
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa
File: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (raw, json)
Hash identifier: s1284mAgTGH50deceslU106KOtM4knEtXWIuryUSU50=
Subject key identifier: 15:4A:88:79:3F:D5:DB:2F:04:3A:E8:9E:3D:73:A3:4B:4A:CA:98:72
Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519
Certificate serial: 2E95A58EAFDE3130E7E59B7ED8CF1078F6858741
Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa
Signing time: Sun 03 May 2026 03:02:15 +0000
ROA not before: Sun 03 May 2026 02:57:15 +0000
ROA not after: Sun 02 May 2027 03:02:15 +0000
asID: 131706
IP address blocks: 103.102.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl
rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:95:a5:8e:af:de:31:30:e7:e5:9b:7e:d8:cf:10:78:f6:85:87:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519
Validity
Not Before: May 3 02:57:15 2026 GMT
Not After : May 2 03:02:15 2027 GMT
Subject: CN=154A88793FD5DB2F043AE89E3D73A34B4ACA9872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:54:45:f2:5a:26:3d:73:a6:33:02:50:01:
25:77:6b:12:66:a6:bd:f6:7d:7b:b8:19:53:45:56:
de:b8:53:f1:ab:b7:fe:80:8a:03:ea:8a:63:25:a7:
6a:26:04:c2:77:17:66:af:9f:71:0b:f9:74:e1:e5:
86:af:92:8d:37:4d:df:1d:90:9e:16:28:48:fa:4e:
99:be:0d:38:4e:45:8c:cd:fa:8e:ec:e1:39:a9:ae:
aa:d5:4f:1e:c3:5c:1b:db:6d:44:c2:f5:1f:dd:3b:
7d:01:f5:87:e7:b5:32:af:6b:06:d4:d4:02:33:5e:
3a:8f:2a:e3:38:fa:f7:d6:7b:fa:07:d2:6b:92:1f:
22:2c:03:38:9d:8a:12:eb:c0:63:d6:e8:ed:02:6a:
50:1d:a9:b2:ca:5e:76:fc:c2:4c:fc:14:7f:bf:02:
35:b6:4d:ea:70:3a:34:ad:b3:32:97:7e:a0:6c:4d:
4f:40:c1:a2:3f:48:18:9b:49:d2:b8:e8:a1:08:85:
3e:c2:35:63:48:9f:c1:6f:bd:c7:02:3b:e7:19:2c:
0d:3d:a4:ac:14:35:a7:6a:40:6f:9a:5e:8f:08:d7:
7d:7e:a5:df:e4:10:8f:4f:76:71:90:62:9c:c7:e3:
e5:48:7a:c7:b5:5d:56:bf:a1:fd:b1:80:31:86:d8:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:88:79:3F:D5:DB:2F:04:3A:E8:9E:3D:73:A3:4B:4A:CA:98:72
X509v3 Authority Key Identifier:
keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.150.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b2:d8:94:1d:23:bd:cc:11:78:76:b1:5d:0c:d6:9e:f3:d8:
32:73:82:45:12:8b:b6:35:f8:a3:1c:f0:c6:04:98:a9:f8:23:
de:e1:1d:15:57:34:66:b4:a4:1a:fd:b1:44:1c:f2:8c:00:31:
a9:67:1e:40:32:b6:8b:6d:21:6d:84:a8:b5:07:7c:76:eb:2c:
8d:7d:88:7a:b0:fd:c4:9e:00:6b:b7:03:a2:b5:b0:3e:73:9b:
ae:aa:7e:82:d6:50:6c:52:e9:1d:0b:4c:52:76:31:fe:69:f9:
8e:b4:e3:1b:ba:e4:28:8a:79:83:b3:e5:fa:ec:c3:b5:56:d9:
b1:00:6d:d0:46:e4:3e:be:7d:e5:01:2d:ad:98:07:62:1a:aa:
48:71:fb:80:c5:2f:2a:3a:0b:7b:2b:46:01:2d:1d:a1:f8:20:
1c:d2:24:d3:d1:21:58:37:4d:b0:c8:9f:8c:f3:7a:9d:03:b4:
72:e1:b1:5f:4f:7b:cd:5a:3d:a2:6e:e1:09:13:9b:a5:9d:0d:
82:66:00:36:67:75:0f:01:43:23:39:44:da:85:3f:90:8c:77:
1f:9c:b9:5a:30:2d:08:bb:b8:ed:17:69:4c:a2:f1:83:f6:01:
6a:9d:2d:a1:03:b9:c2:93:a6:04:7b:54:36:80:86:34:9b:28:
2e:f8:ea:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:57:54 2026 by rpki-client