
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa
File: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (raw, json)
Hash identifier: +B7APtjLCoUGlmZg2IX9a/3yBj6gC7Y5su6xqwGObds=
Subject key identifier: 4D:48:0D:51:88:15:C5:A3:DF:2F:92:1D:9C:19:66:21:BC:DC:F5:3C
Certificate issuer: /CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3
Certificate serial: 7F396F3A2843994184857E93B768397430BA9F80
Authority key identifier: 85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa
Signing time: Sun 03 May 2026 02:13:28 +0000
ROA not before: Sun 03 May 2026 02:08:28 +0000
ROA not after: Sun 02 May 2027 02:13:28 +0000
asID: 138123
IP address blocks: 103.132.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl
rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:39:6f:3a:28:43:99:41:84:85:7e:93:b7:68:39:74:30:ba:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3
Validity
Not Before: May 3 02:08:28 2026 GMT
Not After : May 2 02:13:28 2027 GMT
Subject: CN=4D480D518815C5A3DF2F921D9C196621BCDCF53C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:df:85:34:0a:ba:43:23:38:40:c2:10:58:
55:09:26:5e:1a:32:e7:7e:35:b6:71:21:ed:ad:09:
a1:43:b2:0a:96:3b:45:31:a7:24:7d:ee:0e:14:d3:
e0:e7:83:83:54:d2:3a:ae:96:14:4c:dd:aa:0f:c0:
29:0d:bb:ed:95:7b:d4:b0:97:7e:63:91:6e:45:e4:
c5:ef:64:1b:35:c8:b9:43:20:13:41:c9:b8:c6:8d:
34:4f:7f:01:76:cf:0a:55:39:46:ac:77:38:a0:41:
98:b3:26:11:9c:28:d6:05:a6:ee:16:59:8a:dc:53:
dd:cb:7d:81:63:cc:cb:db:f7:c6:59:7c:6b:ba:75:
63:d0:ec:b7:89:f6:82:1e:76:0b:98:9e:77:9d:2b:
d5:79:e5:df:12:ed:3e:e2:97:7d:f2:72:33:b2:96:
d4:e8:ed:9d:50:2d:72:07:92:2b:e7:15:62:61:e5:
0c:87:a4:ce:3a:b3:fc:82:13:aa:0d:26:b7:cb:80:
11:ec:56:ba:86:5e:6f:a8:80:64:ca:9c:37:72:7a:
14:95:79:55:be:f9:d9:70:8f:45:f6:c8:7f:fe:f3:
ff:9c:5e:cc:f6:9c:d1:97:6a:3c:6d:32:d3:24:3c:
19:f2:aa:bc:5d:2c:01:86:83:d0:1e:4e:dc:3f:de:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:48:0D:51:88:15:C5:A3:DF:2F:92:1D:9C:19:66:21:BC:DC:F5:3C
X509v3 Authority Key Identifier:
keyid:85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.53.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:3c:1c:ed:8a:0a:ff:70:22:38:0d:63:22:db:21:ce:e7:9d:
12:c5:08:f3:07:b5:3c:92:e7:cf:7b:72:c2:64:73:57:30:38:
78:2f:61:33:cf:1e:44:2a:ea:c6:f7:4f:a8:de:73:1c:cf:c1:
cb:01:62:5b:4b:9b:3e:fd:ba:11:42:d2:5f:c9:2b:66:90:9f:
20:e6:0f:09:70:59:56:40:3a:50:b5:05:74:e7:e7:9c:68:69:
46:7d:00:17:25:61:aa:e5:90:63:1f:b6:12:0c:4a:06:95:9c:
3e:d9:83:f3:12:08:16:fe:35:5f:10:d2:b2:4e:3f:8a:b3:15:
17:ea:49:3c:e3:38:11:6e:06:f0:a0:55:1b:7f:06:3f:9b:5d:
8d:61:af:e2:67:c2:1b:ca:77:27:99:f4:9d:c3:f6:c2:e9:3e:
78:28:5a:60:04:e7:85:ef:63:4b:66:f9:86:77:7d:92:6c:73:
fb:d4:f9:aa:9e:a2:d5:40:3d:d1:24:48:79:fd:db:34:33:07:
ae:75:87:b0:e1:06:cd:09:8a:ef:d2:97:2e:e5:53:6b:e6:2f:
7b:d3:97:df:3d:45:4a:b6:fb:47:d8:e5:52:3a:7b:ea:bd:d0:
b5:c4:33:a6:09:81:71:71:c4:4c:76:58:01:b1:df:2e:99:84:
97:31:71:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:26 2026 by rpki-client