
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e312e302f32342d3234203d3e20313335343435.roa
File: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier: OK3H4Npcn6XOhpp51geVZ4Jq+X5gSteni67GraMNgZs=
Subject key identifier: A2:B4:40:B9:C7:5E:4E:32:E0:37:D7:46:A2:33:3A:FB:4B:40:AB:1B
Certificate issuer: /CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB
Certificate serial: 4E11B1815BB63E044030306E07DFB692316DA5D4
Authority key identifier: E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e312e302f32342d3234203d3e20313335343435.roa
Signing time: Sun 03 May 2026 03:01:46 +0000
ROA not before: Sun 03 May 2026 02:56:46 +0000
ROA not after: Sun 02 May 2027 03:01:46 +0000
asID: 135445
IP address blocks: 103.223.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl
rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:11:b1:81:5b:b6:3e:04:40:30:30:6e:07:df:b6:92:31:6d:a5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB
Validity
Not Before: May 3 02:56:46 2026 GMT
Not After : May 2 03:01:46 2027 GMT
Subject: CN=A2B440B9C75E4E32E037D746A2333AFB4B40AB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:41:aa:00:30:49:ae:ac:25:68:2b:53:eb:
21:dd:85:f4:c6:c7:ec:a6:6a:b4:0a:f3:b6:e0:05:
49:b0:3e:70:8e:40:80:83:a7:02:a6:93:9b:2a:66:
4f:af:d4:bc:93:47:d9:07:10:27:d8:c0:75:e3:e0:
62:4b:fd:6a:1e:f5:ee:df:34:29:ae:6d:14:86:6f:
65:a2:cc:85:69:3e:3e:ce:02:04:c7:ba:7b:4d:6b:
e0:26:cf:dd:9a:e3:42:84:e6:31:21:a7:3a:a8:b0:
dc:06:bd:f9:b9:4e:d5:e8:7a:b7:80:94:e3:18:b8:
38:bb:1c:37:da:e0:0f:b4:68:f4:c7:5e:b6:67:6a:
fc:de:01:91:c4:73:46:90:ad:02:be:eb:2b:af:11:
b5:92:61:b8:80:06:d3:41:f4:05:18:e1:26:42:7b:
79:9f:ce:f2:9e:7e:4d:93:8d:2f:1f:88:45:a1:af:
cb:19:19:ff:f0:1f:42:22:3c:ec:8d:6b:f7:5e:72:
8d:09:63:bc:cf:e2:67:8f:60:b8:82:ea:eb:a8:0a:
de:f0:74:a2:09:e7:a5:0b:59:68:ad:b6:f7:1a:e6:
0c:3d:f8:94:c4:e7:24:0b:25:63:ce:5d:0f:cf:ce:
0b:d5:24:d8:48:ff:f5:d7:33:82:31:c8:e0:48:57:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B4:40:B9:C7:5E:4E:32:E0:37:D7:46:A2:33:3A:FB:4B:40:AB:1B
X509v3 Authority Key Identifier:
keyid:E4:02:A8:FE:9D:6E:6B:AD:DC:D9:41:4C:45:24:F9:F8:9F:C2:54:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E402A8FE9D6E6BADDCD9414C4524F9F89FC254DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e312e302f32342d3234203d3e20313335343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.223.1.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f1:6e:15:3d:0d:ca:ac:6f:0f:d9:08:3c:15:1b:4f:34:df:
20:55:17:cb:ec:56:dd:b3:b5:97:ca:18:0d:3f:d1:f2:dd:6b:
2a:6a:70:2f:30:54:b6:9b:6c:2b:cc:51:f7:b2:ef:c5:86:e1:
34:ae:67:0c:3a:b8:6a:f0:b2:f7:f0:27:3c:c1:2b:9d:68:b0:
57:6b:8b:c1:0b:54:62:fe:1e:b5:ef:97:e1:45:c5:84:08:48:
39:51:4a:06:2a:5a:1d:7f:d4:b7:4e:ba:cf:43:e4:12:67:53:
0d:98:18:4b:4a:b5:89:5e:ee:cf:85:c3:7b:66:fb:ad:c9:cd:
41:6d:06:a5:38:60:c1:41:14:53:46:f7:51:ea:c1:e3:d3:6c:
e8:b5:97:5f:46:a6:3d:c5:e9:3f:f3:fe:50:14:b8:9a:e9:b1:
bb:10:0f:bb:04:f2:e7:d3:23:6d:b4:b5:fe:98:d8:f0:23:c3:
7c:e7:13:f2:67:ca:40:24:f6:56:66:f4:aa:86:6d:96:ca:5e:
9c:48:b9:65:6f:d4:b1:d8:ba:a4:b6:ac:fc:4b:14:78:59:1a:
1e:8e:f6:b2:31:8a:28:fa:c5:97:94:1c:99:f5:4b:6e:0e:20:
35:76:5a:3c:45:08:47:2b:5e:35:06:e6:e7:2e:27:85:4e:73:
34:2e:dc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:15 2026 by rpki-client