
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e32332e3134312e302f32342d3234203d3e203538343031.roa
File: 3130332e32332e3134312e302f32342d3234203d3e203538343031.roa (raw, json)
Hash identifier: Vxo1SAebkkXkXHrkJyQxo/evf7z4vPT/u0wpK8ACYKQ=
Subject key identifier: F8:6A:14:9C:F2:61:6B:82:52:A1:FE:75:35:F7:07:75:0D:13:EC:BF
Certificate issuer: /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial: 5A6D5C743A8AC6A8FE2A25C390EA50872F00ACDD
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e32332e3134312e302f32342d3234203d3e203538343031.roa
Signing time: Sun 03 May 2026 03:02:33 +0000
ROA not before: Sun 03 May 2026 02:57:33 +0000
ROA not after: Sun 02 May 2027 03:02:33 +0000
asID: 58401
IP address blocks: 103.23.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6d:5c:74:3a:8a:c6:a8:fe:2a:25:c3:90:ea:50:87:2f:00:ac:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Validity
Not Before: May 3 02:57:33 2026 GMT
Not After : May 2 03:02:33 2027 GMT
Subject: CN=F86A149CF2616B8252A1FE7535F707750D13ECBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:5e:a5:1c:79:b5:31:42:88:5d:9a:d5:a5:
7a:5e:45:c9:5c:4e:a4:9a:64:d8:f0:4c:d6:28:63:
c0:8b:7b:5b:f6:39:fc:ba:7f:cc:b7:67:b8:4b:26:
4c:e7:55:91:39:1a:62:b5:0b:29:80:58:a2:fb:e8:
b3:0d:19:99:e8:ba:5e:0a:1a:e6:1d:9f:d9:e0:ee:
b5:3b:e9:91:88:ad:1d:7f:71:30:6b:13:b0:a0:1a:
d9:3b:f4:8c:62:17:4d:50:a2:7d:25:a9:2a:33:46:
9d:d0:34:59:18:b2:e6:cb:cc:2e:ba:bb:eb:ee:f0:
57:22:49:73:18:6a:b6:17:e7:bc:4e:3d:c9:f7:30:
7f:a8:2c:45:4e:21:bd:ea:ba:ed:51:ea:1e:c3:66:
bc:92:95:bf:6b:cd:64:6f:b0:44:59:4a:1f:63:5b:
30:6a:9c:c7:3c:73:c1:61:93:76:c7:1e:b3:b3:81:
c2:c9:aa:21:e8:32:bd:f8:c2:14:f8:10:06:ac:23:
96:ef:e5:5d:62:2b:87:85:ea:8e:7a:48:f9:82:5c:
1c:12:f2:41:83:00:83:ec:9b:a6:d6:d8:63:b6:2f:
d5:cb:91:87:a6:d4:ad:21:e3:5d:eb:e2:7b:bd:0a:
fc:5d:93:aa:e6:37:8f:fa:3a:7c:c0:18:d1:11:ac:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6A:14:9C:F2:61:6B:82:52:A1:FE:75:35:F7:07:75:0D:13:EC:BF
X509v3 Authority Key Identifier:
keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e32332e3134312e302f32342d3234203d3e203538343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e1:e7:d5:d2:15:51:18:c8:2b:d4:fb:aa:6a:f2:87:37:ec:
f8:3e:f4:35:71:20:b0:5d:9e:36:a5:53:39:4d:5c:42:3d:78:
8e:7e:f1:90:35:e6:8d:2d:f7:8d:87:24:5b:0b:48:da:46:20:
a9:8b:e0:67:cf:0c:1f:68:aa:e5:e8:2d:91:2a:2d:f6:e7:1a:
92:57:73:2c:b4:81:16:5a:6d:b8:16:4a:f1:fc:0d:f4:4e:8f:
a3:f4:19:cd:30:33:e3:d0:b4:a8:5a:47:dd:86:92:c1:14:95:
db:af:86:30:9c:99:f1:9b:bf:12:7d:e0:14:c2:52:58:9f:d0:
bb:6c:81:91:9e:0e:ef:25:20:bd:1f:f5:f3:9d:92:d9:c6:ab:
b7:3e:b7:f6:78:74:92:35:5a:c3:d8:42:52:4c:04:26:6c:6b:
f2:b6:8c:ec:9e:b7:7c:cb:74:44:e4:6d:89:66:9e:0b:d5:b5:
5b:37:a2:f2:07:17:a6:98:b9:6e:05:11:72:cc:c6:e8:de:fc:
9f:98:45:c1:a4:51:3e:8e:85:37:6c:69:ed:50:7e:3e:21:75:
29:a1:7a:9f:78:fb:f1:4a:e5:87:e1:ec:6a:76:dc:72:af:58:
7e:f7:84:4e:ca:a5:87:46:57:43:cd:6f:84:5e:a3:f2:e9:28:
02:10:89:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:21 2026 by rpki-client