
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa
File: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (raw, json)
Hash identifier: s667PtqoW0WKaw5tY6mNJ2X7kSPQ3a5nNNVlKXVkn2g=
Subject key identifier: 89:79:C1:B9:80:F6:65:38:21:27:88:83:FF:30:6F:F2:C6:CC:44:8A
Certificate issuer: /CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3
Certificate serial: 6DE51E24719F34A1D763BF81C4E5A0845A447631
Authority key identifier: 85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa
Signing time: Sun 03 May 2026 02:13:27 +0000
ROA not before: Sun 03 May 2026 02:08:27 +0000
ROA not after: Sun 02 May 2027 02:13:27 +0000
asID: 138123
IP address blocks: 103.132.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl
rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e5:1e:24:71:9f:34:a1:d7:63:bf:81:c4:e5:a0:84:5a:44:76:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3
Validity
Not Before: May 3 02:08:27 2026 GMT
Not After : May 2 02:13:27 2027 GMT
Subject: CN=8979C1B980F6653821278883FF306FF2C6CC448A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:52:bb:33:05:a0:6d:b5:c1:30:45:9d:21:
6a:b7:8a:93:57:82:67:19:6d:59:e9:db:4e:b9:77:
fc:fb:fd:bc:88:d5:e5:06:aa:60:f7:97:30:b7:63:
05:db:bc:90:9a:b8:d8:68:6b:c2:90:e8:1b:2b:55:
13:0e:de:d0:fc:eb:be:5d:e2:59:de:7b:73:02:8a:
50:fd:fd:72:10:cc:93:ca:bf:bf:e5:49:c3:47:11:
87:31:12:09:a1:53:b3:47:58:17:e1:c7:30:3c:87:
ba:a9:8c:aa:ec:a8:e5:1b:14:26:16:6c:7c:63:5e:
4c:bd:a8:d6:c1:4c:44:2f:d7:0e:ba:55:ef:30:7c:
eb:e9:9d:79:c9:74:db:35:b1:0e:2c:ea:72:c0:a4:
e7:ff:7c:8f:55:ab:46:a7:35:ea:2f:ea:b8:61:43:
4c:b5:c8:3b:66:e4:c2:cc:f0:02:39:ec:69:2b:76:
35:5f:db:de:89:ed:13:0e:14:73:67:16:48:6e:01:
b5:57:50:05:d3:79:08:39:d8:dc:99:b4:e5:5d:d9:
2a:0f:0e:84:12:9d:cf:0e:db:59:f9:69:c7:b2:3c:
c2:85:8f:9a:55:40:ec:fa:0a:ff:3e:8a:18:d6:ef:
82:65:17:6b:db:62:51:42:5d:dc:bd:eb:ac:1e:11:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:79:C1:B9:80:F6:65:38:21:27:88:83:FF:30:6F:F2:C6:CC:44:8A
X509v3 Authority Key Identifier:
keyid:85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.52.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:a7:c7:7d:92:ce:04:06:75:28:86:14:fa:57:55:78:c4:df:
e9:2f:48:50:1b:a9:d5:29:ba:0d:30:ff:30:92:78:cc:b5:7c:
05:1d:ca:90:89:24:d2:d3:52:5a:68:82:94:82:b0:e6:05:da:
cc:e2:2d:3d:59:cd:23:ab:50:e3:56:1f:83:5c:ce:37:6f:7b:
8b:42:47:e2:40:f5:99:76:dc:e4:9f:61:e0:a8:dc:a9:c8:e6:
bf:c9:e8:cf:49:a9:b8:6d:34:44:22:81:21:29:54:69:0a:d1:
c8:a5:f8:a6:da:21:0c:b5:bd:a7:0e:34:8c:23:2f:b2:7f:a5:
32:b6:7a:79:6f:f5:4b:e1:02:52:31:79:03:8e:b2:7e:05:92:
31:07:0f:52:ee:50:d9:5a:14:b3:dd:28:61:e2:65:bb:f1:f1:
6d:92:d8:ed:02:fe:c2:f3:f3:ae:bb:08:e9:7a:9b:ac:8e:11:
98:d8:8a:f1:41:4b:3c:d7:0e:a7:86:16:02:2b:cc:bb:d5:75:
b0:29:3e:e5:b2:9b:85:89:e9:69:4b:42:08:49:02:c4:9a:e5:
9e:8f:f2:38:21:a8:64:8d:62:09:28:c1:a8:44:f5:48:70:95:
7b:a5:9d:0d:08:d8:e7:71:ac:39:04:56:77:69:8d:4c:0a:77:
d1:4f:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:46 2026 by rpki-client