
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa
File: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (raw, json)
Hash identifier: IhEwcpICZNPed1st7QD2ul0Xv1zBvNohPSdVYQvZPpI=
Subject key identifier: E4:C7:60:44:2A:BF:3E:6C:4D:A9:24:F4:41:10:72:8E:FF:1F:FC:E0
Certificate issuer: /CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A
Certificate serial: 1A98B613D4BA93792245AD23C8C5867D61138480
Authority key identifier: B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa
Signing time: Sun 03 May 2026 03:01:06 +0000
ROA not before: Sun 03 May 2026 02:56:06 +0000
ROA not after: Sun 02 May 2027 03:01:06 +0000
asID: 45701
IP address blocks: 103.156.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl
rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:98:b6:13:d4:ba:93:79:22:45:ad:23:c8:c5:86:7d:61:13:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A
Validity
Not Before: May 3 02:56:06 2026 GMT
Not After : May 2 03:01:06 2027 GMT
Subject: CN=E4C760442ABF3E6C4DA924F44110728EFF1FFCE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:86:df:80:da:9c:6b:de:69:aa:4e:39:9f:
21:33:1c:2c:86:f4:b2:42:32:ec:65:0c:49:76:d5:
a6:95:39:66:40:f6:e1:87:74:00:91:0e:8a:92:2d:
c7:fc:c6:6e:eb:6b:58:24:41:a9:65:8f:26:8c:4d:
3d:2a:34:c4:20:e8:59:68:44:f4:2d:40:fa:67:4c:
8c:96:60:b8:a9:51:3a:02:e6:2c:70:38:28:8e:c2:
76:d8:5f:42:52:3b:a4:7b:af:1e:7b:45:68:c4:e0:
37:63:b1:fe:a9:20:11:3b:db:66:16:58:84:e3:58:
30:ff:24:09:0a:1d:49:45:01:c3:f8:de:99:f5:02:
f9:88:fc:f9:d8:3c:8e:3b:26:86:ce:6d:fa:6f:9d:
c4:50:c6:6e:ad:30:82:02:bc:dd:8a:23:5c:fe:c3:
23:6b:9e:d8:e7:a2:c5:46:2a:5b:5d:04:a3:eb:68:
60:38:1b:61:4b:b1:e5:3f:b3:72:11:7b:d3:7d:c9:
35:0f:d3:ab:e1:39:6d:19:f7:5d:89:c3:05:50:3f:
39:80:75:64:7f:9c:80:d2:cd:45:5a:28:aa:18:10:
0a:8a:a0:87:b0:db:97:1b:ed:6f:b5:74:e3:f0:96:
dc:19:70:80:2c:c9:99:1c:f7:ac:fa:fa:f0:0c:07:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C7:60:44:2A:BF:3E:6C:4D:A9:24:F4:41:10:72:8E:FF:1F:FC:E0
X509v3 Authority Key Identifier:
keyid:B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.227.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e1:89:83:a8:14:6b:41:0a:85:7c:70:fd:3e:74:f2:49:9a:
2d:f9:ae:2e:50:f1:1d:ec:b1:b8:a2:fd:42:a2:e0:6e:32:9a:
87:6a:f3:55:7b:e3:65:b6:23:4d:10:42:6b:87:40:37:41:d2:
c4:b7:d9:a0:ba:48:e4:99:1e:b2:dc:b4:47:b4:e8:1a:35:67:
90:d2:a5:aa:e7:b2:56:4e:58:a7:d6:8a:ff:c2:b9:3a:c1:24:
a0:13:38:1b:70:68:3d:d4:8a:aa:23:ef:da:c1:41:d4:28:8b:
3d:6a:ae:7a:71:a2:c3:02:ed:b1:f0:34:f5:19:48:54:7f:30:
1b:8f:d9:c6:ed:69:2a:4b:d3:56:af:50:38:4e:ff:15:35:08:
12:bb:c3:03:b1:78:de:df:48:84:07:1e:f6:aa:3d:a1:95:4a:
61:5c:56:42:39:0d:dc:ef:7b:9b:1a:6e:8b:7e:d4:fa:ed:71:
5a:a1:fc:7e:c2:34:9f:52:7b:78:bb:d2:9a:11:93:07:5f:94:
ec:6d:7d:6d:2c:1d:3f:c6:d4:a4:52:80:be:aa:3d:1c:40:c4:
06:b5:6d:3e:95:cf:f0:ae:86:87:6e:59:f8:d1:4e:14:cf:3a:
80:e3:c8:68:a7:ff:8c:f7:89:04:26:88:64:7c:1b:8e:b8:d3:
74:9a:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:30 2026 by rpki-client