
$ rpki-client -vvf rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa
File: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (raw, json)
Hash identifier: i83P/tWxpN7+zDb3L4rKQFgIev7DrUCxoADIDDyJE9U=
Subject key identifier: 35:6B:83:0C:86:F7:8E:27:4D:50:D4:0F:AA:F6:DA:F6:18:1E:1F:2A
Certificate issuer: /CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463
Certificate serial: 7EFA9D847B6E739A07364F243ADBABF190C728F3
Authority key identifier: 2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa
Signing time: Sun 03 May 2026 02:24:12 +0000
ROA not before: Sun 03 May 2026 02:19:12 +0000
ROA not after: Sun 02 May 2027 02:24:12 +0000
asID: 150470
IP address blocks: 103.51.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl
rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 13:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:fa:9d:84:7b:6e:73:9a:07:36:4f:24:3a:db:ab:f1:90:c7:28:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A3137EEF77F1AF16F7A12DD6D36944C72E2C463
Validity
Not Before: May 3 02:19:12 2026 GMT
Not After : May 2 02:24:12 2027 GMT
Subject: CN=356B830C86F78E274D50D40FAAF6DAF6181E1F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:13:cf:8c:fd:f4:81:3a:50:2f:b7:73:b9:
9a:3b:13:37:36:dd:fc:7a:04:90:c4:c7:2d:88:99:
2e:db:b4:dc:7a:51:68:c3:96:b0:7a:db:c0:c4:be:
f5:a1:67:0f:3d:69:33:15:95:6c:ea:04:e7:eb:27:
46:e1:08:cb:c3:bd:40:27:34:4a:2e:02:7b:a7:3b:
0f:de:1d:99:ad:6b:40:7c:43:d6:fe:03:3a:3e:25:
39:bf:f7:90:2d:dd:b5:42:ad:73:c0:78:05:93:f2:
d9:9e:9b:f1:1d:55:b5:3c:c1:bd:60:20:8c:8b:c2:
53:63:8d:27:fd:74:55:fb:88:09:5e:18:d5:29:36:
bc:8f:83:16:d9:d0:83:3c:e7:80:62:7c:7e:20:e8:
26:25:42:33:1f:36:9f:2d:6a:32:17:c0:e5:bd:b8:
ce:2f:56:5e:ba:0f:77:29:1e:b9:40:fb:f2:44:f9:
50:4a:46:9f:2f:0a:bf:c8:10:2d:c7:9e:4b:f0:22:
ad:51:1c:1e:d8:ec:4d:7b:b1:0c:10:f8:c4:ea:bd:
d1:68:be:81:5b:90:78:6a:54:87:61:e3:e1:bd:44:
22:b4:74:8e:78:e5:25:3b:bd:6b:e2:21:8d:76:fb:
1e:72:17:fb:c8:13:4b:2d:f3:ff:45:47:33:ab:67:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:83:0C:86:F7:8E:27:4D:50:D4:0F:AA:F6:DA:F6:18:1E:1F:2A
X509v3 Authority Key Identifier:
keyid:2A:31:37:EE:F7:7F:1A:F1:6F:7A:12:DD:6D:36:94:4C:72:E2:C4:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3137EEF77F1AF16F7A12DD6D36944C72E2C463.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.51.123.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b0:2c:f4:59:b5:40:6b:6b:95:02:70:f8:5f:27:bb:14:92:
90:c2:21:8e:2c:95:eb:95:b0:6a:a7:13:26:4e:bd:a1:0b:88:
55:11:25:1a:58:52:77:0b:d6:86:1e:62:ee:98:2f:1e:8a:4f:
85:13:2a:de:36:53:cc:17:f3:e9:17:1a:fc:58:57:fc:7b:47:
71:12:34:0d:ff:71:f0:8f:65:b4:69:4b:54:c2:42:fc:05:27:
50:0b:a6:78:83:19:ba:11:9c:cd:98:06:76:d9:06:2b:7a:32:
1f:57:5c:e4:ab:25:35:0f:3e:8b:0a:51:fb:43:01:5a:2d:54:
9f:41:03:25:87:04:59:29:18:75:6a:bd:b3:7b:e5:ef:55:75:
79:b1:cf:fe:ce:3d:28:d5:ec:56:26:26:90:43:0c:71:7a:aa:
14:11:4e:2e:88:a4:35:d9:da:59:0b:89:e7:0e:28:d1:9c:e6:
85:11:dd:33:f7:2c:28:8b:9d:bd:f8:53:b5:a5:bd:26:68:b9:
2c:21:6b:e0:6a:f7:e4:a7:1a:b2:f5:6a:39:5f:48:17:74:3c:
d4:97:87:d3:3c:3e:8b:af:ff:52:6f:58:ac:70:af:7c:0e:9c:
28:96:3e:57:9a:06:da:d5:df:fc:0c:1e:e0:c1:5c:ba:5c:1b:
10:11:05:5d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfvqdhHtuc5oHNk8kOtur8ZDHKPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEzMTM3RUVGNzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3
MkUyQzQ2MzAeFw0yNjA1MDMwMjE5MTJaFw0yNzA1MDIwMjI0MTJaMDMxMTAvBgNV
BAMTKDM1NkI4MzBDODZGNzhFMjc0RDUwRDQwRkFBRjZEQUY2MTgxRTFGMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVvxPPjP30gTpQL7dzuZo7Ezc2
3fx6BJDExy2ImS7btNx6UWjDlrB628DEvvWhZw89aTMVlWzqBOfrJ0bhCMvDvUAn
NEouAnunOw/eHZmta0B8Q9b+Azo+JTm/95At3bVCrXPAeAWT8tmem/EdVbU8wb1g
IIyLwlNjjSf9dFX7iAleGNUpNryPgxbZ0IM854BifH4g6CYlQjMfNp8tajIXwOW9
uM4vVl66D3cpHrlA+/JE+VBKRp8vCr/IEC3HnkvwIq1RHB7Y7E17sQwQ+MTqvdFo
voFbkHhqVIdh4+G9RCK0dI545SU7vWviIY12+x5yF/vIE0st8/9FRzOrZ+GZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUNWuDDIb3jidNUNQPqvba9hgeHyowHwYDVR0j
BBgwFoAUKjE37vd/GvFvehLdbTaUTHLixGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzI4ZWVjNWItNTMyNC00NDIyLWEzMmYtOWIxZGNlZDM3NTlmLzAvMkEzMTM3RUVG
NzdGMUFGMTZGN0ExMkRENkQzNjk0NEM3MkUyQzQ2My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQTMxMzdFRUY3N0YxQUYxNkY3QTEyREQ2RDM2OTQ0QzcyRTJD
NDYzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMyOGVlYzViLTUzMjQtNDQyMi1h
MzJmLTliMWRjZWQzNzU5Zi8wLzMxMzAzMzJlMzUzMTJlMzEzMjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzN7MA0GCSqG
SIb3DQEBCwUAA4IBAQCcsCz0WbVAa2uVAnD4Xye7FJKQwiGOLJXrlbBqpxMmTr2h
C4hVESUaWFJ3C9aGHmLumC8eik+FEyreNlPMF/PpFxr8WFf8e0dxEjQN/3Hwj2W0
aUtUwkL8BSdQC6Z4gxm6EZzNmAZ22QYrejIfV1zkqyU1Dz6LClH7QwFaLVSfQQMl
hwRZKRh1ar2ze+XvVXV5sc/+zj0o1exWJiaQQwxxeqoUEU4uiKQ12dpZC4nnDijR
nOaFEd0z9ywoi529+FO1pb0maLksIWvgavfkpxqy9Wo5X0gXdDzUl4fTPD6Lr/9S
b1iscK98Dpwolj5Xmgba1d/8DB7gwVy6XBsQEQVd
-----END CERTIFICATE-----
Generated at Tue May 5 18:57:13 2026 by rpki-client