
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa
File: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (raw, json)
Hash identifier: unGiwDFaGahe7tpg1Hffc3jKyo8NlWLKseBqlIlvILo=
Subject key identifier: 69:62:80:28:0C:C8:EA:2E:03:E3:DE:87:58:2E:07:48:7F:61:F8:62
Certificate issuer: /CN=7CB53701F9A5E6CBB24596105D30044B647BBC84
Certificate serial: 0A0A991CE1963284E6E4A653B2C084535EF5942C
Authority key identifier: 7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa
Signing time: Sun 03 May 2026 03:05:49 +0000
ROA not before: Sun 03 May 2026 03:00:49 +0000
ROA not after: Sun 02 May 2027 03:05:49 +0000
asID: 140444
IP address blocks: 103.153.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl
rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:0a:99:1c:e1:96:32:84:e6:e4:a6:53:b2:c0:84:53:5e:f5:94:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB53701F9A5E6CBB24596105D30044B647BBC84
Validity
Not Before: May 3 03:00:49 2026 GMT
Not After : May 2 03:05:49 2027 GMT
Subject: CN=696280280CC8EA2E03E3DE87582E07487F61F862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:30:8e:3e:90:13:20:3e:cf:2b:cb:2c:17:
7c:ff:34:a2:ba:ce:46:b1:b8:c4:e5:ed:5c:57:24:
7a:2a:29:df:c9:2b:1c:b8:a2:ac:c8:1b:0c:45:e2:
e7:4d:e1:a7:27:ff:66:84:2f:ec:11:75:5e:4a:be:
89:1c:7e:da:28:a2:b5:d9:49:29:fa:e1:03:9a:78:
ba:35:04:f9:d1:eb:87:ab:83:62:5e:09:b5:b8:bb:
9f:ec:79:c9:c5:ba:2a:e6:dd:09:10:7d:f9:75:8a:
ee:10:f0:51:6c:37:d1:c6:30:af:0e:7e:8d:25:ff:
49:52:d5:e5:74:aa:75:2b:68:2e:2a:71:13:58:f3:
bb:85:79:2a:1a:5b:be:6d:c7:dc:20:bb:36:06:d7:
c4:19:2b:d3:57:eb:38:86:8b:6c:cd:ec:b6:29:17:
bb:9e:1d:d4:94:3a:21:0c:55:e9:66:70:06:bd:85:
ae:ad:ef:29:04:5b:e4:53:2e:8e:4f:55:36:12:89:
63:c8:91:90:63:77:71:c7:59:16:dc:5f:13:12:08:
a4:14:f5:ef:48:7b:b8:c5:64:e2:20:e9:2e:17:0f:
12:01:58:5b:c7:20:87:7f:94:c2:82:05:61:7d:ff:
a4:02:10:24:06:33:4d:6b:59:ad:a2:41:2d:fa:51:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:62:80:28:0C:C8:EA:2E:03:E3:DE:87:58:2E:07:48:7F:61:F8:62
X509v3 Authority Key Identifier:
keyid:7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.42.0/24
Signature Algorithm: sha256WithRSAEncryption
19:16:c5:38:03:6f:4c:cd:6b:76:7c:8e:fa:9a:69:d4:b9:dc:
2d:94:68:9a:0a:fb:f2:ca:ed:ef:f2:5a:28:64:95:d3:8e:92:
3b:95:3a:44:31:4a:4a:69:6f:ca:b8:90:36:3e:63:ea:97:96:
9e:2e:54:d1:18:b2:a6:6e:16:ad:6d:3a:64:df:7b:f2:99:ee:
5f:e9:d5:34:bc:99:a6:76:85:4b:6e:93:b5:dc:0a:49:9f:42:
44:8e:98:29:09:4c:8a:9c:19:7c:92:b8:78:a3:36:9d:f9:ab:
64:b5:04:83:98:a5:70:f6:d2:0f:d7:cf:e5:89:d7:53:20:1a:
a6:36:e5:42:f2:c9:db:ac:5b:1e:45:0d:ca:0d:77:7b:4f:2a:
36:e2:12:ed:9e:1d:fc:e3:8d:28:e9:c1:0d:e5:ba:c1:12:d0:
30:60:48:97:45:8c:3b:79:c6:16:5e:2d:75:44:74:51:e1:60:
0f:d5:c4:97:9e:22:c3:f8:b8:e3:57:41:58:56:ac:48:6d:fe:
1e:5c:a7:dc:44:aa:43:61:10:73:94:9e:f8:e9:de:d6:91:65:
18:13:c0:e5:fb:aa:3e:28:0d:6f:c0:76:ee:53:b1:08:6e:a0:
09:bc:b0:f3:24:39:97:40:1c:9b:88:d1:ef:0a:99:6c:a4:12:
f7:9a:8d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:40 2026 by rpki-client