
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33372e302f32342d3234203d3e20313333373938.roa
File: 3130332e34342e33372e302f32342d3234203d3e20313333373938.roa (raw, json)
Hash identifier: zNJcyGryuPuvJTavZCanxRxQweUo34+dvBhHJCpDIck=
Subject key identifier: 24:08:A2:27:8E:B9:82:FC:29:D3:60:D8:AE:E8:59:63:06:38:57:11
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 42A95D506B9DCC0202E2AB14E81B1E9EB33F29D3
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33372e302f32342d3234203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:03 +0000
ROA not before: Sun 03 May 2026 02:59:03 +0000
ROA not after: Sun 02 May 2027 03:04:03 +0000
asID: 133798
IP address blocks: 103.44.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a9:5d:50:6b:9d:cc:02:02:e2:ab:14:e8:1b:1e:9e:b3:3f:29:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:03 2026 GMT
Not After : May 2 03:04:03 2027 GMT
Subject: CN=2408A2278EB982FC29D360D8AEE8596306385711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:89:4f:99:2d:52:49:20:37:82:fd:da:f1:
dc:5f:78:f3:0f:04:47:5a:61:42:8d:d2:5f:a8:85:
cb:eb:8a:ce:39:0b:03:12:20:d0:31:e8:58:7e:1d:
50:26:c0:05:42:77:53:1c:47:4d:5a:1e:04:77:34:
9f:15:c8:19:db:2f:a3:d5:25:5c:54:9d:e4:70:20:
4d:d4:47:c0:73:f5:00:da:a3:58:c2:c3:4f:3b:30:
0d:cf:96:96:c1:9f:ef:c5:4b:5d:7d:b1:6e:6a:ad:
2f:fa:dc:0e:bf:0b:3e:b0:04:81:24:76:83:45:13:
a8:e2:1c:73:b7:49:2a:cc:85:f4:3b:06:a5:57:55:
1b:12:14:fa:87:2a:1a:32:b3:80:45:99:ae:4b:6c:
f3:42:56:60:7a:92:4d:6d:43:34:20:7e:3d:a3:f7:
02:2d:79:6c:ed:ea:5c:9a:49:37:46:2d:83:c9:77:
02:5e:a2:cb:75:2d:4d:44:8c:85:e9:77:ce:a1:c3:
a7:03:1e:74:4d:d5:de:d9:01:43:35:c8:37:78:8e:
b0:cf:af:2b:21:37:95:17:cf:52:a3:e4:cb:18:fd:
e2:95:e1:a2:78:7e:d4:9f:2b:4e:c7:12:7e:92:fb:
f1:f5:8a:c1:d4:1b:f8:f1:e2:9a:41:ef:ef:7b:50:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:08:A2:27:8E:B9:82:FC:29:D3:60:D8:AE:E8:59:63:06:38:57:11
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33372e302f32342d3234203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.37.0/24
Signature Algorithm: sha256WithRSAEncryption
23:10:37:d0:3a:94:ae:62:b0:ce:f2:95:f1:0d:c7:fc:00:ab:
bc:1b:07:2a:4f:5c:a5:d1:34:dc:10:c4:59:68:37:4d:cd:23:
33:19:7c:17:58:87:66:52:5c:8e:93:81:22:97:f0:50:74:e6:
25:cd:99:69:81:dc:05:4c:b9:62:da:16:66:33:53:46:2b:d6:
d8:b2:97:9a:9d:bd:8a:f8:93:99:72:08:ce:09:7c:a5:15:71:
ba:0f:2a:e3:33:5c:0e:a0:79:92:d5:ac:6d:0d:46:3f:83:20:
4b:a5:9a:9d:24:f6:24:02:de:c5:6b:0e:ee:71:fa:d0:e5:ec:
60:f3:3d:04:27:4b:cc:77:08:89:f1:21:50:aa:10:83:ac:3b:
76:3c:66:da:d8:56:0e:0f:a9:84:17:e1:0b:d9:44:c2:f0:00:
31:05:87:db:01:89:7d:f4:b6:ee:71:20:ae:50:89:4d:04:3c:
72:14:cd:53:6b:0f:f8:d9:b5:79:be:52:89:0d:f1:f2:1b:15:
fa:0b:ee:63:3a:74:c0:c9:df:00:48:1f:0f:d7:79:94:79:24:
2f:d7:31:37:5d:e4:10:f2:20:b9:6b:e0:04:2a:70:eb:3d:cc:
25:d2:27:8a:e3:97:e4:c5:a7:21:a0:7c:8e:22:d2:97:47:ef:
3d:ac:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:41 2026 by rpki-client