
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa
File: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier: G+PtaUwDO5r5hMHQJK1W4RibPlp9/hiGTwpahVF+du8=
Subject key identifier: 31:4A:02:3E:3A:9D:6F:73:60:C8:25:11:D5:12:47:03:C4:76:62:2B
Certificate issuer: /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial: 26931B7642C03F7FF35FD4349AD52648BB94B671
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa
Signing time: Sun 03 May 2026 02:57:51 +0000
ROA not before: Sun 03 May 2026 02:52:51 +0000
ROA not after: Sun 02 May 2027 02:57:51 +0000
asID: 59282
IP address blocks: 103.228.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 12:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:93:1b:76:42:c0:3f:7f:f3:5f:d4:34:9a:d5:26:48:bb:94:b6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Validity
Not Before: May 3 02:52:51 2026 GMT
Not After : May 2 02:57:51 2027 GMT
Subject: CN=314A023E3A9D6F7360C82511D5124703C476622B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:64:64:51:94:85:8c:3b:0d:41:3d:f5:b1:
bb:5a:a7:b9:c9:13:c4:7f:25:f0:68:08:da:10:70:
cf:ff:8e:2f:69:d5:59:93:8a:5c:2a:83:50:95:46:
57:7e:e1:fe:93:f5:a8:40:41:72:05:57:cc:06:75:
55:a3:19:a6:1d:ab:17:97:d9:f2:c7:f4:58:99:ed:
46:64:ec:d2:0e:6c:48:ed:5e:bf:f6:f0:ae:a9:9a:
28:fc:68:3f:2d:e7:57:eb:56:71:f6:13:1f:c3:c1:
97:f3:21:d9:71:06:35:57:0b:e6:cb:fb:44:56:d9:
93:cc:71:23:47:14:30:87:10:13:7f:24:a9:21:e0:
97:73:6e:b3:47:65:9a:1b:1f:64:ac:bd:1e:41:1e:
84:80:27:91:8c:7a:7a:7d:ba:f3:df:7f:9a:91:05:
e0:57:56:8a:22:6e:3a:6f:1c:dd:a5:9e:8f:4b:ea:
bf:67:b7:a7:4c:09:43:43:d6:b0:70:75:04:64:c9:
c9:e7:e9:9b:32:9d:5a:13:38:47:ba:ca:5c:57:ba:
b4:56:4f:ba:52:5c:f0:4e:9e:3b:f9:e5:09:f7:d2:
ac:ac:0f:26:e3:e2:ea:f1:75:59:b7:db:5b:1e:8e:
85:85:7c:62:dc:b1:22:b6:ab:82:7a:74:62:29:25:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4A:02:3E:3A:9D:6F:73:60:C8:25:11:D5:12:47:03:C4:76:62:2B
X509v3 Authority Key Identifier:
keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.228.245.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c3:ab:ab:ab:64:2f:71:5b:22:b5:44:85:80:74:69:1f:52:
33:1b:70:04:cf:08:ad:b3:29:d8:4f:3c:0d:fa:0b:d2:2c:48:
4e:96:f4:38:69:a8:ec:52:03:14:68:89:d1:9b:66:a0:5d:5c:
50:e9:59:1c:51:ff:04:b7:aa:9c:04:9a:55:fa:46:86:bd:1a:
e1:ee:a1:45:d0:b1:3e:a4:08:5c:0c:48:03:d5:9d:f4:d5:52:
30:f5:fb:40:58:ff:e0:9e:28:4c:8b:cd:bf:5e:e2:1d:dd:58:
5b:12:59:59:ba:74:e3:9f:5f:25:4d:2c:43:2a:3c:7d:51:76:
1d:75:51:60:69:21:e6:ec:c7:04:64:3b:fa:7e:ff:03:96:26:
7b:1d:a5:36:8d:19:fa:eb:64:a3:66:bb:60:7a:50:3c:0a:1c:
7b:05:56:98:e1:f5:8a:56:75:80:31:5a:3d:fb:58:83:58:d3:
5a:7e:94:84:0d:88:2b:d2:7f:0e:4c:6f:bc:35:8b:1d:56:a6:
98:ea:5c:93:d2:81:50:0c:9a:22:37:dc:3a:4e:70:f9:20:23:
87:38:4e:c0:1c:ae:a5:06:ef:4d:ec:e6:0d:8d:77:43:4f:f7:
95:bc:e0:2f:8b:cc:3a:39:2b:b8:03:57:81:f9:2e:df:74:dc:
73:b3:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:06:40 2026 by rpki-client