1d:09:4a:ac:27:43:00:b7:a8:29:99:7e:34:92:55:
ac:30:9b:57:a8:4b:0b:34:15:76:e8:79:0b:47:16:
4b:c2:7b:1d:28:53:0c:33:9f:47:f1:19:4c:ea:63:
3e:cd:5f:2e:d7:2d:98:95:b0:b4:32:06:f1:fe:1f:
37:15:f9:4e:ec:ca:0c:c1:0d:72:06:59:09:ed:dc:
40:01:2d:00:db:bd:7a:f2:cc:49:e4:e0:e5:1b:a2:
04:e7:32:c4:f4:39:9e:47:17:d1:56:88:78:fc:ad:
ff:cc:ea:66:b0:27:e3:2f:67:44:7d:a8:1e:86:13:
d5:80:cb:6f:56:5e:a4:ff:f6:9e:e4:40:cc:65:be:
6a:6e:05:f9:41:45:60:52:0d:bb:f4:fc:1d:e8:1c:
2b:a0:5e:fc:9e:72:7f:34:8d:64:2b:3d:51:a4:a5:
ba:73:c9:ee:4e:23:23:f4:f3:6c:e2:60:14:c4:ce:
14:29:6a:c2:dc:9b:27:e5:84:ce:f4:fc:7a:cd:e2:
8b:cd:a1:34:40:53:e3:b3:4a:7d:e0:07:f7:e3:b0:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1B:53:5E:73:F1:57:28:8D:4D:A2:2B:23:99:B2:06:3F:07:C4:BE
X509v3 Authority Key Identifier:
keyid:72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.179.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c4:55:74:98:46:46:af:a5:91:4c:9a:68:59:ed:1c:c0:cd:
23:6f:22:a2:37:9e:b5:76:76:47:01:f9:c4:68:ca:45:50:e3:
54:f0:ed:cc:6f:1d:98:26:e8:78:2c:d5:e7:13:a3:e7:2b:cc:
ff:88:bb:3e:f9:e8:e8:a9:bb:aa:37:24:05:48:9d:31:9d:b8:
c9:81:87:83:d6:28:b6:ac:36:d9:1f:69:53:c0:3e:e4:14:29:
c5:1a:5e:6a:8f:61:01:5f:eb:b2:2c:93:08:c3:a9:73:40:e1:
98:30:ea:8c:dc:53:f6:b3:d3:ef:5f:e4:8f:5a:ed:cd:65:4f:
ab:f2:61:a7:6d:41:21:de:40:0a:2f:70:42:ae:4e:4e:f2:8e:
db:a4:90:60:d1:f1:8f:e4:a4:37:0b:fb:7f:6d:90:3e:71:74:
fa:10:c7:76:23:e0:8c:84:58:48:56:10:c3:c0:b1:87:bf:ba:
d9:ce:56:dc:1d:b9:a3:5a:35:74:dd:0c:6f:4e:7f:a6:a8:5c:
36:fc:56:40:65:46:0c:6c:91:e3:0c:51:77:66:f2:de:69:3b:
47:8f:e0:61:09:af:81:74:2c:5a:6e:c6:3a:f2:f9:f5:ec:09:
e7:bd:23:c9:bc:ce:aa:87:83:42:f4:12:23:80:3d:2b:58:91:
cf:53:bb:9c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUC1m5uvpQWNsH3flkHnZGrk/k9kUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0Mx
MzMzQjEyODAeFw0yNjA1MDMwMjU0NDFaFw0yNzA1MDIwMjU5NDFaMDMxMTAvBgNV
BAMTKEUyMUI1MzVFNzNGMTU3Mjg4RDREQTIyQjIzOTlCMjA2M0YwN0M0QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgVlF0HZ+BqmIMC0T3m86BW2TE
f7iwHMJWv/Ex30RlcvbHtbu7ZiCeVqIN2h0JSqwnQwC3qCmZfjSSVawwm1eoSws0
FXboeQtHFkvCex0oUwwzn0fxGUzqYz7NXy7XLZiVsLQyBvH+HzcV+U7sygzBDXIG
WQnt3EABLQDbvXryzEnk4OUbogTnMsT0OZ5HF9FWiHj8rf/M6mawJ+MvZ0R9qB6G
E9WAy29WXqT/9p7kQMxlvmpuBflBRWBSDbv0/B3oHCugXvyecn80jWQrPVGkpbpz
ye5OIyP082ziYBTEzhQpasLcmyflhM70/HrN4ovNoTRAU+OzSn3gB/fjsK2LAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU4htTXnPxVyiNTaIrI5myBj8HxL4wHwYDVR0j
BBgwFoAUclBmpEzN+u5Ep8lY1A+6PBMzsSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWVmODM3YjMtZGZkMi00MmNjLTliNzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0
Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0MxMzMzQjEyOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MjUwNjZBNDRDQ0RGQUVFNDRBN0M5NThENDBGQkEzQzEzMzNC
MTI4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FlZjgzN2IzLWRmZDItNDJjYy05
Yjc5LTc0YjZiYWZkNGUyZC8wLzMxMzAzMzJlMzEzNzJlMzEzNzM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxGzMA0GCSqG
SIb3DQEBCwUAA4IBAQBMxFV0mEZGr6WRTJpoWe0cwM0jbyKiN561dnZHAfnEaMpF
UONU8O3Mbx2YJuh4LNXnE6PnK8z/iLs++ejoqbuqNyQFSJ0xnbjJgYeD1ii2rDbZ
H2lTwD7kFCnFGl5qj2EBX+uyLJMIw6lzQOGYMOqM3FP2s9PvX+SPWu3NZU+r8mGn
bUEh3kAKL3BCrk5O8o7bpJBg0fGP5KQ3C/t/bZA+cXT6EMd2I+CMhFhIVhDDwLGH
v7rZzlbcHbmjWjV03QxvTn+mqFw2/FZAZUYMbJHjDFF3ZvLeaTtHj+BhCa+BdCxa
bsY68vn17AnnvSPJvM6qh4NC9BIjgD0rWJHPU7uc
-----END CERTIFICATE-----
Generated at Tue May 12 23:45:44 2026 by rpki-client