
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa
File: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (raw, json)
Hash identifier: h90BkET+/WSsd4aMo6p6IL1g5zcgBmIrDGAfqtEac3U=
Subject key identifier: DA:5C:B8:0D:6F:46:E3:38:0F:1A:A8:BF:F2:6E:F3:FC:5C:AB:C0:58
Certificate issuer: /CN=51F28FDA0EA4620C617F32218CB294E10169884C
Certificate serial: 369FE00E248C7C180E87F8E315D28A590B11650F
Authority key identifier: 51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa
Signing time: Sun 03 May 2026 03:07:01 +0000
ROA not before: Sun 03 May 2026 03:02:01 +0000
ROA not after: Sun 02 May 2027 03:07:01 +0000
asID: 133799
IP address blocks: 103.42.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl
rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:9f:e0:0e:24:8c:7c:18:0e:87:f8:e3:15:d2:8a:59:0b:11:65:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51F28FDA0EA4620C617F32218CB294E10169884C
Validity
Not Before: May 3 03:02:01 2026 GMT
Not After : May 2 03:07:01 2027 GMT
Subject: CN=DA5CB80D6F46E3380F1AA8BFF26EF3FC5CABC058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:0a:e6:58:4e:2b:bc:8b:19:34:2e:e6:a8:
01:99:59:ee:f9:67:b7:dc:ef:5b:f1:bf:8e:5d:e9:
9f:10:78:48:e9:7d:41:45:4e:8f:3f:d3:b3:98:4c:
90:64:ef:3e:84:a8:f6:41:8e:f0:d4:e5:f6:95:4d:
6c:40:88:5a:b1:06:ce:40:bb:67:40:9a:2d:0e:c7:
e7:47:48:73:70:31:7c:c8:fb:95:04:75:2f:88:16:
74:64:a9:4f:67:c8:d4:e1:f8:4d:e7:89:57:f8:3b:
b6:63:d7:76:22:7c:33:71:09:93:62:e6:c3:14:be:
37:80:c0:4d:88:76:fa:e9:e4:42:82:53:3a:83:8a:
78:df:d0:5f:60:e8:5f:6c:b3:a3:b7:8c:41:7c:cf:
3a:50:9e:92:bf:6e:7f:9d:1c:29:5c:a9:73:4f:09:
96:01:65:44:2a:ac:6b:d9:17:63:6f:59:d6:18:ea:
c9:90:2e:7d:f6:bf:f4:a3:c4:9a:f0:ac:e3:48:7a:
85:47:2f:8d:b3:5a:8c:bb:b6:33:e1:c5:49:75:64:
4a:05:57:4b:22:f0:f3:e3:34:48:bd:51:4c:58:78:
43:79:34:63:ec:f9:7e:ee:c4:6e:dd:c6:19:b6:18:
6b:47:5c:3b:90:a1:e2:ad:9b:ba:2e:8e:a1:f9:08:
b4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:B8:0D:6F:46:E3:38:0F:1A:A8:BF:F2:6E:F3:FC:5C:AB:C0:58
X509v3 Authority Key Identifier:
keyid:51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.252.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d9:b1:f2:f5:33:25:18:8e:a5:f0:7f:01:1a:e1:11:27:62:
c5:a2:12:71:fc:69:01:e2:6e:20:dd:e6:da:7d:fe:d2:c9:1f:
c4:f2:ec:1d:0c:e5:d6:1f:73:89:b8:df:34:c0:25:95:41:10:
d3:5b:31:d3:83:50:dd:c5:c6:44:91:63:9a:ff:1c:26:a5:36:
88:2b:8a:e4:b2:3b:43:50:b1:a3:05:54:79:ba:5a:29:aa:40:
da:29:c7:3e:0c:94:3e:ef:3c:96:c5:1c:51:a4:6a:b5:5f:02:
01:85:95:4b:aa:ed:18:cc:63:57:a8:f1:f1:63:af:15:55:2f:
be:96:02:97:ae:4a:d2:d6:a6:f7:e1:6e:fb:00:ec:57:27:af:
87:5e:35:4b:cf:f3:21:09:e2:97:7b:31:72:3c:69:33:31:0c:
00:4f:0d:be:5c:83:2b:31:71:bd:b1:f8:97:5b:9e:43:f5:83:
88:85:48:a6:70:38:6c:ac:87:57:ee:3e:e7:a6:13:e6:d2:e5:
b8:e3:4b:4d:35:bd:2a:44:58:9b:2d:9e:90:8c:59:33:e9:77:
22:44:63:35:71:99:68:4e:f5:cd:bf:31:e6:93:32:7b:b5:f4:
c9:7b:4d:18:bc:14:3e:9c:03:ed:71:e8:78:7a:77:66:a0:91:
74:a6:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:30:52 2026 by rpki-client