
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa
File: 3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (raw, json)
Hash identifier: KHtVXWtlCbbhxsDHGtD1PEIjpcpKfmg4Svhc1ZAfVdk=
Subject key identifier: 46:1F:5C:1D:4C:52:81:62:D5:61:CC:EC:13:88:E9:7B:57:08:12:F2
Certificate issuer: /CN=B28E2055919DC6491CBE15480ABD67D66E672F45
Certificate serial: 1B99DDCDFDBA86644ED78DB137793624D31AEC77
Authority key identifier: B2:8E:20:55:91:9D:C6:49:1C:BE:15:48:0A:BD:67:D6:6E:67:2F:45
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa
Signing time: Tue 06 Oct 2026 08:05:23 +0000
ROA not before: Tue 06 Oct 2026 08:00:23 +0000
ROA not after: Tue 05 Oct 2027 08:05:23 +0000
asID: 151600
IP address blocks: 103.203.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.crl
rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 02:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:99:dd:cd:fd:ba:86:64:4e:d7:8d:b1:37:79:36:24:d3:1a:ec:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28E2055919DC6491CBE15480ABD67D66E672F45
Validity
Not Before: Oct 6 08:00:23 2026 GMT
Not After : Oct 5 08:05:23 2027 GMT
Subject: CN=461F5C1D4C528162D561CCEC1388E97B570812F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:c7:b5:c1:c1:a5:50:a7:8e:48:2e:58:1a:
5f:1a:2a:dd:d6:ed:2a:b8:4a:b3:09:aa:e6:2f:4c:
fd:7d:d7:49:3d:da:d3:d6:0b:59:17:de:f5:a1:99:
32:d4:59:c9:05:41:98:24:98:90:d3:0a:bc:c0:54:
a4:6e:89:53:6d:69:c9:6c:88:88:c4:b2:f6:ea:28:
0e:d9:30:e9:19:44:b1:ca:4f:c6:6c:0c:5b:4e:9e:
ae:46:97:16:dd:9a:9a:87:2e:e4:87:fa:b7:f0:8c:
85:a7:eb:82:64:26:75:37:48:03:49:eb:2d:58:48:
3c:1f:1c:89:98:6b:c0:7a:46:ce:c9:4a:40:75:6c:
cc:54:c0:3b:32:5c:f5:66:d5:8b:76:92:67:b0:88:
dd:85:69:4b:a4:83:72:1f:10:68:26:0d:59:84:28:
dc:b1:5d:dd:8d:43:6c:4f:1d:e1:28:70:0a:2c:ef:
87:2c:7f:c7:58:03:39:77:86:fa:0a:f9:75:4b:9b:
99:7e:43:ba:b1:18:93:53:fe:ed:0c:97:d8:80:ae:
79:44:2f:f1:e6:08:0c:23:cc:91:c4:d8:8e:c9:bc:
50:87:39:bb:31:e8:80:a0:1c:d6:a7:a4:52:46:6a:
d7:ce:9d:dc:9c:09:06:89:ab:2c:9f:e0:75:e4:e4:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1F:5C:1D:4C:52:81:62:D5:61:CC:EC:13:88:E9:7B:57:08:12:F2
X509v3 Authority Key Identifier:
keyid:B2:8E:20:55:91:9D:C6:49:1C:BE:15:48:0A:BD:67:D6:6E:67:2F:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/B28E2055919DC6491CBE15480ABD67D66E672F45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B28E2055919DC6491CBE15480ABD67D66E672F45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51df2569-e1f4-4c68-8615-e39dce52abb4/0/3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.203.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:0c:91:dd:86:55:9e:6e:7a:14:8d:b0:24:02:3f:b5:6e:cb:
62:bf:1b:57:1e:7a:35:0e:c0:90:b9:47:6a:bc:e9:7b:f6:d8:
a8:d2:54:80:39:58:63:4e:ee:0d:5b:80:68:d5:ce:6c:b5:1a:
de:3e:99:c8:05:42:c5:45:e9:a0:78:51:9b:50:67:bf:d9:2b:
99:27:28:86:2d:17:cf:61:37:32:0e:81:00:9a:3e:9c:33:ab:
0e:d3:0f:0e:ee:bc:70:9a:1e:f9:fb:91:96:1c:9f:93:e6:0a:
03:85:d6:d9:56:52:91:62:d9:b8:f4:e6:df:6c:a4:ec:72:b9:
ff:d0:77:a4:07:aa:23:4e:1d:6a:29:90:20:b1:82:b9:b8:78:
f6:38:69:cc:3a:f7:08:26:b1:83:be:12:90:1e:b9:45:45:69:
93:21:ed:6a:7e:f5:de:a3:d1:a2:a9:aa:c2:5e:bd:bd:35:84:
74:70:1a:e1:d1:e4:85:f8:b4:0e:77:aa:e6:cc:82:f5:7b:82:
22:01:55:99:16:10:30:dd:e1:ba:c6:fd:2f:7f:2b:cb:2c:d5:
2c:d6:44:e5:f3:1e:bf:2a:38:cd:af:b4:5c:f8:6c:ba:9e:69:
73:a7:a4:33:36:87:6b:dd:07:e4:85:32:92:8c:38:38:73:be:
d1:3e:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:57:57 2026 by rpki-client