
$ rpki-client -vvf rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa
File: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (raw, json)
Hash identifier: 8HCIw7CZYRIarfxox7lXQ/MdAlePE93YlMnPKUyebGg=
Subject key identifier: 41:E8:B3:39:12:14:55:63:52:05:11:59:4D:21:64:23:9B:57:71:BC
Certificate issuer: /CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31
Certificate serial: 3641FCCF5FB58DCDC58D92CCBBF33D3E4BC3A32A
Authority key identifier: 7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa
Signing time: Sun 03 May 2026 03:06:53 +0000
ROA not before: Sun 03 May 2026 03:01:53 +0000
ROA not after: Sun 02 May 2027 03:06:53 +0000
asID: 140390
IP address blocks: 103.150.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl
rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:41:fc:cf:5f:b5:8d:cd:c5:8d:92:cc:bb:f3:3d:3e:4b:c3:a3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31
Validity
Not Before: May 3 03:01:53 2026 GMT
Not After : May 2 03:06:53 2027 GMT
Subject: CN=41E8B33912145563520511594D2164239B5771BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:90:64:dc:0d:7b:ea:34:4d:c8:1d:ae:c2:
19:4d:02:3e:b3:77:61:66:9f:1d:f8:96:0e:8c:0e:
0c:fc:b9:87:01:aa:e3:09:f1:e4:a3:d8:cc:19:5f:
e0:83:3c:a9:77:2b:97:31:db:af:7c:8c:ca:1b:6d:
85:9e:4f:44:6b:61:69:38:20:54:fd:b6:37:6c:cd:
6d:9e:e8:2e:3c:ea:f7:7b:da:c4:da:4a:36:5b:ac:
9a:52:68:26:7a:0a:91:70:b8:be:f1:eb:57:64:7a:
6f:d8:ca:4a:5b:40:7f:33:36:5b:2b:7c:1e:77:07:
6f:a0:10:bd:7f:dc:5f:f2:d8:51:18:e1:00:e8:1b:
b1:34:57:9e:56:dd:a8:cb:88:94:61:89:e2:8e:2c:
ea:93:bd:94:58:a5:dd:4d:82:0b:86:1a:f1:db:6c:
0b:f5:01:ca:99:3d:c6:b4:5e:31:f0:d6:ed:2d:ec:
aa:dc:5f:47:b7:d5:bc:8d:db:a8:bb:ac:c9:e0:ac:
ea:d1:09:62:4e:27:86:2f:e3:04:81:eb:f1:a7:0c:
fe:d0:73:50:e4:c4:12:5e:d8:c2:af:49:05:6b:eb:
2f:50:58:80:4b:60:19:8b:67:54:55:d3:94:62:66:
94:4c:b0:8e:b6:8e:cc:9d:fd:5c:c5:a6:af:b6:c2:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:B3:39:12:14:55:63:52:05:11:59:4D:21:64:23:9B:57:71:BC
X509v3 Authority Key Identifier:
keyid:7F:88:97:9F:15:7A:73:BC:13:FC:5A:3D:5B:9C:76:CB:3A:2B:3E:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F88979F157A73BC13FC5A3D5B9C76CB3A2B3E31.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.32.0/23
Signature Algorithm: sha256WithRSAEncryption
99:de:63:f3:dc:0c:6d:7f:55:bf:cd:97:43:9b:e9:08:87:93:
18:36:4f:e4:81:ba:25:9a:f5:28:2e:b9:b4:d0:76:07:18:1b:
cc:dc:ba:ab:69:4c:73:b4:46:3f:e0:13:1a:79:8a:15:ca:03:
c9:c0:c3:9d:75:78:b1:57:ff:01:49:34:a6:79:db:a8:60:92:
bf:1e:c6:91:c6:46:99:b2:99:0f:8e:3c:57:75:f4:3d:a6:74:
2e:38:fc:be:0d:26:b0:b0:d5:83:41:43:ca:e3:ec:dd:be:de:
4b:c5:34:c2:0f:91:10:16:0e:e4:b2:dc:27:af:94:32:d0:e7:
b8:fc:be:b3:6b:32:57:59:61:06:99:db:fc:5d:3f:f1:52:e5:
e7:0c:ad:a3:98:d4:43:ef:03:d8:67:2d:70:9b:dd:85:40:86:
db:e1:27:0a:48:0c:9d:22:e4:0d:f2:ac:a0:10:1b:86:eb:11:
00:f7:e5:09:d4:9c:c0:eb:6f:a6:32:c3:15:05:14:4e:e8:8c:
ed:05:38:7a:a8:6a:72:70:3b:e8:13:da:7f:f9:2e:66:b4:00:
ab:47:91:48:0c:3a:68:5f:76:58:b0:bd:ce:c8:93:c6:4a:78:
6c:5a:71:4b:24:be:a2:ba:35:9d:fe:93:75:9d:b2:b0:0d:60:
d7:df:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:44:13 2026 by rpki-client