
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa
File: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (raw, json)
Hash identifier: yFzJDaOR3ALC9R9lcLlFWOcSjWJQYhCD//08bWWKhcU=
Subject key identifier: 96:82:4C:CF:86:22:24:4D:BE:50:0D:D4:67:1E:50:28:D5:E0:30:99
Certificate issuer: /CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1
Certificate serial: 0D1404AAE959DFC2101CFFC82DF060813F5B2FF0
Authority key identifier: 5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa
Signing time: Sun 03 May 2026 03:16:55 +0000
ROA not before: Sun 03 May 2026 03:11:55 +0000
ROA not after: Sun 02 May 2027 03:16:55 +0000
asID: 139988
IP address blocks: 103.148.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl
rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:14:04:aa:e9:59:df:c2:10:1c:ff:c8:2d:f0:60:81:3f:5b:2f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1
Validity
Not Before: May 3 03:11:55 2026 GMT
Not After : May 2 03:16:55 2027 GMT
Subject: CN=96824CCF8622244DBE500DD4671E5028D5E03099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:5c:07:db:b0:f3:87:62:81:20:df:80:9e:
03:cb:2e:93:eb:f6:1a:a0:f3:43:44:6d:47:0f:68:
6b:72:49:2c:f3:22:b4:95:e2:68:14:be:56:ef:25:
58:db:95:06:d4:0f:d6:8c:f4:72:a4:0c:90:6e:d1:
0c:a5:a7:11:49:3a:f8:6b:5a:ac:ec:a7:ef:34:84:
8b:83:3f:51:da:9d:03:84:f2:d6:4d:7a:00:38:98:
31:72:2a:10:46:12:a1:6e:a0:79:e0:78:e6:4d:82:
8a:6e:b4:06:b3:c6:f4:ed:00:4e:73:17:80:48:ef:
00:8c:17:a0:2d:c2:26:d4:4e:ca:a5:d0:52:95:62:
46:55:43:98:2b:25:9d:0f:99:f5:54:d0:4d:47:a3:
2b:4a:dc:c6:0f:7b:ec:0d:16:7d:22:1e:3e:24:9b:
f9:16:6e:e5:92:4d:4d:50:4d:b6:18:2a:3e:7c:aa:
2a:ac:66:5d:5f:0f:1f:a1:fb:ea:49:19:75:b4:9f:
b4:8f:4b:0d:b2:4f:81:6d:33:a9:c4:52:25:fb:66:
8e:cb:0f:72:b5:a0:98:52:bf:0c:c4:7c:ba:98:d8:
d5:37:73:2d:0b:88:b4:6f:22:20:55:9e:b6:77:b8:
3c:51:11:4e:e8:53:b0:d9:03:c1:22:6a:ad:d8:30:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:82:4C:CF:86:22:24:4D:BE:50:0D:D4:67:1E:50:28:D5:E0:30:99
X509v3 Authority Key Identifier:
keyid:5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.100.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:90:7e:f0:33:f7:52:1f:24:6f:4a:12:39:77:c6:64:03:7b:
07:a6:c4:db:e3:1f:33:bc:fe:22:09:42:96:1c:1a:11:73:c8:
62:52:58:3e:f7:5e:7c:be:8d:57:cb:b1:c0:68:95:60:82:fa:
c1:84:e4:53:2b:a9:88:41:b7:f2:67:1e:b2:bd:d4:48:81:76:
90:ec:07:80:91:0b:75:8d:a9:f8:e7:95:ec:c7:a5:50:d7:7e:
62:be:f3:85:a9:2d:b1:01:f9:20:fc:54:d7:8f:5b:a6:d4:64:
97:c9:ea:ad:c4:e0:92:1f:d8:b6:08:72:10:7d:8e:3f:68:0f:
ab:28:fb:4b:b5:eb:96:38:22:c3:ea:57:2d:94:56:b0:c1:bc:
35:23:67:ee:5e:f0:b0:cf:31:c1:9b:07:b3:e5:40:af:a8:25:
1c:1f:29:e1:44:cb:95:9d:6b:77:6d:a1:c2:6d:e1:25:e6:f8:
9d:53:ec:96:f6:3f:bc:eb:06:c8:22:f1:41:fe:85:ce:fe:e9:
50:e4:22:fb:bb:e1:9f:83:f5:43:2e:3e:e3:3f:ec:ff:ef:68:
87:64:82:74:cb:49:95:fb:de:9e:47:b4:7b:e4:ca:84:f7:7d:
02:39:ee:05:b6:1c:e9:97:1b:80:89:c3:8c:01:a4:5a:99:1a:
b2:d0:97:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:07 2026 by rpki-client