
$ rpki-client -vvf rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa
File: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (raw, json)
Hash identifier: q3EmEpNbHapfK5Arcd9ZblsuZXEZdJPpzKqJnzLo0DY=
Subject key identifier: 96:61:C6:A4:46:23:0F:77:FD:9D:B1:20:6E:1E:EA:CB:16:AB:B3:2E
Certificate issuer: /CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E
Certificate serial: 50BF049B2A444EE5F48B699BDB2842DEDF91F7A1
Authority key identifier: B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa
Signing time: Sun 03 May 2026 02:33:03 +0000
ROA not before: Sun 03 May 2026 02:28:03 +0000
ROA not after: Sun 02 May 2027 02:33:03 +0000
asID: 136121
IP address blocks: 103.154.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl
rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 07:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:bf:04:9b:2a:44:4e:e5:f4:8b:69:9b:db:28:42:de:df:91:f7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E
Validity
Not Before: May 3 02:28:03 2026 GMT
Not After : May 2 02:33:03 2027 GMT
Subject: CN=9661C6A446230F77FD9DB1206E1EEACB16ABB32E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:ff:63:37:2a:e3:30:0e:9f:39:2d:16:bf:
ca:a2:9b:10:a4:c0:74:9a:9d:f9:8a:a2:96:9e:3c:
a4:15:e9:30:bb:68:7d:39:bd:86:87:1d:ad:bf:11:
2e:0a:91:54:30:7e:ae:c8:75:5a:3e:10:b7:d0:8d:
60:99:33:62:e5:ae:e7:3e:1f:fa:eb:d7:19:48:56:
ed:53:13:ed:e5:78:2c:85:16:61:59:ff:a5:19:f1:
f1:11:0b:c2:ed:75:9b:76:cd:a2:ce:29:d0:e6:27:
92:78:b8:d4:b6:47:60:d7:2f:13:b0:31:96:b8:76:
81:ba:d6:91:b8:1d:07:43:58:cf:91:94:bb:8f:89:
24:cd:35:f8:ed:2b:78:37:3d:ad:3b:26:19:69:3c:
b1:fd:b0:b4:2a:cf:52:6f:f2:58:3c:04:0d:9e:7e:
14:52:cf:71:29:d0:da:77:dd:26:f2:37:3c:ea:eb:
20:75:2b:20:bb:dc:25:8e:38:dc:35:54:77:25:79:
7c:8e:53:e7:e3:bc:e9:50:db:56:f7:18:c6:a6:da:
82:07:97:de:0e:c7:28:c4:c5:5c:5d:d2:be:66:34:
66:25:0a:d8:64:3a:40:75:4d:9c:d9:1b:cd:b1:a9:
d3:e4:76:93:04:1e:1f:96:0d:66:d7:db:4a:21:0e:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:61:C6:A4:46:23:0F:77:FD:9D:B1:20:6E:1E:EA:CB:16:AB:B3:2E
X509v3 Authority Key Identifier:
keyid:B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e8:b1:c3:82:50:e2:5b:2c:e4:20:de:ba:7f:c1:fc:1f:8d:
b4:3d:08:bc:c4:43:1d:77:04:64:fd:94:d6:74:19:cc:7c:24:
8d:6d:d7:cd:7a:c9:b6:5e:25:69:84:f5:48:43:19:ce:70:72:
34:a1:c2:51:1b:ab:3b:b0:55:d2:0e:4e:f8:df:36:da:f5:e9:
0f:13:f3:dd:06:7a:14:66:92:4a:e4:0b:ef:d7:1b:f9:57:15:
86:b1:e2:2e:39:11:0f:81:6d:ee:b2:bd:09:bc:f0:a5:cf:ec:
06:4a:fb:37:d2:37:9f:4b:3d:89:b8:f8:11:44:3a:34:7e:ac:
be:d4:d2:4f:bb:54:80:d2:9d:62:11:88:0c:fa:05:56:fc:3f:
3f:c8:2e:78:17:3d:9e:b0:e4:2d:21:29:4c:b8:5d:00:74:d7:
08:d8:5f:03:78:35:d7:b1:4f:65:c4:39:ac:5b:21:e9:e7:c2:
1b:3e:ee:0e:b4:a7:28:e3:eb:cf:45:7d:af:f5:e7:b9:96:5b:
4e:ce:89:89:f3:07:cd:3b:f3:b6:10:43:b1:65:be:45:65:49:
a9:b1:6f:79:09:32:02:80:f4:96:17:ff:a4:cd:c5:8a:71:b3:
16:3f:61:dc:ef:9e:ed:3d:89:51:4a:d7:56:46:aa:93:4b:37:
c3:f3:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:54:20 2026 by rpki-client