
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa
File: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (raw, json)
Hash identifier: Z9jMWV3QBPuL76HRS4eEvm14hiKdvW3s+uuBGhhBiQI=
Subject key identifier: B7:07:13:4F:31:00:99:CC:26:7F:86:5B:7A:F3:59:E4:22:42:25:B2
Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519
Certificate serial: 0FFADAF45F76D0C7ACDBA7D1289ADFE89B639D40
Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa
Signing time: Sun 03 May 2026 03:02:15 +0000
ROA not before: Sun 03 May 2026 02:57:15 +0000
ROA not after: Sun 02 May 2027 03:02:15 +0000
asID: 131706
IP address blocks: 103.102.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl
rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:fa:da:f4:5f:76:d0:c7:ac:db:a7:d1:28:9a:df:e8:9b:63:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519
Validity
Not Before: May 3 02:57:15 2026 GMT
Not After : May 2 03:02:15 2027 GMT
Subject: CN=B707134F310099CC267F865B7AF359E4224225B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:59:2f:b0:f8:71:ff:3a:fa:81:cc:d5:3d:
61:68:2c:53:f2:d3:96:8d:a7:c0:8e:7c:42:55:98:
e5:d5:86:a4:3f:94:be:3d:f5:e3:9f:2a:18:f6:c5:
b2:4f:98:5d:e4:e1:fc:51:63:69:d8:ed:00:28:3e:
f2:01:40:50:6f:d8:52:d9:de:4c:ec:c7:5b:09:7b:
36:86:90:56:20:c5:b7:11:f8:ea:e5:f6:f4:79:c8:
61:7e:09:c7:f3:6a:7e:8b:d7:d5:ee:ac:e7:7b:0a:
52:1f:e9:65:59:26:68:a7:54:5a:db:5e:d5:a4:2f:
1c:77:ae:76:5e:63:78:f4:79:39:4a:73:b2:83:d9:
2b:df:0a:eb:1f:cf:62:75:7b:a4:65:9c:43:03:05:
87:1e:5a:26:5f:08:38:7f:2d:63:1c:f9:ff:79:e4:
b6:3b:08:8c:8a:c2:f4:6e:61:76:1d:b4:b3:23:1b:
f0:c7:3c:46:c7:5a:19:db:43:c5:8e:cf:8e:89:45:
59:36:28:3c:95:b2:b0:23:63:81:b3:d3:9b:a7:5e:
18:a3:e8:cb:a0:d4:2a:90:dd:75:2a:7f:b7:ae:7f:
b2:f4:34:e9:7c:0a:69:bf:f7:8c:0d:4f:69:a6:4b:
10:91:d9:b8:9f:5e:fd:dd:7c:3b:13:c1:ab:f9:97:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:07:13:4F:31:00:99:CC:26:7F:86:5B:7A:F3:59:E4:22:42:25:B2
X509v3 Authority Key Identifier:
keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.150.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:f4:34:b3:ce:f3:4a:cc:c7:7e:cc:b9:08:ee:aa:06:4e:c9:
d8:29:5a:96:93:1b:c7:35:84:d5:dd:69:b2:15:40:34:7b:d3:
0a:40:43:03:be:33:99:99:4b:ba:3a:f0:c7:cb:40:5c:b1:6a:
62:c2:6e:8f:d3:56:07:08:03:95:31:3f:2e:8f:93:97:96:be:
e1:3f:31:fa:d2:ec:97:95:ed:2c:9d:51:e9:85:2d:da:d7:7e:
05:6a:e3:ca:5d:a3:f7:8e:43:6f:73:c8:30:2e:ed:47:22:5d:
93:f8:31:c3:6e:8b:ac:d7:8d:89:6f:07:33:ea:99:36:48:4f:
57:a2:b1:60:cd:d0:aa:7e:a4:94:90:96:c6:36:ce:22:d0:bd:
bd:fd:bf:a9:22:64:5a:d3:d9:7b:c5:77:0b:37:f2:a2:08:77:
c4:37:98:13:7a:dd:3c:70:36:d2:48:65:d9:bd:2b:e6:ec:80:
35:45:27:c1:ef:72:08:60:ca:bd:74:14:c9:c4:e8:5c:84:4a:
20:6e:f2:50:d2:c0:7b:7a:e1:93:e7:c2:a1:4d:2b:8e:fb:be:
8c:69:43:64:a3:59:74:43:71:0d:39:ae:8b:52:f9:41:87:d0:
b4:08:f3:2f:f2:6a:57:fc:7f:83:3b:6c:0b:b1:2d:1f:31:27:
7f:08:b0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:47 2026 by rpki-client