
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/3130332e3139312e35322e302f32332d3234203d3e2034383030.roa
File: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier: Wh9jPiaMLmpVJg4WJmhSTDv7ObmHyLTAXzkGZmow5b0=
Subject key identifier: DB:7E:06:0F:9D:E1:E2:88:59:C5:87:6E:A6:C1:38:BC:50:0A:67:AD
Certificate issuer: /CN=8D7E0574648D2E037D2147F409FC002E56E42A23
Certificate serial: 6EFC8741C38C745A0537F05D6FBB7FCBAF0579F3
Authority key identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/3130332e3139312e35322e302f32332d3234203d3e2034383030.roa
Signing time: Sun 03 May 2026 03:10:52 +0000
ROA not before: Sun 03 May 2026 03:05:52 +0000
ROA not after: Sun 02 May 2027 03:10:52 +0000
asID: 4800
IP address blocks: 103.191.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl
rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:fc:87:41:c3:8c:74:5a:05:37:f0:5d:6f:bb:7f:cb:af:05:79:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D7E0574648D2E037D2147F409FC002E56E42A23
Validity
Not Before: May 3 03:05:52 2026 GMT
Not After : May 2 03:10:52 2027 GMT
Subject: CN=DB7E060F9DE1E28859C5876EA6C138BC500A67AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:e2:96:ca:28:73:2e:f4:8b:51:c1:80:df:
ac:1e:d9:03:bd:c6:6e:55:72:74:7a:a1:b4:52:03:
3d:f3:43:f7:f3:f3:94:d3:26:81:b9:00:6e:55:09:
b5:91:64:e2:0c:a7:c2:05:08:33:b0:be:6b:10:17:
35:32:23:9b:be:6e:cd:5e:74:06:72:ad:a0:5a:d7:
81:60:9d:60:f6:f2:d8:de:64:ea:a0:f7:e4:fb:1a:
ce:f9:75:26:04:6d:71:07:44:19:e1:b2:db:c9:81:
1f:30:93:e5:8e:78:db:a3:07:b2:5e:c6:03:b3:83:
fe:52:2b:27:60:0e:5b:76:52:55:68:2b:35:1e:06:
8a:0a:5e:b6:91:90:07:0d:19:fc:4e:25:b2:31:85:
86:79:23:8b:ae:31:73:96:88:fc:fb:df:10:b3:eb:
f4:d4:9e:24:d0:10:9b:97:95:01:17:e5:43:54:12:
26:16:e0:49:9b:c3:ef:f0:f8:2c:41:46:57:41:d7:
0b:d3:e8:14:5a:40:7b:54:49:f7:71:34:64:3f:10:
3e:9f:cb:2c:cb:e1:06:85:12:9f:29:2e:ad:96:ec:
00:21:8e:27:df:ba:e2:06:67:4c:fe:4e:0a:d3:47:
d1:33:f8:7a:37:ed:3c:05:b5:71:82:6f:45:b2:2d:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7E:06:0F:9D:E1:E2:88:59:C5:87:6E:A6:C1:38:BC:50:0A:67:AD
X509v3 Authority Key Identifier:
keyid:8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/3130332e3139312e35322e302f32332d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.52.0/23
Signature Algorithm: sha256WithRSAEncryption
81:dd:c3:4c:d7:7d:f5:4d:8c:80:b8:07:82:c9:be:ff:32:43:
fd:12:95:51:a5:de:fd:25:12:f5:06:a0:71:a9:b6:6c:00:00:
61:34:b0:a5:0e:5f:fa:c8:dd:a5:b2:65:74:9a:b8:39:fe:e0:
fe:c8:9c:7b:5e:d8:a5:e4:f8:51:40:8e:6c:c5:34:ca:8b:4a:
b3:3b:bd:2e:1c:fb:ca:04:63:9c:1b:e3:c4:fa:f8:fe:77:fc:
03:59:0a:82:b5:19:aa:75:a2:34:c9:b7:ee:0b:e9:a8:b2:c6:
bd:51:40:56:63:09:9b:54:19:a5:91:d7:bd:7a:77:bd:76:3c:
16:6c:e8:ad:36:b5:b3:23:06:65:40:12:2d:1a:dc:d9:3c:66:
b6:1f:b6:c4:47:4e:1b:a2:4c:83:58:88:62:93:70:97:37:cd:
16:24:ee:02:7c:28:2d:2f:cb:ff:47:26:45:46:52:2f:43:ca:
89:d0:76:17:0f:b6:9e:f9:48:9c:b4:3a:02:7b:8f:00:cc:bb:
8b:2d:7a:00:85:55:4c:7b:3e:01:66:5c:da:70:48:c4:4c:12:
18:3c:78:45:8e:f8:00:13:1b:d1:08:80:a7:25:1e:94:c9:cc:
22:fc:80:c9:2d:3f:11:3b:1b:25:7a:61:4a:82:80:f4:cd:94:
84:6c:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:48 2026 by rpki-client