
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa
File: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (raw, json)
Hash identifier: QhszDQbWemrtI4HXUWkUHZ8wzdInKO4JyVKFbfV5NWE=
Subject key identifier: 5E:86:05:7E:FA:14:60:92:14:C3:42:C5:2C:D2:0F:18:F1:A2:4E:DE
Certificate issuer: /CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
Certificate serial: 299759B35B7B5BF650F9CD74686EA18A66C2A55C
Authority key identifier: 54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa
Signing time: Sun 03 May 2026 03:13:42 +0000
ROA not before: Sun 03 May 2026 03:08:42 +0000
ROA not after: Sun 02 May 2027 03:13:42 +0000
asID: 138087
IP address blocks: 103.125.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl
rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 05:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:97:59:b3:5b:7b:5b:f6:50:f9:cd:74:68:6e:a1:8a:66:c2:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
Validity
Not Before: May 3 03:08:42 2026 GMT
Not After : May 2 03:13:42 2027 GMT
Subject: CN=5E86057EFA14609214C342C52CD20F18F1A24EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:55:71:25:2c:1a:21:97:8e:6f:df:96:3c:
16:51:4a:8a:60:c9:d0:b0:64:b2:85:16:1b:ae:3a:
02:23:e2:c2:b3:ff:d9:cc:bc:ce:68:d4:cc:c1:86:
16:16:bb:fc:5c:1c:f0:15:85:9e:d7:ac:37:12:12:
ea:7a:dc:ee:ba:0e:7a:17:8a:ad:52:39:8d:9c:93:
9b:9e:ff:34:c2:3c:9e:29:a8:ba:a3:34:c4:5e:b3:
c8:d3:f1:e3:02:65:f1:62:93:47:b8:e0:d4:b9:0a:
0e:93:99:ec:51:43:73:0d:45:cc:79:01:b8:b5:d4:
34:3c:f4:f4:a1:53:cc:d8:91:b9:c2:1c:ac:78:5e:
ac:51:e8:ec:e4:07:2d:98:52:d1:77:6d:4c:2f:59:
05:f1:46:6f:7b:e1:4a:03:81:6a:14:69:00:c4:91:
33:a0:53:34:0d:ef:2d:83:ab:d5:51:70:40:b6:92:
50:e6:a9:71:27:4e:f2:b0:74:ba:c0:64:35:8d:1c:
b2:b0:ce:ba:56:4e:8a:e6:01:f1:22:0a:fe:0a:6b:
85:45:18:5f:0d:62:71:21:1d:32:d9:ad:b1:79:ca:
c4:5d:7c:d5:6c:30:50:39:8b:52:c4:f4:8b:d0:3e:
45:1e:07:2a:be:98:3c:20:f8:e4:44:42:29:87:97:
e5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:86:05:7E:FA:14:60:92:14:C3:42:C5:2C:D2:0F:18:F1:A2:4E:DE
X509v3 Authority Key Identifier:
keyid:54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.18.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:39:f7:13:dc:e7:be:9f:e0:a3:bb:61:af:06:42:c7:9a:f3:
36:48:db:98:38:cd:48:21:3d:14:ea:23:27:da:69:28:76:0d:
61:4a:df:0c:0d:f6:fc:e0:49:06:ee:a5:47:08:f4:61:ef:e7:
0f:9c:9f:05:05:52:c5:5a:e1:e0:7a:df:4c:27:c5:1a:7e:20:
83:83:8b:fe:cf:cf:fa:16:99:c8:98:37:b8:c4:1f:3b:65:7c:
20:e3:a3:8f:c2:7e:58:21:dd:09:62:1e:f6:00:3f:c8:92:f3:
a6:b2:55:f5:de:dd:b3:ad:b8:b5:03:8d:d3:53:18:64:84:28:
4e:fc:25:0b:3b:83:ed:3b:e1:cd:7b:1d:07:dd:36:34:d2:90:
17:b3:1f:1d:9d:cb:0a:ba:85:10:c1:f3:14:47:59:0b:af:c0:
e1:22:67:ef:1c:3c:61:a1:c7:56:a3:7a:b4:d8:c2:ed:ff:91:
38:94:07:68:81:1c:40:3e:d7:4c:75:cc:ad:f7:af:8f:3a:e1:
98:e2:b3:b9:23:47:1e:12:a2:c9:bb:71:db:70:00:fd:41:54:
bd:ec:ec:55:dd:97:89:85:b7:67:e0:67:b9:9a:73:cf:5f:47:
a0:d3:c3:1a:dd:2e:95:02:39:43:77:9a:15:55:1e:2d:0f:3e:
56:e5:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:11 2026 by rpki-client