
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa
File: 3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa (raw, json)
Hash identifier: 9hNKKHOX5nZS01hYRXDjqScWbYWs1NA1/xINDpYkBoU=
Subject key identifier: BF:27:E5:C2:A1:AC:D1:11:6B:54:56:5A:E7:96:1B:95:41:5C:73:39
Certificate issuer: /CN=B28E2055919DC6491CBE15480ABD67D66E672F45
Certificate serial: 2E1FB7E05A777AB73094852C755DE967B495B1EF
Authority key identifier: B2:8E:20:55:91:9D:C6:49:1C:BE:15:48:0A:BD:67:D6:6E:67:2F:45
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa
Signing time: Tue 06 Oct 2026 08:04:28 +0000
ROA not before: Tue 06 Oct 2026 07:59:28 +0000
ROA not after: Tue 05 Oct 2027 08:04:28 +0000
asID: 151600
IP address blocks: 103.203.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.crl
rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 02:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:1f:b7:e0:5a:77:7a:b7:30:94:85:2c:75:5d:e9:67:b4:95:b1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28E2055919DC6491CBE15480ABD67D66E672F45
Validity
Not Before: Oct 6 07:59:28 2026 GMT
Not After : Oct 5 08:04:28 2027 GMT
Subject: CN=BF27E5C2A1ACD1116B54565AE7961B95415C7339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:25:a4:81:d2:41:3c:12:04:f9:05:1d:62:43:
d4:5b:d8:fc:c6:36:26:9f:05:92:6c:81:da:2b:48:
88:0b:de:20:1c:fe:83:97:f7:17:1b:cd:c0:69:71:
d2:0f:51:f2:17:cc:c1:dc:ce:3a:a8:ae:66:dd:a8:
e4:a2:b4:30:94:6e:d5:21:89:0c:5e:c3:b2:f9:60:
f9:c8:e6:da:29:12:ba:c7:7f:7d:92:3e:21:ed:47:
b9:49:1a:ce:6f:9c:82:73:08:2d:2f:df:23:7a:b6:
8f:4c:3d:d3:0e:32:2d:2b:b1:fe:21:d6:63:e8:a4:
40:d4:c4:20:8e:4e:41:a8:b3:b7:c5:4e:a9:a8:b8:
97:50:dd:5f:7d:cb:ff:9c:18:24:f0:70:dd:f8:0c:
66:69:4f:ff:d2:a3:4f:c0:53:27:92:23:dc:13:4c:
a7:c6:07:66:b7:f0:55:9d:70:32:66:4e:e7:c3:76:
41:9b:e1:cd:c3:df:10:3f:10:3f:18:87:3e:9a:dd:
94:b9:6a:8b:30:7a:93:4d:ed:06:1e:7b:10:7e:38:
f8:a4:bf:ba:38:f4:38:4f:24:fa:42:ce:de:74:fd:
52:a6:ba:d6:79:3a:f4:5a:50:65:b7:2b:9d:14:13:
6e:7c:c7:89:34:2b:d2:cb:d2:e2:81:af:36:9b:10:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:27:E5:C2:A1:AC:D1:11:6B:54:56:5A:E7:96:1B:95:41:5C:73:39
X509v3 Authority Key Identifier:
keyid:B2:8E:20:55:91:9D:C6:49:1C:BE:15:48:0A:BD:67:D6:6E:67:2F:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.203.232.0/23
Signature Algorithm: sha256WithRSAEncryption
13:9c:0f:89:5d:5e:d5:8c:30:8a:81:92:84:a9:85:9c:35:f9:
00:43:3a:5e:92:4e:f4:f9:6f:c0:88:d2:a4:0c:50:55:ee:21:
e9:52:41:46:fe:8d:ac:72:a1:de:54:23:e0:c7:da:9d:5a:9b:
55:fd:94:16:4f:c3:db:66:f0:d3:f9:ee:f7:90:b5:89:0a:b1:
53:3a:ed:62:24:c4:ee:10:7a:63:6a:a7:15:e1:a7:79:fe:b4:
b8:e2:6a:24:e1:6f:2e:b5:4a:71:4e:06:78:a9:b8:06:7c:a6:
86:53:8f:2a:67:eb:b3:b4:57:1a:6f:ba:d8:82:66:09:4a:6b:
b1:fa:84:27:a7:75:bc:c5:05:97:53:2a:84:d4:cf:c5:cc:ba:
94:ab:2c:97:48:a1:eb:6b:fb:ce:3f:1a:ab:53:48:6c:3c:46:
bc:0d:61:b4:92:15:0f:ac:51:49:52:ab:44:ac:a1:5d:7c:64:
71:44:45:11:f4:c8:ca:f8:1d:b9:f5:4a:79:d4:3d:13:c2:e8:
01:69:d6:c2:e3:bc:66:a7:02:14:ba:61:e3:ed:0e:04:8f:d4:
bb:17:a4:33:93:89:cf:08:d2:07:db:03:0f:42:4c:1e:f5:8b:
fb:8f:96:52:7f:48:67:b6:3c:08:16:78:42:73:ed:5f:70:6b:
86:bf:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:13 2026 by rpki-client