
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa
File: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (raw, json)
Hash identifier: QFfNhq0siSwOs18xtBIQVVrABzIP0gTxhbpkKx5UaAs=
Subject key identifier: 25:AB:A9:43:B2:08:56:0D:BC:1A:E3:6F:B5:36:5F:C9:43:67:64:A2
Certificate issuer: /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
Certificate serial: 151FDD24D2FCCEE5164E8E86C098BEABC42CD07C
Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa
Signing time: Sun 03 May 2026 03:00:25 +0000
ROA not before: Sun 03 May 2026 02:55:25 +0000
ROA not after: Sun 02 May 2027 03:00:25 +0000
asID: 135360
IP address blocks: 103.235.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl
rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:1f:dd:24:d2:fc:ce:e5:16:4e:8e:86:c0:98:be:ab:c4:2c:d0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
Validity
Not Before: May 3 02:55:25 2026 GMT
Not After : May 2 03:00:25 2027 GMT
Subject: CN=25ABA943B208560DBC1AE36FB5365FC9436764A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:dc:d6:28:5d:6d:d2:6a:34:9d:31:08:c3:
2f:a0:4f:48:c3:94:27:a2:56:50:05:e6:81:a7:ed:
65:da:d3:78:6b:90:e7:0e:7a:4a:32:34:e2:14:06:
e7:4f:fd:2a:e6:c6:86:f6:61:12:0f:e9:48:ea:bb:
fb:d5:ec:48:c6:23:21:d5:f5:04:7c:9b:c4:be:49:
b1:0d:58:40:e1:34:c3:bd:3e:a7:b8:30:e0:b8:47:
41:f9:c3:92:a5:46:18:0c:f7:e4:66:5b:60:24:f1:
b0:47:2b:7f:98:9c:32:db:f1:93:e4:c7:69:af:f4:
69:2d:27:2f:18:56:9e:65:67:72:05:5b:f1:d8:61:
25:50:98:35:61:53:46:c9:49:c6:20:7e:2e:4f:8a:
a9:ba:81:0f:ac:6d:c5:3d:21:a2:81:6d:5e:51:75:
c1:1e:68:25:ae:da:e8:18:86:7c:76:f8:83:c2:7c:
30:e9:e5:e3:14:03:f3:1c:e9:25:a3:47:ab:0f:8a:
2a:44:99:59:66:5a:df:5e:3c:44:3f:de:fa:9a:b8:
b6:f9:dd:ef:35:59:da:ca:f6:d1:a5:20:96:71:ba:
c3:ce:25:7d:0e:db:90:c7:e3:d2:4a:8d:b3:ac:92:
14:2b:6c:e4:8b:72:0c:5d:3c:1e:73:c1:d2:7c:fa:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AB:A9:43:B2:08:56:0D:BC:1A:E3:6F:B5:36:5F:C9:43:67:64:A2
X509v3 Authority Key Identifier:
keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.73.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4b:77:9d:6a:3c:c7:6e:dd:42:d0:be:95:b8:51:73:e2:3b:
48:3b:93:03:24:ef:1f:bb:6a:f8:c9:b5:2f:b8:0b:8d:b5:bc:
32:15:b8:61:6a:0a:e6:33:1a:36:13:cb:bb:4f:83:0a:54:93:
32:7d:c6:bd:62:12:1c:36:a4:28:6b:11:83:c4:ef:43:9c:17:
85:59:71:8a:7a:e1:00:ca:07:a0:c7:e6:1a:af:c5:40:1a:72:
5b:83:e4:55:f4:b8:04:6d:0d:eb:75:76:2f:e1:2b:84:5b:05:
5c:cb:af:ae:65:1c:73:02:ac:f3:d7:c9:fc:4b:7e:c9:75:f4:
1e:c4:74:da:fd:69:f9:13:e6:69:19:3d:da:14:d4:90:70:ee:
ae:da:c9:51:86:38:68:3a:6c:54:87:95:ac:64:64:58:ba:7c:
4b:76:55:d2:12:58:fd:19:a9:92:18:9b:99:32:7c:2f:e8:43:
bc:37:e6:bf:40:87:c3:fe:e7:47:f3:b3:7b:38:89:30:2e:b9:
81:1d:78:2d:3d:64:e6:5b:2b:e3:eb:e0:4c:b9:c8:d9:da:de:
8d:7e:95:f5:a8:60:e5:47:a7:b7:b5:40:57:3a:ee:cc:b9:98:
f3:5c:b3:70:70:87:6a:e5:27:b0:3e:d1:69:da:18:6c:34:87:
55:c6:44:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:11 2026 by rpki-client