
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa
File: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (raw, json)
Hash identifier: gPZAQ+bxPkBJwcTxVnEcsmMlAofGkUTs2Mpi2Ou9ROM=
Subject key identifier: D0:F5:51:AD:0D:3E:19:35:E3:B3:90:5C:C5:56:72:9B:1A:CF:96:F1
Certificate issuer: /CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93
Certificate serial: 4CD16137900A99588340C85B0DA6482D49A6EB2F
Authority key identifier: 25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa
Signing time: Sun 03 May 2026 03:14:22 +0000
ROA not before: Sun 03 May 2026 03:09:22 +0000
ROA not after: Sun 02 May 2027 03:14:22 +0000
asID: 150263
IP address blocks: 103.31.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl
rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d1:61:37:90:0a:99:58:83:40:c8:5b:0d:a6:48:2d:49:a6:eb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93
Validity
Not Before: May 3 03:09:22 2026 GMT
Not After : May 2 03:14:22 2027 GMT
Subject: CN=D0F551AD0D3E1935E3B3905CC556729B1ACF96F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:0a:e8:9c:fe:40:ac:e0:5e:98:59:83:ca:
f7:37:6a:d1:2e:ea:eb:85:ca:45:61:79:c7:d3:d3:
ad:f9:b9:34:a4:a9:11:36:9e:e6:60:cb:a4:16:22:
86:68:fc:72:d2:fe:cc:e5:16:7f:78:17:b7:93:c7:
c2:96:ee:d2:b2:bb:4c:b9:63:a1:32:00:71:65:f4:
49:8f:ab:e3:2b:3e:10:9e:1b:a9:60:d3:de:d1:fb:
00:39:40:34:31:c8:e0:36:6a:a1:d0:56:c4:c7:e1:
c1:11:75:2b:58:64:5b:7e:95:6f:9a:51:ec:83:7c:
1f:4e:93:ed:ee:05:e3:4d:e0:26:8b:06:d8:f0:df:
15:a9:22:30:ba:e0:69:7f:17:08:18:65:85:6e:ab:
50:d1:94:c1:24:77:6e:08:71:d6:2e:88:48:40:4e:
d5:4a:1d:f3:78:cb:33:dd:34:da:d8:dd:b7:4c:a4:
75:fa:be:10:be:ea:c9:12:cb:3f:f4:09:68:6f:55:
d8:74:28:d1:3e:57:34:64:5c:fd:52:b5:25:12:2f:
6a:3f:3f:18:db:01:ad:f2:63:19:64:47:b9:ac:24:
4b:b2:04:7b:b5:8c:c4:3b:98:da:12:44:ce:84:e4:
d6:86:f4:0b:9e:ce:e7:49:80:2d:fb:f0:dc:82:fc:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F5:51:AD:0D:3E:19:35:E3:B3:90:5C:C5:56:72:9B:1A:CF:96:F1
X509v3 Authority Key Identifier:
keyid:25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.119.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f4:54:b8:d3:c1:17:33:48:68:d3:6e:14:72:b7:be:e8:25:
53:35:c0:80:35:4b:91:86:ff:aa:21:57:e4:cc:83:74:af:80:
e4:dd:08:45:a1:ec:f2:e1:ca:b1:7f:20:92:fa:85:e2:f0:4d:
93:f8:16:46:fa:b6:02:b3:a0:0f:3a:5b:92:a5:fa:e5:68:31:
bf:46:1a:ca:4d:cf:0d:89:f0:34:72:ce:2a:f2:89:c2:c5:96:
09:b3:65:64:7e:e0:d3:e1:f3:9d:8d:75:9d:e3:0d:a6:fb:af:
82:df:23:5c:5f:68:07:92:91:b9:27:43:44:2e:cc:b4:44:80:
70:c6:a0:19:f8:1e:99:2a:c8:4a:7d:2c:b5:7b:8b:e0:0a:f9:
b7:b6:58:7d:5e:cb:cb:f6:4d:49:1c:59:74:27:82:01:85:6d:
5b:b4:1a:9f:a8:9b:11:13:10:5a:95:b2:81:8a:92:20:1a:45:
11:20:b0:11:10:2d:09:a3:7b:b0:ca:07:a1:86:dd:f2:9e:9a:
ce:94:1b:b2:e2:82:0d:69:a6:9f:db:90:07:fa:5d:66:5a:be:
4a:ce:30:e5:b2:95:8a:fb:8d:09:90:62:c3:0f:f9:53:62:af:
19:9f:4b:52:11:39:e5:d1:f5:bd:7a:75:49:de:e5:18:55:3e:
fe:0b:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:53 2026 by rpki-client