
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa
File: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (raw, json)
Hash identifier: G3yTjAsTBJcMcArecaYX/yOP7athsjKmul3O/4eoKrU=
Subject key identifier: CD:D1:43:35:3A:7D:8D:7D:0B:EF:02:30:DC:56:07:D6:F4:8D:FF:80
Certificate issuer: /CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF
Certificate serial: 6DEA3B2831B89DBD4278AA2AE4C0E18B4EF3562C
Authority key identifier: 1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa
Signing time: Sun 03 May 2026 03:05:17 +0000
ROA not before: Sun 03 May 2026 03:00:17 +0000
ROA not after: Sun 02 May 2027 03:05:17 +0000
asID: 153111
IP address blocks: 103.184.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl
rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ea:3b:28:31:b8:9d:bd:42:78:aa:2a:e4:c0:e1:8b:4e:f3:56:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF
Validity
Not Before: May 3 03:00:17 2026 GMT
Not After : May 2 03:05:17 2027 GMT
Subject: CN=CDD143353A7D8D7D0BEF0230DC5607D6F48DFF80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:63:f8:32:09:a2:d3:70:60:36:f0:8d:3a:
e1:64:e6:9c:c1:c3:7c:42:41:34:5f:7d:1d:f4:10:
ad:e6:2d:6c:f1:fc:33:0a:87:17:f4:d1:eb:d2:aa:
c4:aa:a3:e3:20:ca:29:78:8b:fd:47:88:df:2d:47:
db:1e:92:b5:43:1e:da:10:c0:3e:28:7f:ff:2a:f6:
54:d7:b3:cc:4a:18:ea:09:70:f7:08:b1:ab:ba:4b:
af:4d:28:eb:22:2d:27:aa:79:1c:d5:59:87:79:5c:
79:91:40:29:fd:8b:06:ce:a1:65:72:ca:99:36:6a:
45:d3:2d:05:8b:f9:fe:81:f9:3e:8e:ec:7f:5a:30:
63:87:ea:8d:08:0c:90:58:11:73:2d:d0:f7:17:b7:
c8:86:14:b6:7d:5c:35:63:0a:f6:d5:1b:f2:50:b9:
52:54:24:d4:8f:ce:d6:84:d4:c6:39:0a:be:32:c0:
df:2a:a9:69:86:09:9e:cc:87:38:ce:c4:4e:6e:1f:
b6:38:c2:a1:32:93:91:9d:fc:b0:81:c1:96:ba:70:
8d:e0:b9:20:5a:7f:92:f5:36:4a:ed:6b:9d:9a:28:
07:b0:e3:43:57:0d:d4:b1:8f:7a:b0:95:5c:df:ef:
d3:e3:04:28:a6:13:bb:66:9d:94:a1:be:10:6d:e8:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D1:43:35:3A:7D:8D:7D:0B:EF:02:30:DC:56:07:D6:F4:8D:FF:80
X509v3 Authority Key Identifier:
keyid:1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a8:12:5f:6f:2c:01:46:1b:cf:06:d6:8b:5f:80:c3:85:cf:
24:4b:e7:9c:1b:b7:ed:1e:3a:5a:3c:fa:3f:17:7b:21:70:2c:
e3:db:d7:05:ce:9a:a9:5b:64:36:47:a2:79:a8:fd:50:73:eb:
62:c9:9f:4e:1a:d4:eb:9d:d3:3d:48:94:5c:e3:38:56:1a:d8:
26:f0:04:64:13:71:38:c1:f6:29:76:dd:d0:ee:72:b1:29:dd:
79:76:40:df:9f:e4:e9:01:fd:86:c6:93:69:19:c0:d9:82:24:
95:9c:aa:30:1c:ef:d1:ff:68:b5:b7:ce:ef:8f:33:e8:d3:c0:
9c:73:85:0c:45:be:88:68:3d:d5:43:e1:79:85:bc:42:7d:c9:
d1:30:41:ee:42:a0:bc:76:a6:8b:d5:b2:e9:52:05:75:96:2e:
f0:6f:22:4e:b2:3f:33:6c:c2:8f:bf:73:4b:b4:ba:e4:26:05:
c9:fe:80:51:30:a6:5e:86:9d:9e:0e:d0:7e:06:1a:00:1e:74:
36:b6:20:5b:ca:9f:b4:25:da:08:56:68:92:92:6c:b0:d9:8e:
c5:c3:82:14:b1:b7:45:b0:51:f9:3d:20:61:6c:47:51:17:72:
d3:31:31:cc:a0:46:9e:18:5a:25:80:3a:f6:a3:3f:9e:4b:76:
2b:ab:8e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:22 2026 by rpki-client