
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa
File: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (raw, json)
Hash identifier: QJg1M8/s35wBZCJd23hVMpVnzfit8NujQLOa3VDBcgA=
Subject key identifier: FB:3A:26:35:17:86:D3:CC:A5:2B:22:49:9C:51:04:11:FB:DD:4E:57
Certificate issuer: /CN=55582FD0227D59106C464C718D4114C24DB52B25
Certificate serial: 0D5302A32591F3C26A23332E6258A24F4C077E26
Authority key identifier: 55:58:2F:D0:22:7D:59:10:6C:46:4C:71:8D:41:14:C2:4D:B5:2B:25
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55582FD0227D59106C464C718D4114C24DB52B25.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa
Signing time: Sun 03 May 2026 03:05:54 +0000
ROA not before: Sun 03 May 2026 03:00:54 +0000
ROA not after: Sun 02 May 2027 03:05:54 +0000
asID: 139955
IP address blocks: 103.147.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/55582FD0227D59106C464C718D4114C24DB52B25.crl
rsync://rpki-rsync.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/55582FD0227D59106C464C718D4114C24DB52B25.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55582FD0227D59106C464C718D4114C24DB52B25.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:53:02:a3:25:91:f3:c2:6a:23:33:2e:62:58:a2:4f:4c:07:7e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55582FD0227D59106C464C718D4114C24DB52B25
Validity
Not Before: May 3 03:00:54 2026 GMT
Not After : May 2 03:05:54 2027 GMT
Subject: CN=FB3A26351786D3CCA52B22499C510411FBDD4E57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:41:4f:6f:2a:b5:0e:ab:bf:35:42:19:4d:
2f:35:cb:06:b2:7e:fb:e6:40:f0:4a:13:28:59:29:
4b:dc:ff:8e:12:2f:1a:34:7c:c9:48:a4:27:0b:de:
75:fe:c8:70:de:71:18:24:78:58:96:02:bd:38:0a:
8a:fd:32:20:4f:2a:24:ce:61:e8:a0:34:fe:1b:58:
87:ff:e7:c8:94:82:9f:62:3d:3e:9c:9b:e4:35:5c:
9a:8d:69:26:a6:92:4c:6d:d9:86:6f:06:d5:cd:8e:
61:0d:ea:16:ce:03:39:2f:a9:21:e3:72:f5:12:fb:
67:44:1b:65:f9:38:75:19:9d:c9:bd:a0:eb:51:83:
4a:29:92:34:45:ce:64:2c:64:14:76:04:b7:32:c8:
84:d4:92:9c:64:8f:fd:49:65:9d:85:40:e1:86:e6:
cd:35:9d:ba:77:7d:47:89:d0:2d:8d:7a:59:75:56:
d6:f8:ec:93:70:7c:79:59:bd:94:58:4b:17:28:37:
17:5f:01:8c:ce:29:dc:80:4e:15:11:75:64:2a:a7:
12:70:a7:f7:6a:f6:6e:96:10:4d:16:0e:1f:db:2b:
10:dc:61:59:90:86:e9:91:f5:d6:e0:fa:86:3f:f4:
a9:2c:3e:bb:76:ae:84:66:01:4b:ac:e4:9c:16:9b:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:26:35:17:86:D3:CC:A5:2B:22:49:9C:51:04:11:FB:DD:4E:57
X509v3 Authority Key Identifier:
keyid:55:58:2F:D0:22:7D:59:10:6C:46:4C:71:8D:41:14:C2:4D:B5:2B:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/55582FD0227D59106C464C718D4114C24DB52B25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55582FD0227D59106C464C718D4114C24DB52B25.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.84.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:94:c5:e2:e2:50:d6:8b:ae:05:da:1d:bf:75:e2:8d:fa:a8:
65:03:f1:2b:7c:1f:80:f5:bd:49:fd:cc:f2:88:ea:58:c5:ab:
d5:06:bb:db:e4:8d:ed:43:a5:d4:cb:74:e1:04:d8:4c:2d:45:
22:11:48:26:b9:cc:2c:f4:82:ea:3f:0f:fb:f8:39:f8:09:9e:
1d:c7:07:96:d2:8a:d9:fc:54:1a:4f:ea:ac:a5:14:c9:e9:04:
98:f7:ba:45:54:09:72:16:bb:4f:f5:99:ae:ce:ae:ac:f7:8b:
62:1f:2c:22:eb:61:b6:87:d5:95:b9:fd:d1:5f:66:42:1b:2b:
bb:19:19:c6:e7:c3:ff:8b:75:a7:5f:e4:14:0b:e9:97:39:cc:
41:97:c4:4f:28:a3:96:f9:79:04:7d:8d:38:41:8a:6f:e2:c8:
cc:e0:a5:e8:ec:77:da:2e:5b:e5:94:a2:99:87:24:78:8e:e3:
c4:0f:55:cc:24:9f:86:6c:87:3d:4b:7a:d8:26:18:52:ba:e3:
84:b0:11:c3:2f:9f:5c:02:d4:0f:5b:7f:7b:6e:5b:19:6e:04:
32:26:88:b3:7f:d4:ed:1d:b2:41:f4:1d:e4:7a:3e:d4:66:7c:
4f:81:44:b2:12:ff:3d:96:40:c1:1f:37:2d:97:cc:73:3a:ae:
eb:8e:5b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:24 2026 by rpki-client