
$ rpki-client -vvf rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa
File: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (raw, json)
Hash identifier: BWylbxtj1ROm+MVww31ybQOgEWW9jWHft5tLSvCMDwM=
Subject key identifier: D6:C8:44:10:BF:52:5B:8A:08:33:E3:B9:2B:2F:6A:4B:C6:40:C2:65
Certificate issuer: /CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61
Certificate serial: 2EEFEE0828B2BC56A60E8CCAA37A9468E4D3C900
Authority key identifier: 5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa
Signing time: Sun 03 May 2026 02:39:29 +0000
ROA not before: Sun 03 May 2026 02:34:29 +0000
ROA not after: Sun 02 May 2027 02:39:29 +0000
asID: 136873
IP address blocks: 103.105.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl
rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ef:ee:08:28:b2:bc:56:a6:0e:8c:ca:a3:7a:94:68:e4:d3:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61
Validity
Not Before: May 3 02:34:29 2026 GMT
Not After : May 2 02:39:29 2027 GMT
Subject: CN=D6C84410BF525B8A0833E3B92B2F6A4BC640C265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:9a:cf:78:49:d5:b5:d1:42:04:81:29:75:
6c:62:02:6c:55:5c:d2:07:7d:6a:51:62:7f:78:7b:
5b:17:cb:97:bb:c8:24:1e:5f:a0:c4:4c:76:cd:04:
f9:24:20:52:39:4f:d8:cd:ef:9d:a5:3b:b5:06:33:
8b:67:ea:a1:55:fa:52:be:b3:f6:de:f8:f9:94:d5:
b1:bc:65:3e:e2:61:d7:29:bb:0b:c6:6d:2f:fa:f8:
a1:ed:4a:6d:a7:0a:89:d5:c0:99:18:2b:2c:ff:8a:
87:e7:23:78:ba:4f:3e:0c:15:83:d3:bb:86:51:db:
74:a7:0e:ec:82:e7:e9:a5:de:6b:ff:ae:13:71:36:
6e:dc:ba:d5:d9:23:34:a4:4b:54:d0:be:b4:13:41:
34:bd:7f:0c:d8:12:47:93:dd:8e:1d:87:4b:93:75:
32:e1:77:f2:7a:6d:dd:e9:f9:71:2d:7a:2a:9b:10:
74:84:fb:2e:cb:90:f6:d7:a1:ac:6e:0c:13:cf:c8:
ae:1a:ff:0a:af:46:98:ec:18:40:5e:78:cf:1e:9f:
ae:b2:71:e3:ab:81:32:cd:31:80:41:61:2a:81:14:
b8:7e:3f:f9:8b:10:79:c6:c6:36:bc:15:9e:09:96:
e7:a2:d9:bd:c7:d4:18:2f:ee:f2:6e:99:27:ec:87:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C8:44:10:BF:52:5B:8A:08:33:E3:B9:2B:2F:6A:4B:C6:40:C2:65
X509v3 Authority Key Identifier:
keyid:5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:cb:04:2b:29:3d:bc:fe:fe:90:96:38:96:3f:a0:af:b4:df:
54:f3:06:14:ed:b7:c8:23:84:bd:ba:6d:97:38:ef:f7:c0:83:
aa:b2:39:48:d7:6e:88:35:fc:32:b3:61:97:dc:27:63:0d:a9:
a6:f3:55:5a:d6:d0:08:7e:c8:f4:0c:f2:f0:be:de:32:ca:42:
ef:98:54:46:4d:e1:d0:4e:dd:62:86:f4:47:9d:10:b6:de:14:
64:ca:be:86:f1:49:c3:25:d9:00:f2:d2:f0:2c:a0:7a:ba:ff:
29:35:67:bc:8c:ad:11:39:49:10:5f:8b:ec:09:ed:1e:91:50:
ac:fa:89:08:df:e5:76:90:81:93:05:84:71:f1:4f:d6:45:92:
dc:b9:42:46:05:09:c1:a1:8b:98:2b:5a:8c:29:6a:7a:57:ee:
0b:e0:d4:95:27:e1:89:94:bd:71:99:7e:47:92:0e:2b:1f:f9:
08:9e:a2:ea:62:45:b0:2f:ec:77:20:73:fa:28:f7:7b:85:02:
a7:ee:9d:be:bb:90:f4:43:cb:e0:2d:77:e2:5a:11:13:aa:06:
6e:7c:c8:17:7b:35:e7:31:9c:5b:35:e9:db:e9:92:aa:13:38:
b8:47:60:1a:34:29:4c:d6:ec:db:75:f3:e4:52:3f:49:ee:47:
9d:a0:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:29:44 2026 by rpki-client