
$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa
File: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (raw, json)
Hash identifier: QAsVtfJ5MeFkdQm44JCiH05Q1rhNltV7DI7CKM25258=
Subject key identifier: 8F:DB:8B:F5:5F:BF:1A:06:EA:40:67:92:55:5B:DC:6B:61:EF:5E:D1
Certificate issuer: /CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750
Certificate serial: 4A64390F452167AC5971A05A95A635091D3AF67E
Authority key identifier: BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa
Signing time: Sun 03 May 2026 03:15:17 +0000
ROA not before: Sun 03 May 2026 03:10:17 +0000
ROA not after: Sun 02 May 2027 03:15:17 +0000
asID: 139958
IP address blocks: 103.147.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl
rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:64:39:0f:45:21:67:ac:59:71:a0:5a:95:a6:35:09:1d:3a:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750
Validity
Not Before: May 3 03:10:17 2026 GMT
Not After : May 2 03:15:17 2027 GMT
Subject: CN=8FDB8BF55FBF1A06EA406792555BDC6B61EF5ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:9f:61:82:c8:71:be:fd:3b:06:5a:97:81:
42:2b:5f:93:d3:c9:c0:7c:81:7d:5e:fb:35:52:25:
12:d9:d8:b7:0c:2b:66:21:76:e5:7b:53:79:cc:b4:
3d:71:08:e1:7f:60:40:d2:85:ec:b2:7b:0c:49:9d:
13:f5:e3:df:5e:c8:eb:e1:c6:8f:8c:4c:d0:f5:1f:
84:fc:37:31:42:c7:1f:27:86:39:a2:01:b4:4b:3a:
1f:a7:81:6e:79:c1:65:51:ad:00:dc:8f:23:28:b2:
30:ca:b0:ed:c5:ba:74:7f:c8:db:e3:29:c1:7a:c8:
26:78:9c:4f:f6:0b:7e:e1:01:2b:ed:01:ae:bc:a3:
6b:87:4e:ef:45:a9:17:74:65:6d:57:f8:2b:11:06:
7e:50:0a:74:fc:54:e5:b2:e6:70:00:2f:3d:81:fa:
a3:a9:24:2d:c8:ea:8a:df:94:1c:21:53:7f:01:bf:
d2:98:f4:0a:20:28:1e:2e:37:9c:43:1d:84:23:cc:
74:3b:97:b0:51:15:ca:3a:42:50:96:53:50:7e:c9:
e5:f3:ff:a8:b0:16:cf:b2:af:69:3f:39:cb:b8:7b:
fe:17:a7:68:73:d4:ff:1a:a5:c0:2a:4d:99:fa:d3:
e4:a4:cf:d4:aa:0f:f6:ea:f0:e9:79:4a:b1:49:81:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DB:8B:F5:5F:BF:1A:06:EA:40:67:92:55:5B:DC:6B:61:EF:5E:D1
X509v3 Authority Key Identifier:
keyid:BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.82.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7a:03:b6:5a:e5:06:cc:08:27:71:91:4b:47:a1:47:a6:db:
2b:d2:63:d6:a6:4d:6f:7b:db:b5:13:35:1d:df:d4:f7:5f:1d:
58:e5:83:74:60:52:4a:c3:54:34:f7:14:77:b0:b8:a2:61:7d:
5d:75:bb:cb:26:92:1b:92:2b:5d:a4:dc:a5:f2:10:4e:15:f0:
93:aa:e6:28:8e:96:b0:e6:f0:17:7c:0c:b9:6e:f5:e9:64:e9:
33:62:7a:c5:79:dc:4e:16:56:d6:f0:3c:47:7e:02:61:4a:29:
fd:22:fb:78:f5:10:2a:8a:22:7d:d0:09:70:6f:ec:5c:2d:7e:
97:df:b5:a5:75:01:85:ac:9e:c2:72:30:a0:ae:ad:bc:87:87:
ad:25:ae:76:86:47:de:ef:9c:4b:0c:28:f9:79:7d:41:bc:72:
66:46:fc:4b:99:9c:f7:38:03:07:dc:d6:72:e6:24:df:8b:c5:
07:33:53:52:31:54:a8:2a:03:61:d2:6e:a5:05:47:9d:44:95:
bd:74:b8:8e:52:37:2d:0a:9d:6a:4c:9b:39:dd:83:68:e5:30:
d1:7c:6f:71:d8:15:cf:0c:21:59:f5:99:09:4c:88:2e:77:e1:
7f:c5:23:60:0d:0f:47:79:7b:05:5d:2e:f5:7b:79:ae:4c:fe:
43:e8:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:57 2026 by rpki-client