
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa
File: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (raw, json)
Hash identifier: yHKtP8J6sRjd2vBKKZ1C8jqGxnt5X4o3lstFY/wy1jg=
Subject key identifier: B6:DC:04:B2:F7:F2:6E:95:9F:8C:F3:97:02:EF:2F:77:D2:16:99:7A
Certificate issuer: /CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Certificate serial: 5599CF65DD1AC53DEDF95559754F83B7DE9EEC2E
Authority key identifier: AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa
Signing time: Sun 03 May 2026 03:05:03 +0000
ROA not before: Sun 03 May 2026 03:00:03 +0000
ROA not after: Sun 02 May 2027 03:05:03 +0000
asID: 140407
IP address blocks: 103.151.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:99:cf:65:dd:1a:c5:3d:ed:f9:55:59:75:4f:83:b7:de:9e:ec:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Validity
Not Before: May 3 03:00:03 2026 GMT
Not After : May 2 03:05:03 2027 GMT
Subject: CN=B6DC04B2F7F26E959F8CF39702EF2F77D216997A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:38:47:68:db:42:fe:84:c5:46:2d:22:61:
d1:70:5e:e1:eb:bf:c8:ab:b6:da:49:a4:2a:23:04:
b0:63:3f:a0:cb:d1:51:a4:79:a5:77:25:ba:f8:68:
40:e7:2b:2e:e9:19:73:d8:53:5d:c4:85:8b:8c:ad:
33:f7:e9:88:0d:0a:46:a3:81:00:2b:70:b8:6a:eb:
ea:3a:72:82:7f:50:0b:b4:34:5b:e6:89:50:66:84:
3a:2a:93:ad:8e:6e:a9:37:61:86:9a:9b:90:aa:74:
77:88:ea:de:89:5b:43:5e:d6:f4:43:2a:08:9f:e4:
cf:ea:ce:c3:7c:9f:a7:45:18:38:e7:d5:05:85:0b:
02:62:6f:67:40:2a:8b:e0:a9:4c:7b:76:90:a0:33:
6e:dc:ef:92:1c:91:db:0c:c4:a6:5f:b3:56:26:1e:
0c:6c:bb:fa:39:90:62:f2:e9:30:43:d5:82:97:54:
b4:e7:ce:e7:e3:8e:89:9d:8e:48:26:14:da:fc:bf:
d2:9b:79:4c:92:2a:fc:dd:02:93:91:01:b5:bb:8a:
42:73:03:38:6d:34:01:96:65:e8:fd:84:6c:e1:33:
bb:ed:0c:26:2c:91:ec:10:d5:d2:a2:a8:c5:55:18:
09:90:29:12:3c:f4:60:91:37:ce:ef:8d:a4:29:c8:
0b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DC:04:B2:F7:F2:6E:95:9F:8C:F3:97:02:EF:2F:77:D2:16:99:7A
X509v3 Authority Key Identifier:
keyid:AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.151.32.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:03:40:06:16:48:b4:3d:e5:96:2f:9f:c2:c0:9d:21:ba:e5:
99:2d:5f:4b:be:98:83:54:30:1b:a6:70:ee:a9:2a:bd:94:f1:
cc:e9:d6:d7:c2:aa:cd:08:13:b6:41:6d:92:7d:af:3c:f8:7c:
47:8f:7a:94:15:25:a0:c2:19:ee:e3:a1:b1:25:05:d9:42:f8:
20:ad:ef:af:1e:44:23:aa:d9:9a:32:bc:76:82:60:32:11:3a:
24:f9:23:04:01:99:27:d3:e9:7f:a5:e0:92:97:16:ee:20:c2:
ae:c8:b6:90:2b:71:e6:89:33:02:6c:2d:bd:da:23:b3:a7:da:
3c:f9:46:7d:06:0b:3b:43:e9:b9:2b:11:c5:c1:6a:7d:5a:e9:
a9:71:40:ec:f6:cc:45:fa:ec:33:55:31:f9:a3:66:21:03:c9:
52:bb:50:38:ab:d3:4c:e9:41:ed:fd:b4:c0:09:94:08:4f:60:
39:56:43:8e:ce:74:66:c9:6a:00:85:48:19:30:2a:e3:a7:19:
e9:45:16:12:12:52:67:5d:da:88:d4:f8:11:10:bb:9c:13:14:
97:a8:1e:9b:42:09:4b:27:0e:b6:c5:4c:0a:da:a8:61:3a:7f:
c3:c2:1b:7b:09:2b:80:92:b0:d6:0b:23:90:0d:f2:bf:8f:8e:
cc:0b:e9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:51 2026 by rpki-client