
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa
File: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (raw, json)
Hash identifier: +2lXgv7qT46jamYAhQHOD/peUAc/KCPSkZn0WfZ6XNU=
Subject key identifier: 1D:A3:3D:8D:EA:54:9F:1C:C7:FD:E8:F7:EF:80:25:0A:5C:69:61:ED
Certificate issuer: /CN=8557597ED1797691974B01C1D7D410DE0468CB64
Certificate serial: 0DF8BABF830C77BA16F2C5EE31646AA159F4B658
Authority key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa
Signing time: Sun 03 May 2026 02:46:50 +0000
ROA not before: Sun 03 May 2026 02:41:50 +0000
ROA not after: Sun 02 May 2027 02:46:50 +0000
asID: 24312
IP address blocks: 103.195.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 22:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f8:ba:bf:83:0c:77:ba:16:f2:c5:ee:31:64:6a:a1:59:f4:b6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8557597ED1797691974B01C1D7D410DE0468CB64
Validity
Not Before: May 3 02:41:50 2026 GMT
Not After : May 2 02:46:50 2027 GMT
Subject: CN=1DA33D8DEA549F1CC7FDE8F7EF80250A5C6961ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:84:81:13:c5:bf:d6:29:b3:e1:7f:e6:9e:
fa:f1:7d:a6:0b:c7:c4:d6:88:31:4c:b4:0d:52:78:
bd:1e:62:d1:ac:58:55:f8:b7:11:46:25:f9:21:31:
3f:e4:75:63:6a:f6:64:4b:39:64:ad:7e:d3:e6:4c:
6b:28:59:83:e2:54:d6:98:84:ee:69:23:6d:b0:f6:
f9:fb:22:a2:74:dd:dd:b4:07:d4:c0:8b:97:db:56:
a4:94:b1:82:aa:7f:d2:a9:ef:8c:12:1c:99:0c:5f:
93:d5:42:e4:f3:f7:14:be:79:33:29:dc:26:86:48:
9b:3b:e8:5a:07:51:85:af:dc:09:31:79:11:d5:a0:
34:15:63:cd:f3:79:8a:28:d9:68:51:80:f7:77:b5:
95:5f:90:96:0c:1e:2c:af:bf:95:f7:b3:f6:01:7b:
0c:d5:9e:8d:24:48:d5:f3:fa:80:3c:66:f0:3c:4c:
19:f9:04:cc:1a:9c:33:2a:07:41:9e:33:70:35:16:
c8:2d:ba:12:ba:af:df:19:26:52:26:91:77:e5:ad:
d0:dc:86:6f:8f:5b:48:4d:f2:32:99:c6:15:8b:97:
ed:78:b0:cb:48:2a:c2:ac:38:95:79:da:5b:be:38:
2b:02:ac:94:1c:bb:38:cd:38:5b:e3:cb:21:ed:0b:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A3:3D:8D:EA:54:9F:1C:C7:FD:E8:F7:EF:80:25:0A:5C:69:61:ED
X509v3 Authority Key Identifier:
keyid:85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.195.65.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7c:24:11:48:47:15:b5:c6:55:42:b0:f8:f9:ec:61:b9:7a:
9a:3d:14:2e:c4:fa:d8:1e:48:33:84:63:67:2d:82:8c:6e:ea:
b7:4e:bb:04:56:46:7a:8f:0d:ce:3a:b5:d1:6d:f3:3c:4c:ec:
50:ab:96:7a:d9:72:1b:b5:3d:2d:fe:e7:40:6e:d1:1e:60:97:
10:ae:39:5f:c1:22:2c:72:a9:ed:0c:e0:52:5e:b4:21:7f:ad:
19:c5:e1:5f:40:f5:75:29:ed:6d:9b:33:bb:ce:a8:a8:46:4c:
b2:23:22:3b:ed:56:c8:6b:a4:72:d0:23:d7:32:95:6e:31:1e:
c9:55:52:36:db:68:0d:ec:ba:14:0d:19:e2:40:c9:8f:89:ff:
38:16:96:0a:2a:87:ac:6a:d4:24:78:f1:83:86:df:5f:fe:4a:
bc:2d:c3:d0:44:98:b1:58:75:1e:76:d4:d4:3f:64:fe:c9:41:
27:0e:00:10:e3:8a:81:87:52:c8:8d:57:b6:81:14:83:c5:dd:
1a:2c:ae:c6:47:9f:95:0e:b5:36:05:ab:9b:a4:7a:b6:74:a1:
d5:50:3b:ce:d8:3d:87:fb:e1:11:7e:5f:24:aa:a0:df:76:1d:
17:05:e7:e8:be:1d:c9:4a:fa:f2:a0:94:2c:7b:06:94:3a:de:
00:f1:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:13:53 2026 by rpki-client