
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa
File: 3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa (raw, json)
Hash identifier: 359rkfgNfx4V4hTwp7iUNXWUoA246Siku87oN38U+EE=
Subject key identifier: A0:AE:A6:A4:B7:A0:93:0E:3F:0B:CD:5F:FA:48:CA:F0:D1:51:62:CA
Certificate issuer: /CN=B28E2055919DC6491CBE15480ABD67D66E672F45
Certificate serial: 5A4E6A4B441E6A4943B3A7D67CB666C1DEF5DE0B
Authority key identifier: B2:8E:20:55:91:9D:C6:49:1C:BE:15:48:0A:BD:67:D6:6E:67:2F:45
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa
Signing time: Tue 06 Oct 2026 08:04:57 +0000
ROA not before: Tue 06 Oct 2026 07:59:57 +0000
ROA not after: Tue 05 Oct 2027 08:04:57 +0000
asID: 151600
IP address blocks: 103.203.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.crl
rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 02:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4e:6a:4b:44:1e:6a:49:43:b3:a7:d6:7c:b6:66:c1:de:f5:de:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28E2055919DC6491CBE15480ABD67D66E672F45
Validity
Not Before: Oct 6 07:59:57 2026 GMT
Not After : Oct 5 08:04:57 2027 GMT
Subject: CN=A0AEA6A4B7A0930E3F0BCD5FFA48CAF0D15162CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:14:91:eb:21:ce:9a:47:35:f0:46:41:39:
fb:17:26:27:10:43:c6:62:5e:50:f5:62:3f:fe:c1:
c7:2a:3f:e8:13:e6:cd:0c:5e:10:4a:2d:84:65:7d:
78:ed:c7:8d:0d:62:51:e3:3e:20:01:f0:07:a6:7e:
13:01:4a:cd:9b:5a:fb:97:81:ef:94:04:5d:21:36:
6a:17:7f:cd:ee:00:24:14:d5:b0:ed:02:59:ee:af:
82:2d:05:6c:8e:bd:7d:30:50:7f:f9:e4:24:6f:a3:
b9:16:22:1a:7a:bf:3a:b9:3f:b0:c4:d5:43:3b:d8:
51:a9:7a:fa:e8:2a:9a:fb:1e:40:67:24:e7:f0:58:
88:4b:4e:9f:20:33:39:cf:cc:f2:c4:6d:c8:93:ca:
e8:8d:e1:f3:9b:b6:46:a5:c6:1e:de:3b:e4:87:6d:
38:5d:f1:89:52:46:95:8c:53:13:2d:4a:0d:b8:b5:
b3:fa:4c:99:0c:fa:64:f8:1a:fc:1f:3f:02:23:37:
8f:eb:6c:71:e3:4b:74:24:c9:e5:c5:65:18:2d:d2:
de:ef:91:58:76:b7:45:f1:91:95:08:46:c7:96:42:
21:d9:e5:4e:d6:ef:02:20:eb:00:b0:b3:09:5b:12:
08:e6:8c:1e:aa:10:28:b9:1e:aa:9e:e3:4b:12:8a:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AE:A6:A4:B7:A0:93:0E:3F:0B:CD:5F:FA:48:CA:F0:D1:51:62:CA
X509v3 Authority Key Identifier:
keyid:B2:8E:20:55:91:9D:C6:49:1C:BE:15:48:0A:BD:67:D6:6E:67:2F:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.203.232.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ac:54:b1:fa:90:b5:56:a1:9f:b9:84:3e:5b:a2:52:75:ce:
d8:63:1c:ee:7d:c0:8e:b2:5a:e2:13:ac:15:50:06:3a:43:cd:
0b:1d:44:47:55:b5:41:b8:0a:a5:0e:17:a5:48:a8:9f:e4:ea:
7f:fc:2f:ec:37:0d:5e:2f:ee:47:5d:5c:a5:6f:27:88:62:ad:
fe:12:3c:0f:3c:58:ee:3e:30:a4:9c:05:b2:8c:16:11:13:fd:
31:05:12:d8:ae:b8:5d:4b:36:7e:ce:61:16:7e:74:b8:d3:ac:
83:fb:28:5c:9f:f7:f0:8b:43:33:67:20:12:d9:8d:6c:a7:4f:
57:c0:c3:86:fb:2b:01:cc:ad:fa:d9:f8:05:e2:27:6c:87:a6:
3d:3f:7c:df:a8:54:21:ce:5c:46:ed:8b:dd:4b:9f:ca:9c:39:
b1:94:ee:65:e2:77:8a:fe:75:dd:97:5d:41:35:03:ff:a5:fe:
84:94:f1:cf:51:1b:08:3e:d6:9c:d2:ce:5e:71:15:8e:fe:3c:
b4:46:9d:26:53:cf:71:2b:64:b7:48:2b:d5:b5:90:ac:e7:14:
64:c8:0c:22:a2:59:bb:71:71:b6:12:97:9e:ff:99:5d:13:48:
21:67:8a:b4:f5:4f:60:75:bf:b3:a8:09:72:54:c2:96:22:74:
e5:6e:dc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:12:08 2026 by rpki-client