
$ rpki-client -vvf rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa
File: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (raw, json)
Hash identifier: GMFkIV2sJittLK9WJRbpUUZTvqKbZ67tY6581Ugt0f0=
Subject key identifier: 10:04:2F:6F:59:04:A3:FC:F8:42:54:C6:56:23:DD:0B:DB:16:90:AA
Certificate issuer: /CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E
Certificate serial: 03B7D3C16DE75325AC055D656A27DED218368D20
Authority key identifier: B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa
Signing time: Sun 03 May 2026 02:33:02 +0000
ROA not before: Sun 03 May 2026 02:28:02 +0000
ROA not after: Sun 02 May 2027 02:33:02 +0000
asID: 136121
IP address blocks: 103.154.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl
rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 07:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b7:d3:c1:6d:e7:53:25:ac:05:5d:65:6a:27:de:d2:18:36:8d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E
Validity
Not Before: May 3 02:28:02 2026 GMT
Not After : May 2 02:33:02 2027 GMT
Subject: CN=10042F6F5904A3FCF84254C65623DD0BDB1690AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:23:6c:24:4d:9f:94:00:a8:40:ef:66:bf:
4d:b6:b3:13:de:87:9e:95:f8:b8:ec:ca:8c:73:0c:
75:49:d9:0e:94:2f:06:43:a6:0f:34:5e:3c:1a:69:
c3:c9:ac:ef:59:9f:df:b4:61:b4:cf:22:9e:3c:e9:
0d:c2:9b:62:92:d3:94:a3:a3:e4:cd:3f:30:df:03:
4d:db:cb:0c:85:96:8a:86:58:f7:3e:cc:a2:0b:44:
c6:f0:6a:29:85:75:a9:4c:3b:13:39:ac:73:6f:7d:
1f:ba:c3:a2:c2:25:16:b6:df:15:c4:db:ed:4d:b8:
b4:2e:e6:88:99:36:a7:29:92:0d:58:32:c6:46:81:
d0:8c:b1:d4:ab:2b:1e:9b:c9:4b:b8:8a:03:19:59:
58:68:a9:0c:c8:85:1a:8f:1a:03:34:35:e0:25:4c:
ea:c7:6f:c6:74:59:d5:1d:85:8e:95:d1:42:7d:3e:
13:8c:7c:de:7a:d4:17:8a:e2:6e:07:bd:21:de:f6:
56:75:53:4a:fc:0b:cc:95:08:06:62:fc:0b:e2:2e:
94:6f:09:83:1f:67:20:75:d3:e3:76:45:dc:1f:6d:
a6:cc:77:67:d7:73:c9:c7:ff:91:a2:9d:d1:9e:0e:
f4:75:bc:15:36:ea:5f:be:0f:0d:67:f7:d1:76:3c:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:04:2F:6F:59:04:A3:FC:F8:42:54:C6:56:23:DD:0B:DB:16:90:AA
X509v3 Authority Key Identifier:
keyid:B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.231.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e4:59:9f:25:0e:5d:0d:78:95:86:ed:32:39:54:6c:33:62:
f7:76:76:1b:4b:c4:09:75:bf:bf:b0:de:92:56:5d:42:ab:3b:
9b:70:c3:7b:bf:8b:e7:00:b2:22:32:22:ba:f5:73:ff:6f:5d:
a4:91:12:7d:8c:d6:4a:83:a0:90:7d:c2:52:94:9f:ef:7b:88:
e2:2a:ec:18:f9:98:ed:a0:93:4e:99:bc:9f:09:6d:e2:6b:58:
ba:89:5e:20:22:e4:ea:d3:92:e8:94:6b:88:8c:d1:6c:bf:1a:
f3:7f:8b:c2:9d:cf:f4:2e:9b:13:50:c2:8f:50:91:15:c0:15:
c6:e8:0f:06:8c:4f:0b:bc:27:a0:61:c5:4f:29:03:c8:4e:07:
60:4e:02:92:52:26:a7:fe:37:bf:cb:b2:1b:68:3d:01:4f:86:
18:2b:88:07:c0:08:55:ea:3e:cd:a4:8f:5a:ba:1b:ca:70:1a:
48:b9:b7:56:72:15:4f:7c:7b:28:87:db:24:56:e7:1e:2d:90:
9f:a1:ae:0a:f0:f8:fa:47:35:31:9f:28:3a:52:99:e6:1d:b5:
d5:3f:c4:5e:71:10:9b:00:82:c0:f1:5d:ff:78:8e:de:4a:4b:
eb:af:8d:55:19:a4:bc:61:72:41:c2:e3:c1:bb:32:67:6a:6c:
27:e2:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:54:20 2026 by rpki-client