
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa
File: 3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (raw, json)
Hash identifier: fcfvoG+f+IeB/aOvvSuH4jigNm/P9oaHKcA8ozVTJ2c=
Subject key identifier: E4:9A:20:BE:CE:CC:FF:64:A6:BC:C7:DF:A9:6E:BA:F0:08:CA:59:E4
Certificate issuer: /CN=59A9AB370F753D82771987E2FD7CA19578E11D07
Certificate serial: 3F7C7AD888FDB7B0FB8D9B419183BDB0BE2916E9
Authority key identifier: 59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa
Signing time: Sun 03 May 2026 03:07:10 +0000
ROA not before: Sun 03 May 2026 03:02:10 +0000
ROA not after: Sun 02 May 2027 03:07:10 +0000
asID: 140008
IP address blocks: 103.145.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl
rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:7c:7a:d8:88:fd:b7:b0:fb:8d:9b:41:91:83:bd:b0:be:29:16:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59A9AB370F753D82771987E2FD7CA19578E11D07
Validity
Not Before: May 3 03:02:10 2026 GMT
Not After : May 2 03:07:10 2027 GMT
Subject: CN=E49A20BECECCFF64A6BCC7DFA96EBAF008CA59E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:bd:02:f6:55:fe:87:91:e0:5c:bc:7e:d3:
73:bc:08:fd:91:04:a9:bd:a9:63:df:61:40:ec:48:
65:fa:d8:36:a4:f9:e0:09:5c:97:69:ea:81:0d:69:
a6:6b:9a:67:df:17:2d:ab:9f:95:b5:8c:e7:25:f5:
bb:3a:a3:0a:89:3d:f7:7f:f8:ef:94:39:0c:f7:46:
00:f7:39:91:b2:d3:38:e2:8f:76:14:0d:fa:b0:71:
da:79:ae:e4:7d:ec:63:b0:60:13:2c:93:3e:1d:0a:
b4:71:9f:a2:c7:53:56:98:0f:20:30:39:ed:25:fb:
0f:4e:14:e9:b2:ea:e2:a7:24:be:1c:a8:05:fe:da:
31:2e:53:29:d9:f1:f2:61:0c:55:27:5c:f3:80:71:
3c:55:db:e0:dc:de:33:14:1f:8b:61:84:ed:33:2c:
ac:3b:ce:60:65:25:a6:d2:c3:da:a0:73:3d:07:c4:
37:6a:cc:af:89:80:08:17:95:72:48:97:9f:4a:56:
ad:a2:89:6e:a5:bf:81:be:48:69:55:7c:10:ba:0a:
f5:2e:d3:9b:4a:cc:ae:80:2b:94:b9:f9:de:f3:56:
aa:78:77:98:c6:27:e7:be:8c:2e:7f:d6:dc:f4:f7:
d9:e9:12:03:23:f1:ea:83:a5:8c:d6:ce:28:7f:89:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:20:BE:CE:CC:FF:64:A6:BC:C7:DF:A9:6E:BA:F0:08:CA:59:E4
X509v3 Authority Key Identifier:
keyid:59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.146.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:23:01:ea:93:2b:91:69:c0:6e:cd:4a:8c:fc:88:a9:32:70:
49:d4:9a:9e:81:a8:2e:17:0e:44:74:0f:ba:1e:62:66:94:93:
57:6a:7d:58:3b:9d:fa:1c:ec:8b:c1:8d:13:92:06:61:9b:3f:
ea:97:00:a5:39:67:0e:fe:4a:74:bd:c9:c0:ba:6b:82:97:00:
83:93:43:a1:48:e6:34:ff:01:c4:44:d1:cf:45:db:f5:bd:1d:
fa:93:d9:f0:9e:f4:4d:63:1e:a2:e9:8d:f6:a1:d1:15:59:68:
58:60:c9:7e:b9:e6:44:b4:08:a3:78:3f:c4:cd:7c:c2:b4:c0:
ce:ea:7b:c4:d6:ed:ae:4f:87:0f:a0:70:98:f4:f6:eb:30:dd:
71:5b:3c:3e:96:12:f8:60:5f:26:17:aa:35:cf:4a:e2:c5:0d:
7e:4d:c5:15:05:94:a3:f2:d0:10:1f:49:b0:bf:b7:a1:b3:45:
02:39:44:a6:45:86:55:bb:79:e8:be:3f:ef:09:1f:82:84:e5:
70:11:59:eb:59:7d:04:51:67:c4:63:37:cb:10:fd:50:a4:c8:
15:d8:0b:bb:bf:5d:74:1c:d9:91:f0:f1:07:6b:a3:54:a4:2f:
72:a0:42:3c:9e:5c:6c:bd:0a:ef:b9:ac:b1:ef:b0:28:da:76:
2d:f4:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:48 2026 by rpki-client