
$ rpki-client -vvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa
File: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (raw, json)
Hash identifier: 6oOlCIxGneY8XQmzJaSA+rXwKrW4Xz1wcUf44XfKjgk=
Subject key identifier: 2C:CC:43:D8:23:55:39:76:27:D1:54:CC:60:A8:D8:76:2F:2D:D5:C7
Certificate issuer: /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463
Certificate serial: 107FD0086B067454B13B251BBE3F6A77609C0080
Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa
Signing time: Sun 03 May 2026 02:24:12 +0000
ROA not before: Sun 03 May 2026 02:19:12 +0000
ROA not after: Sun 02 May 2027 02:24:12 +0000
asID: 150470
IP address blocks: 103.51.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl
rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 13:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:7f:d0:08:6b:06:74:54:b1:3b:25:1b:be:3f:6a:77:60:9c:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463
Validity
Not Before: May 3 02:19:12 2026 GMT
Not After : May 2 02:24:12 2027 GMT
Subject: CN=2CCC43D82355397627D154CC60A8D8762F2DD5C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:6b:3d:37:90:d7:54:6e:b0:bd:bb:1f:ab:
64:d1:85:04:8f:56:e2:0b:ec:fd:e6:56:25:d8:f8:
7d:2c:a1:d6:6f:72:96:96:d3:47:46:2c:d5:95:a4:
55:72:03:d9:09:40:90:4b:73:d6:07:f2:f8:a8:f7:
01:9d:fd:14:45:69:e3:69:fc:23:f4:0a:9e:d4:59:
f1:27:96:bf:cb:ad:f9:2a:c7:de:46:00:b4:22:05:
b2:b8:f8:99:2c:03:5b:de:35:0f:35:8b:69:a8:d4:
bf:f1:6b:cd:07:4c:20:31:4f:53:9e:e5:a9:8c:d3:
b3:7a:8b:e5:5c:53:0a:aa:51:93:aa:db:29:0b:fd:
0b:a7:aa:db:d8:c1:e9:33:c7:46:c8:5c:46:9f:fc:
eb:67:aa:ce:0b:24:65:9c:06:ae:5d:d3:be:1b:50:
ed:28:56:84:45:57:38:21:83:6e:d4:88:ed:e7:8c:
bc:0d:23:9d:fe:8a:08:84:84:99:bc:96:d0:de:eb:
05:99:e9:20:a8:68:22:d4:63:91:4c:89:29:a4:7d:
15:a5:b3:fc:ca:79:53:6a:f6:c7:d0:8c:f2:fa:84:
84:ff:35:f5:e5:d3:ac:12:88:d1:c4:9e:d0:b8:25:
d9:2e:ff:94:aa:3e:0f:16:ed:01:69:27:f4:07:95:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:43:D8:23:55:39:76:27:D1:54:CC:60:A8:D8:76:2F:2D:D5:C7
X509v3 Authority Key Identifier:
keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.51.122.0/24
Signature Algorithm: sha256WithRSAEncryption
54:89:84:79:cb:e7:fb:07:41:b2:1d:7b:af:04:bb:ed:51:1b:
cd:de:11:42:2e:a8:d5:f4:4e:85:ee:33:8c:54:6e:b7:7c:68:
ea:51:60:87:98:ac:0b:33:f0:8d:e8:45:41:38:8b:f3:82:06:
39:01:4a:2a:4b:5a:16:da:1d:04:75:fa:d1:fc:64:92:ee:53:
68:1e:1d:a1:29:ab:7c:49:e1:8e:0b:9e:ac:7b:b1:93:cc:d3:
1b:b5:bf:34:20:50:e7:4e:a8:15:51:f2:3a:29:0f:a0:48:cb:
3d:bb:c8:ae:28:4f:96:32:8e:6f:e3:19:1d:8e:34:d4:84:e4:
0e:f9:a7:49:da:9a:90:07:c1:ad:9a:0c:71:a1:8c:02:9a:7f:
90:5c:7a:f5:5f:4f:4c:ee:24:dd:c2:1a:1c:8d:18:8d:38:35:
ba:28:7b:a2:f7:cc:84:78:e6:af:18:cd:6b:6d:4b:98:c7:c6:
79:3b:97:f8:57:aa:25:2c:7e:1c:20:2c:7c:a1:1f:9a:cd:44:
af:41:2c:73:2a:fe:e0:7c:36:3a:c2:28:c0:1e:a0:00:2d:3b:
99:67:45:60:e9:9b:66:d6:c7:14:c5:f5:9e:9b:77:df:4b:45:
67:6d:94:9b:36:f3:2e:59:a4:bb:5d:33:01:28:f6:84:69:fd:
75:a2:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 18:57:13 2026 by rpki-client