
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa
File: 3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa (raw, json)
Hash identifier: RX5pvrelsOfCczsPMOPyTT9EJaPRhnL4ZABJet9eUTU=
Subject key identifier: 34:CC:DC:87:D8:AE:78:4C:C0:E1:22:5E:EC:4C:8C:D8:19:97:20:31
Certificate issuer: /CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7
Certificate serial: 32FA3979E3763CD46DF64AC466F11DC49C672FA9
Authority key identifier: 54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa
Signing time: Sun 03 May 2026 03:07:04 +0000
ROA not before: Sun 03 May 2026 03:02:04 +0000
ROA not after: Sun 02 May 2027 03:07:04 +0000
asID: 132653
IP address blocks: 103.25.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl
rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:fa:39:79:e3:76:3c:d4:6d:f6:4a:c4:66:f1:1d:c4:9c:67:2f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7
Validity
Not Before: May 3 03:02:04 2026 GMT
Not After : May 2 03:07:04 2027 GMT
Subject: CN=34CCDC87D8AE784CC0E1225EEC4C8CD819972031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:cc:31:61:dd:80:7e:08:b1:ee:38:01:ad:
4b:24:65:ce:46:af:24:87:f9:4f:ec:be:43:a2:7c:
ae:aa:1a:d6:38:ac:11:72:b4:a6:41:04:a8:be:0a:
3d:da:9e:ef:e9:ff:2d:fc:e7:fa:3e:56:20:7c:c7:
45:31:f1:a9:18:09:40:78:9a:73:1c:a4:c4:97:3f:
bf:07:69:6a:c3:e1:61:39:00:80:d7:57:a0:fa:eb:
6f:db:ea:c8:fd:7c:9c:18:a9:e0:00:b6:e1:86:c1:
8f:62:88:18:3e:28:fd:24:ab:15:e9:e6:2b:06:93:
9c:70:e2:70:63:62:74:e5:90:41:09:49:39:56:e9:
a2:cc:3f:5a:2f:cd:c4:a9:a6:b7:5b:9b:2f:68:a3:
51:fc:59:3c:48:51:0b:3b:90:ca:0e:8a:3b:e3:9c:
7e:bd:96:b3:c5:df:87:85:ff:53:4e:6f:03:ec:e8:
45:ec:77:a5:d7:27:3b:d2:ab:83:90:37:39:11:62:
60:d0:fd:e0:9e:32:4a:d4:ab:9e:dd:21:6c:9b:4a:
3b:98:3b:0f:29:e4:7d:cc:c1:b4:df:22:3a:27:f7:
99:57:c5:97:ff:3e:7e:c6:3a:96:f1:69:d2:f4:4d:
e1:c0:6e:8a:6e:be:df:cf:9a:cd:c3:0f:ba:39:f2:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CC:DC:87:D8:AE:78:4C:C0:E1:22:5E:EC:4C:8C:D8:19:97:20:31
X509v3 Authority Key Identifier:
keyid:54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.208.0/22
Signature Algorithm: sha256WithRSAEncryption
17:3a:da:f8:60:c7:1f:21:16:63:d1:6b:9f:39:13:2f:19:fc:
d0:45:b4:90:cd:31:d4:d8:36:40:36:cf:4a:95:0e:5f:07:ba:
3c:12:a1:92:6e:82:cb:26:55:2e:d5:f5:f6:2e:b5:5d:dc:86:
90:75:71:03:34:e7:a9:d5:2b:7c:d2:4a:e6:dc:c6:9c:a2:83:
f2:a9:40:86:f3:24:45:55:46:f5:6c:95:fc:9f:de:4e:03:76:
11:c8:7c:52:09:30:e3:15:78:f8:34:dd:26:7b:5b:c0:f4:20:
33:68:e0:5d:4e:9c:f8:34:cb:00:f1:dc:fa:45:55:81:81:b6:
3e:1a:aa:7b:d3:a1:1b:bd:c3:ff:07:53:b6:ce:ba:6d:84:08:
ae:16:c3:ed:c3:17:45:4e:5b:b1:1e:7d:b2:a0:b7:4c:1d:7d:
a2:a4:84:72:67:e3:3e:0d:27:41:0c:19:f9:20:64:20:d0:f5:
6a:ad:b7:ba:f6:47:03:e1:50:67:40:fd:59:11:31:15:fa:a3:
bf:6d:34:51:fa:7c:9d:77:37:d7:87:4c:89:17:33:32:bf:62:
d1:13:b5:50:88:d4:7a:0f:3e:48:7a:e4:cc:96:72:46:9e:20:
41:91:f7:f9:e0:36:0f:6d:91:35:f7:74:6d:9a:60:10:b7:a3:
a0:27:e7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:39 2026 by rpki-client