
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa
File: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (raw, json)
Hash identifier: 45DsIwwkRRpg5bWvzaG3sx/NMYDeJXNq0PjvKzltS2I=
Subject key identifier: 95:36:1E:9D:AA:57:E6:CD:D5:2F:2A:0E:C6:7F:34:FD:71:E6:DA:BF
Certificate issuer: /CN=4E0311031DBA1471A97F3183416162430EA78405
Certificate serial: 53C12B1E16BD1061C0FBD5D6D1FCD546E64D25DE
Authority key identifier: 4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa
Signing time: Sun 03 May 2026 03:06:48 +0000
ROA not before: Sun 03 May 2026 03:01:48 +0000
ROA not after: Sun 02 May 2027 03:06:48 +0000
asID: 149736
IP address blocks: 103.188.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl
rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c1:2b:1e:16:bd:10:61:c0:fb:d5:d6:d1:fc:d5:46:e6:4d:25:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E0311031DBA1471A97F3183416162430EA78405
Validity
Not Before: May 3 03:01:48 2026 GMT
Not After : May 2 03:06:48 2027 GMT
Subject: CN=95361E9DAA57E6CDD52F2A0EC67F34FD71E6DABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:da:b4:46:35:1c:88:60:e2:66:a6:80:26:
fb:6c:d0:a0:ab:d5:58:73:00:18:2f:aa:20:68:ad:
0e:a7:c5:f2:ba:20:44:20:2f:3b:eb:f0:63:6b:f9:
ef:35:e3:e9:76:98:7a:bd:9f:4f:a2:16:22:a5:93:
99:cd:b8:00:30:81:6c:71:72:87:7a:9d:5b:80:cd:
55:56:c7:83:90:d7:00:80:3e:9c:01:2d:bb:a4:71:
ee:3a:2d:25:c6:65:1a:88:97:d6:bf:dc:df:f8:f9:
6e:d0:90:9e:03:ce:ec:41:b2:87:9a:25:a4:f3:3a:
9e:ff:72:1a:d5:d4:0f:05:3c:36:b4:e6:52:75:48:
cb:75:dc:b9:1c:bc:35:6c:de:27:3e:1b:fa:ba:57:
51:7e:63:c3:b1:3f:18:f1:f1:e4:4d:56:29:74:cd:
13:12:53:20:84:fa:25:d1:6a:8e:b8:02:7d:c0:31:
b9:ca:5e:09:37:12:d4:bf:b4:e0:8a:0c:c7:8f:a4:
88:cd:82:47:77:5e:3e:4f:45:f7:d9:bf:32:7c:79:
fe:7e:af:7a:b6:e2:b7:57:d2:c1:f7:0a:84:95:e8:
b9:fd:70:ba:fa:af:4b:25:c2:bd:5f:95:9c:a0:8d:
29:b9:dc:76:2b:d7:1c:fa:36:3f:3b:c6:b8:ae:3a:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:36:1E:9D:AA:57:E6:CD:D5:2F:2A:0E:C6:7F:34:FD:71:E6:DA:BF
X509v3 Authority Key Identifier:
keyid:4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:98:37:88:76:aa:d7:e3:2f:f0:0e:a8:58:dc:23:62:b0:e4:
95:39:4e:77:a6:3d:9e:78:43:3c:98:d5:bc:93:e4:7b:6d:7a:
81:43:63:98:ff:0c:ab:20:cd:d0:ed:10:3f:74:31:c2:89:10:
11:f6:aa:c1:ba:e6:8c:e9:a0:d2:eb:81:d6:b3:f1:8f:00:d0:
07:3d:77:a8:9e:d8:5a:02:24:4b:b4:ed:d0:d2:23:ba:af:63:
0f:1e:b4:cf:44:0f:f0:ec:29:df:86:0f:81:d5:a3:18:8e:3c:
22:17:3c:2c:7d:b6:85:b5:2d:5b:37:a3:b5:36:68:b1:77:f9:
47:d3:e5:dd:da:74:ab:fb:c4:32:3d:ef:4d:3d:8d:69:74:42:
72:8c:60:70:33:e2:05:51:02:87:70:a0:25:1d:22:8c:12:0b:
9d:19:76:67:7a:f8:f7:6b:75:76:fe:f3:90:9c:d1:57:d3:94:
b3:4f:96:a8:04:d9:a9:41:65:ba:9b:6e:ec:bf:fd:41:ac:8d:
97:06:bf:52:6d:63:ef:92:73:63:83:89:a7:24:f2:83:44:65:
58:ea:52:e3:4c:68:9a:eb:f7:62:84:6b:48:af:24:55:63:c0:
8e:4f:ca:8c:e8:24:47:fc:29:b2:b8:b2:b0:7e:41:dc:4c:0a:
ac:01:cd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:23 2026 by rpki-client