
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa
File: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (raw, json)
Hash identifier: /A5BVWcPl0ZTjFUSUynQsRiKSne+ZQyE6o9O6kwxRu8=
Subject key identifier: 90:62:F4:5E:E7:17:1A:15:E9:89:1E:38:3D:2E:4F:62:E5:7C:12:8E
Certificate issuer: /CN=DA4C7EC09188922B406170208997DD586575FFB0
Certificate serial: 5448CCADF8AB2B785B9D42F9271FC9F823F699C2
Authority key identifier: DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa
Signing time: Sun 03 May 2026 03:10:28 +0000
ROA not before: Sun 03 May 2026 03:05:28 +0000
ROA not after: Sun 02 May 2027 03:10:28 +0000
asID: 151527
IP address blocks: 103.58.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl
rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:48:cc:ad:f8:ab:2b:78:5b:9d:42:f9:27:1f:c9:f8:23:f6:99:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA4C7EC09188922B406170208997DD586575FFB0
Validity
Not Before: May 3 03:05:28 2026 GMT
Not After : May 2 03:10:28 2027 GMT
Subject: CN=9062F45EE7171A15E9891E383D2E4F62E57C128E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:01:95:37:21:91:7c:0b:7c:03:6d:60:1c:
56:2b:75:ce:ad:7e:3b:ef:b4:f3:42:a6:26:96:bf:
c3:27:41:b1:ff:ae:5e:32:bc:99:7e:2d:6b:06:41:
bf:39:97:a8:76:39:a9:dd:92:53:31:8b:40:c4:df:
8f:db:71:e2:ae:7b:f1:e7:a9:a1:0a:4d:2e:b9:c6:
a3:ae:08:f8:f8:90:2e:b8:ed:88:4e:71:aa:e5:65:
88:7d:f3:88:08:fb:06:18:13:92:6e:af:0e:f7:3e:
9c:27:01:7d:a9:df:2c:99:fb:08:39:dc:53:92:6b:
eb:89:c9:ec:b2:7a:04:be:52:70:a6:1c:e4:a9:fd:
3d:87:4c:4f:16:f2:69:97:69:66:af:60:b0:1b:19:
64:a5:27:7e:76:a3:f9:45:c2:8e:bd:31:23:f8:15:
8b:3c:09:52:de:8b:d8:ed:3c:3d:fc:9c:d2:89:ac:
b8:dc:36:82:52:02:18:b0:0f:11:e8:86:8b:8f:a8:
b8:21:fb:5a:39:a6:ff:8c:b1:25:3f:9d:ca:bd:c9:
5a:e6:19:d6:89:de:e3:2e:9c:8e:02:85:58:ed:2b:
f9:32:a7:47:14:e2:95:17:81:83:98:43:ad:1b:c8:
74:ba:c5:ef:5e:4a:06:f0:5b:f6:99:f7:29:5f:79:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:62:F4:5E:E7:17:1A:15:E9:89:1E:38:3D:2E:4F:62:E5:7C:12:8E
X509v3 Authority Key Identifier:
keyid:DA:4C:7E:C0:91:88:92:2B:40:61:70:20:89:97:DD:58:65:75:FF:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/DA4C7EC09188922B406170208997DD586575FFB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA4C7EC09188922B406170208997DD586575FFB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.199.0/24
Signature Algorithm: sha256WithRSAEncryption
87:71:21:09:bb:a8:8d:90:ec:e6:f2:a0:76:36:ec:f8:3a:15:
e0:e3:74:65:0c:da:b4:42:c0:30:7b:89:92:36:4e:f0:ae:ae:
5e:cf:68:29:5a:c4:76:c4:92:6b:ab:c8:16:ec:01:6e:aa:6f:
f3:1a:ca:07:3d:5f:d5:8f:af:59:de:bc:19:09:0c:77:14:e1:
ab:76:ef:8e:92:f4:8f:38:07:09:c7:27:37:bd:98:e8:d6:b6:
7f:c9:1e:68:46:f3:84:a5:e5:5e:43:de:fd:56:29:37:69:bf:
d0:33:7f:b3:f9:3c:24:75:5c:a6:f1:07:51:42:30:3e:ca:b0:
6e:58:75:37:b4:cf:3d:3b:cc:1d:89:4b:af:c1:05:e6:2e:cc:
f7:58:a2:4c:30:a8:81:2e:0b:85:2a:fc:07:79:86:f5:ab:c4:
3f:27:e5:da:7c:dd:0a:80:26:24:d1:d7:de:16:8b:2a:2c:9b:
4c:63:9e:64:0a:65:87:ec:f0:7b:1f:af:25:dc:30:49:4c:04:
6c:0a:49:41:e6:ea:0a:5b:78:1a:92:76:8f:c6:d6:7e:fa:0b:
ee:69:96:68:3c:92:c3:d2:37:1f:cc:13:91:a5:1a:e7:31:42:
f4:bd:fe:b8:5f:71:09:54:58:96:68:e2:f0:5b:bf:fc:71:14:
bf:c6:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:26 2026 by rpki-client