
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/3130332e3134322e38382e302f32342d3234203d3e20313339333638.roa
File: 3130332e3134322e38382e302f32342d3234203d3e20313339333638.roa (raw, json)
Hash identifier: tQktaum4KycUd3NVfEb+S8gEbr6uIhyBlDiFsL9oiH8=
Subject key identifier: 8B:23:CD:D0:32:42:85:CE:41:9B:AD:FE:20:60:96:44:16:F6:BF:02
Certificate issuer: /CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564
Certificate serial: 59601076A661F9D4B1792AC929366BDC18928A70
Authority key identifier: 5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/3130332e3134322e38382e302f32342d3234203d3e20313339333638.roa
Signing time: Sun 03 May 2026 03:15:49 +0000
ROA not before: Sun 03 May 2026 03:10:49 +0000
ROA not after: Sun 02 May 2027 03:15:49 +0000
asID: 139368
IP address blocks: 103.142.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl
rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:60:10:76:a6:61:f9:d4:b1:79:2a:c9:29:36:6b:dc:18:92:8a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564
Validity
Not Before: May 3 03:10:49 2026 GMT
Not After : May 2 03:15:49 2027 GMT
Subject: CN=8B23CDD0324285CE419BADFE2060964416F6BF02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:16:88:e0:aa:de:b3:ff:ee:6c:82:59:44:
c5:a9:d2:00:8f:ea:03:bd:3a:55:01:10:8c:8d:e6:
e8:af:21:bf:3d:63:c8:e1:32:88:2f:a9:e5:29:39:
cb:93:36:53:a2:25:ce:41:66:2a:ad:17:3f:fc:c9:
87:61:ce:12:1e:ef:79:5b:d0:c8:7c:64:0a:bf:fb:
70:a5:99:ef:d6:5f:ed:ed:db:a0:89:8f:10:14:6b:
a4:6a:e0:8a:21:e5:bf:d9:97:39:00:11:61:1c:ee:
dd:58:10:eb:ab:8c:d4:c0:d8:92:7c:64:43:a4:77:
68:99:90:8a:55:da:f5:35:c0:97:86:d3:17:61:80:
5b:09:b6:45:9b:bb:d2:2f:08:0e:56:f3:62:56:84:
0a:fb:93:51:f9:dd:11:89:49:88:5a:fd:3b:af:b9:
77:dd:73:f1:21:10:e5:9c:36:43:8b:cf:14:97:66:
77:d6:c0:6b:5a:50:fb:65:78:75:88:fd:96:00:8b:
af:4f:55:d2:ab:b0:83:45:01:e3:c6:9e:63:74:db:
e9:a4:be:4c:9a:65:a8:af:d6:ab:48:19:a5:7c:c2:
6a:f6:94:80:c7:ee:5f:b1:19:1e:d4:26:dd:28:df:
ec:7e:67:51:be:0d:22:35:c1:14:48:7e:22:c1:f0:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:CD:D0:32:42:85:CE:41:9B:AD:FE:20:60:96:44:16:F6:BF:02
X509v3 Authority Key Identifier:
keyid:5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/3130332e3134322e38382e302f32342d3234203d3e20313339333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.142.88.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:31:fe:72:66:87:9b:2c:d4:1d:87:34:20:1c:69:fc:92:11:
53:8e:8e:27:df:d3:b0:c1:40:21:b9:da:67:a6:09:b7:ef:a5:
47:b5:32:d0:ea:31:25:67:2f:be:79:f8:27:41:df:30:fa:b8:
b3:43:2c:59:da:ff:64:48:4a:b8:03:2f:ea:41:6d:b5:ec:85:
a5:6d:8b:91:c8:3c:c3:27:0c:fd:08:40:5f:64:36:19:bb:cc:
bf:af:b3:3e:52:59:ca:83:ae:99:56:f2:8e:a8:d5:13:98:e8:
f7:73:49:ac:08:f5:a6:f1:b6:38:de:1a:93:bc:db:0f:a2:40:
fa:58:9e:e6:55:e4:93:ef:f4:0f:86:f4:61:c1:04:70:29:17:
e3:00:f9:07:15:8a:68:41:81:aa:a3:f0:98:da:b0:92:47:1b:
a5:75:11:27:e5:3a:7c:7c:a7:51:3f:5e:ce:63:86:c7:87:21:
76:7b:e4:66:20:cc:b3:4a:39:ca:57:e2:be:85:40:e3:54:13:
46:95:50:cf:07:86:1a:c5:c9:b9:4a:68:0b:2f:d1:1a:03:2b:
14:d0:6c:2a:85:e7:f9:66:53:35:d7:30:90:a0:ee:c6:b7:69:
64:1f:77:d0:3e:0f:f9:14:4b:5d:f3:1a:cd:b8:66:e5:c9:77:
9b:19:68:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:37:38 2026 by rpki-client