
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/3130332e31382e3133322e302f32322d3234203d3e203535363933.roa
File: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (raw, json)
Hash identifier: Fn5PKzmC7YA1TbvzOZXs3Jzaa7OB0gZmLLWwdOBo6Sk=
Subject key identifier: 71:FB:B5:F9:BD:56:7E:95:73:CD:F3:45:52:AA:21:26:AB:C3:04:F9
Certificate issuer: /CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97
Certificate serial: 30E98D4B650D68431753FF458DA26D172A91B9A5
Authority key identifier: 72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/3130332e31382e3133322e302f32322d3234203d3e203535363933.roa
Signing time: Sun 03 May 2026 03:11:30 +0000
ROA not before: Sun 03 May 2026 03:06:30 +0000
ROA not after: Sun 02 May 2027 03:11:30 +0000
asID: 55693
IP address blocks: 103.18.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl
rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e9:8d:4b:65:0d:68:43:17:53:ff:45:8d:a2:6d:17:2a:91:b9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97
Validity
Not Before: May 3 03:06:30 2026 GMT
Not After : May 2 03:11:30 2027 GMT
Subject: CN=71FBB5F9BD567E9573CDF34552AA2126ABC304F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:c6:6b:9c:e4:f4:45:06:93:ad:42:b2:ef:
05:db:59:e1:15:76:88:01:42:f1:9d:0f:d1:ef:8f:
48:f3:01:5a:46:27:ea:b9:5b:42:97:2e:47:32:8b:
c7:ec:bd:fd:21:64:35:22:d5:16:45:44:59:ba:7f:
fd:b9:e6:6a:f6:27:8d:9a:19:d5:8a:d7:52:01:29:
75:55:4f:0f:60:be:c2:d4:57:16:02:b6:33:28:12:
cd:e2:e2:42:0f:d8:a1:d2:99:75:d1:98:26:ac:33:
35:b1:f2:74:23:62:00:c9:8a:9e:76:59:fe:4c:21:
28:2a:36:af:78:02:f2:12:04:fd:7b:18:79:a3:ce:
54:ad:a2:bc:bc:5e:5e:a8:a9:4a:b2:b9:71:ed:90:
8b:6f:5f:df:e8:b4:d0:18:ae:8b:c6:a3:ef:84:93:
0e:6a:24:04:19:b3:62:0b:03:6c:eb:07:01:22:77:
b3:b3:d8:ee:05:8d:88:1d:31:dc:e9:3d:ce:b9:08:
6e:dd:23:cd:a4:49:21:d3:26:0b:dd:67:52:39:85:
56:c0:ad:42:78:5a:66:d0:74:24:0c:a5:d1:9c:f1:
7c:0f:4a:54:83:69:0f:a3:25:ea:7f:ce:ba:e5:f1:
e7:62:a4:99:64:79:8f:23:e1:42:8f:7e:42:83:41:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FB:B5:F9:BD:56:7E:95:73:CD:F3:45:52:AA:21:26:AB:C3:04:F9
X509v3 Authority Key Identifier:
keyid:72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/3130332e31382e3133322e302f32322d3234203d3e203535363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.18.132.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:97:f2:2f:3a:fa:7b:71:18:a3:e6:36:63:fd:49:07:e0:e0:
01:6c:a1:d9:e6:2f:73:46:08:ae:b4:41:6b:7f:c5:0b:a4:db:
c0:23:5d:e1:d3:97:d9:2f:8d:85:91:d3:80:ca:40:73:81:dc:
b6:bb:89:c3:73:64:23:5f:a8:9c:ba:11:8c:f1:51:00:fe:55:
a3:a2:dc:bd:e5:0f:5a:a7:26:10:07:d0:3e:cf:eb:0b:b0:b8:
df:84:59:eb:8e:a1:d1:03:41:09:4c:92:b3:2e:15:36:ad:06:
c2:f6:ac:09:96:90:b9:49:37:eb:8d:f6:69:1b:bc:b0:32:ee:
8a:5e:4d:ae:ab:44:39:e8:54:8b:68:89:30:36:e8:19:64:1b:
87:db:26:8f:5b:b8:05:a0:c2:76:27:a7:9a:d6:79:d0:c9:b6:
05:23:fe:81:d6:5b:0d:c5:13:3e:82:74:50:d8:34:f0:64:53:
11:18:a0:23:61:a8:de:4c:20:ec:d6:73:1d:90:a3:9b:64:7d:
63:bf:9a:c6:d4:e9:52:3a:1a:0b:c1:46:7a:67:cd:48:a1:8f:
d9:fe:90:00:a0:62:87:7a:bd:5e:27:a1:41:bc:60:08:ed:f6:
37:f8:c0:46:8c:2f:d5:c7:b2:be:be:7d:8e:96:cb:03:5f:1f:
83:e6:03:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:17 2026 by rpki-client