
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa
File: 3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa (raw, json)
Hash identifier: mceGSTa1KkilNVeVE/R8JALesPG1r2/fVL6j+DUnje0=
Subject key identifier: AF:7A:35:89:FC:11:5D:AB:96:CA:60:2A:CD:30:26:BB:80:E6:6B:57
Certificate issuer: /CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376
Certificate serial: 441CE5C41554F2D94FEB1E80CC18617C1392C55D
Authority key identifier: 15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa
Signing time: Sun 03 May 2026 03:02:06 +0000
ROA not before: Sun 03 May 2026 02:57:06 +0000
ROA not after: Sun 02 May 2027 03:02:06 +0000
asID: 149175
IP address blocks: 103.167.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl
rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:1c:e5:c4:15:54:f2:d9:4f:eb:1e:80:cc:18:61:7c:13:92:c5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376
Validity
Not Before: May 3 02:57:06 2026 GMT
Not After : May 2 03:02:06 2027 GMT
Subject: CN=AF7A3589FC115DAB96CA602ACD3026BB80E66B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:05:d6:34:20:6a:b2:36:dc:e6:df:cf:a1:
f1:74:74:59:63:7d:32:d1:9b:d5:e3:7d:f4:44:55:
88:c3:64:04:c8:4d:32:29:d2:90:f0:fa:36:30:1e:
0d:3f:0e:b3:db:59:d0:b1:e6:6c:2a:11:58:fe:c8:
aa:3b:91:27:7e:1a:1b:83:fb:72:10:1e:07:bf:28:
42:28:c9:e1:91:42:11:27:4f:99:b3:15:73:6b:5b:
68:05:6e:7d:23:86:8d:8f:45:5f:7b:ad:40:16:b8:
bc:f2:04:ff:e8:d7:77:98:e8:ff:f0:e3:24:86:a9:
c2:ee:d1:04:41:90:58:93:7a:26:7d:1c:59:0b:53:
41:71:e2:bd:72:2c:2a:d9:3d:27:40:38:71:0f:ff:
25:e8:e3:4c:49:02:f4:13:6a:05:4d:28:fc:7e:a2:
92:87:96:ba:74:72:49:a8:d8:5c:d2:7b:4a:7a:ac:
61:24:1c:f3:ca:3f:62:b1:11:c7:31:e6:f6:a9:e4:
49:8e:9b:ed:a5:e0:5a:0e:23:ef:6e:ba:c9:5d:7b:
ac:8d:bf:5e:b3:d2:00:00:c7:df:27:1e:bb:7e:4a:
12:26:c1:ae:f0:fb:43:f4:75:a7:7c:61:1e:af:02:
03:6c:cc:fc:24:bc:2c:5d:7a:55:46:8c:47:07:76:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:35:89:FC:11:5D:AB:96:CA:60:2A:CD:30:26:BB:80:E6:6B:57
X509v3 Authority Key Identifier:
keyid:15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.71.0/24
Signature Algorithm: sha256WithRSAEncryption
14:49:dc:c0:ce:38:2d:5a:43:ff:6e:f6:71:39:d6:18:c0:02:
c8:e6:02:71:34:f2:9e:d6:f7:4e:a0:67:60:bd:6f:06:49:a3:
76:ba:3f:51:60:0b:52:cb:f2:3d:d2:b0:54:83:62:4d:0b:b5:
31:54:5b:e5:fc:5d:25:89:32:92:4e:65:97:ae:17:57:30:98:
e7:7a:b2:b3:b2:e2:a4:35:31:26:78:45:b0:ed:14:5a:b0:97:
62:52:59:22:85:a4:ed:fb:20:8a:b6:3d:2a:17:5a:f1:e1:ff:
16:ce:4a:03:7f:5e:ce:68:84:d7:d7:bd:d4:75:cb:bf:0f:eb:
b9:de:dd:16:a1:df:de:83:9d:b2:6d:e7:95:8b:09:83:a2:a2:
14:7c:7c:02:91:d6:78:b9:36:47:92:76:0d:71:49:96:b4:6a:
15:5c:78:e8:ef:3a:65:6c:f1:85:3d:83:5a:d1:66:1b:f6:9d:
a7:0b:49:04:c2:54:01:0b:3f:9c:a7:33:5c:da:28:52:2e:a6:
37:9c:a8:24:ea:95:ea:b4:ca:7b:50:22:17:4a:bc:51:c0:34:
93:36:2d:50:68:d5:73:da:7f:14:74:63:58:28:9e:e7:1f:c3:
7e:45:22:f1:c3:08:6b:c6:54:a9:fd:82:3d:41:13:7a:8b:e2:
1c:70:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:19 2026 by rpki-client