
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa
File: 3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (raw, json)
Hash identifier: UPB/qBUFP9GqScWdxOKoCFaWZdy0EEvs2yjoMI9jaZ0=
Subject key identifier: 4E:3E:F7:F6:80:7C:C4:6D:90:68:2F:93:C0:AF:9A:43:EA:67:84:AC
Certificate issuer: /CN=59A9AB370F753D82771987E2FD7CA19578E11D07
Certificate serial: 196C49360352214EB2D9AF336C34505FCD0FF02E
Authority key identifier: 59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa
Signing time: Sun 03 May 2026 03:07:09 +0000
ROA not before: Sun 03 May 2026 03:02:09 +0000
ROA not after: Sun 02 May 2027 03:07:09 +0000
asID: 140008
IP address blocks: 103.145.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl
rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6c:49:36:03:52:21:4e:b2:d9:af:33:6c:34:50:5f:cd:0f:f0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59A9AB370F753D82771987E2FD7CA19578E11D07
Validity
Not Before: May 3 03:02:09 2026 GMT
Not After : May 2 03:07:09 2027 GMT
Subject: CN=4E3EF7F6807CC46D90682F93C0AF9A43EA6784AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:db:9b:08:77:16:c8:e3:63:af:8a:cf:fc:
3c:1a:12:08:27:1b:7c:c4:cb:c4:8a:bb:3e:3b:7f:
ab:71:67:87:52:42:54:9d:9c:3e:84:34:c1:15:3d:
08:05:72:3a:7f:0c:c4:25:1b:57:cd:7f:50:dd:83:
bf:f2:bf:d8:a6:41:0e:70:4d:3c:bf:84:ac:e6:f6:
17:aa:11:e9:00:0e:51:ab:52:1a:c0:13:27:49:90:
62:8b:81:49:dc:01:e9:32:9f:5a:29:20:c3:28:5d:
3e:27:9c:f6:9e:73:8a:d3:a1:2d:3c:72:02:48:a4:
2b:e5:dd:90:f4:1a:3b:ea:d4:59:2a:47:5e:57:ef:
1d:cc:06:3b:1e:8a:3b:93:44:d6:1b:cc:10:16:1b:
2a:4d:f5:c3:4e:8b:c7:50:f0:9f:ff:eb:38:63:eb:
44:a0:27:dc:3f:38:a4:a9:d0:61:55:90:b2:7d:e3:
a1:f8:93:55:4c:88:66:72:de:d8:87:eb:b2:a9:07:
21:ce:b8:fd:8e:7d:73:3f:d6:92:31:6f:19:3a:f5:
4f:47:47:9f:97:e0:71:6c:82:37:59:c6:a9:79:48:
d4:90:55:24:e1:fe:d0:82:e5:64:de:e1:5e:30:27:
b7:7a:7b:6d:ff:15:96:85:a2:3b:93:21:e8:a2:27:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3E:F7:F6:80:7C:C4:6D:90:68:2F:93:C0:AF:9A:43:EA:67:84:AC
X509v3 Authority Key Identifier:
keyid:59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.147.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ea:86:31:90:65:64:61:c5:87:83:2f:78:69:a6:7a:1a:d2:
57:36:35:bc:30:bf:dd:60:5b:7d:1b:05:23:e1:8d:84:2c:44:
00:6a:66:27:6a:2b:08:63:8e:78:0a:34:1a:56:4b:3c:57:32:
12:28:6d:fb:75:6e:c0:15:11:3e:8e:0e:50:f2:33:11:25:92:
eb:64:c3:2a:db:bb:72:57:23:5a:8c:b4:ca:8d:0a:65:cc:df:
70:4b:64:68:11:bc:93:b8:46:b6:91:ae:da:ae:9b:2f:4b:19:
85:a6:a2:8d:27:c2:7c:68:97:f6:7c:71:21:78:9b:67:fb:be:
68:22:4a:1d:ba:ac:91:22:61:23:68:37:ee:69:f4:0f:84:75:
cc:b6:c4:ed:ed:f5:ff:9e:cb:a6:30:04:b7:34:58:a6:1f:7d:
6f:1c:fa:51:b3:07:b4:b6:a0:f0:a3:7e:b8:1b:b8:69:06:f9:
b2:77:4d:37:4c:1a:41:d9:ef:dd:8b:17:d2:26:20:b8:73:e5:
76:01:df:8f:59:e1:b5:46:b6:52:09:ce:25:4b:33:38:a1:bc:
64:cd:fa:bf:2e:87:81:7c:65:a5:73:74:88:eb:d4:b9:1e:1b:
d5:76:68:a8:78:43:ed:b3:26:e2:14:69:65:50:44:6f:77:1f:
b9:4c:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:38 2026 by rpki-client