
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35312e302f32342d3234203d3e20313432333532.roa
File: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (raw, json)
Hash identifier: h4rEvajucquztFw9Gur1NLOrixjikXkabRvpRGsZe/g=
Subject key identifier: DD:85:AD:F7:E0:4E:82:4B:5F:47:D2:BD:1C:D9:8C:67:ED:B5:F2:53
Certificate issuer: /CN=86E48412E2794F23453AA6C42466D4F6BB140BF3
Certificate serial: 486C5F74332173A8A057EDA05B2CD4855C4C040F
Authority key identifier: 86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35312e302f32342d3234203d3e20313432333532.roa
Signing time: Sun 03 May 2026 03:01:33 +0000
ROA not before: Sun 03 May 2026 02:56:33 +0000
ROA not after: Sun 02 May 2027 03:01:33 +0000
asID: 142352
IP address blocks: 103.1.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl
rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6c:5f:74:33:21:73:a8:a0:57:ed:a0:5b:2c:d4:85:5c:4c:04:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86E48412E2794F23453AA6C42466D4F6BB140BF3
Validity
Not Before: May 3 02:56:33 2026 GMT
Not After : May 2 03:01:33 2027 GMT
Subject: CN=DD85ADF7E04E824B5F47D2BD1CD98C67EDB5F253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:24:c1:06:72:3c:7f:0f:4a:bb:3e:b0:94:
16:b0:01:ef:94:20:51:60:5a:22:40:96:02:49:ff:
f4:f4:83:e0:56:33:b6:0c:fa:dc:54:ad:0c:87:2c:
a5:bd:15:d9:a8:1d:dc:35:0f:f6:5b:c3:fb:85:c1:
09:e4:03:c2:5d:cd:3b:ff:db:c6:29:80:3c:f1:9d:
32:60:4e:15:6e:62:82:24:73:4a:b9:b8:ed:e9:e8:
df:4a:12:70:7a:f1:93:1d:8e:75:c8:19:84:d8:d3:
31:2c:4c:36:73:0c:1a:dd:3e:fc:22:99:c5:dd:f0:
fa:ce:99:33:2b:73:b6:c1:21:d8:d9:ab:a1:dd:10:
af:07:d8:2f:c1:1c:67:75:59:91:cf:49:90:6f:57:
ea:90:a3:5e:36:39:7d:0f:86:ef:9a:d1:2d:d8:2c:
54:a8:00:84:4a:77:a6:02:44:a2:d0:1c:bb:0d:b0:
11:97:5c:42:12:db:01:9d:48:d7:c4:86:64:66:bb:
eb:db:6a:ce:26:13:cd:eb:5b:5c:9e:f2:9b:0c:23:
47:f5:ed:a0:76:48:8c:24:6f:6b:0a:5b:7e:28:94:
2f:11:cf:76:1c:29:93:ef:9a:10:76:1c:14:91:b6:
58:db:c8:73:a9:47:42:70:84:7b:62:56:a4:a3:53:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:85:AD:F7:E0:4E:82:4B:5F:47:D2:BD:1C:D9:8C:67:ED:B5:F2:53
X509v3 Authority Key Identifier:
keyid:86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35312e302f32342d3234203d3e20313432333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.1.51.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d8:93:b8:ef:12:49:75:02:52:49:ec:cc:f5:ea:64:59:f2:
2f:eb:f0:a5:d3:85:6b:95:52:76:63:a8:f2:24:b2:e2:12:1b:
12:c5:bc:d9:7e:a3:60:23:ff:e8:f5:f1:32:41:ea:66:ed:b6:
04:d3:b9:55:c7:31:8e:18:2d:1e:52:af:06:4f:bd:f1:ef:88:
d8:50:d8:af:a5:55:2e:b1:8d:ce:5c:6f:2b:8b:e9:d5:8f:8c:
ff:16:b3:45:07:3a:08:81:ed:c1:1d:c4:3d:be:96:2f:db:be:
9a:84:63:c7:8b:c9:0e:43:a6:c2:e8:e5:bd:29:46:12:7c:55:
5c:8d:07:ae:ab:8f:45:81:e5:9f:5f:98:e8:41:88:5e:94:35:
4b:de:e3:1f:16:98:24:60:81:0a:c9:0b:db:f5:45:c4:24:c6:
cd:e1:7f:aa:02:5a:bc:06:5f:ba:19:47:b1:49:e7:4c:da:8b:
77:d8:f0:13:ff:ef:23:b4:97:0d:17:05:f7:6b:60:f2:de:2e:
0d:b1:c7:e1:d5:db:f6:a8:7d:fe:15:b1:cc:36:1c:6a:33:0d:
d5:8c:f4:10:9c:5e:82:86:00:be:dc:f8:16:e8:bb:b5:34:1a:
1f:49:89:60:5d:43:f9:6c:fb:55:26:dc:72:38:7a:df:0a:aa:
3e:4b:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:38 2026 by rpki-client