
$ rpki-client -vvf rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa
File: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier: rh0sBxj81btPPODPu5P0eEgRgLm8ewf9kn1GsH7FYgE=
Subject key identifier: D0:38:CA:59:96:C2:53:FF:1E:F5:F3:CD:30:12:6F:C2:E5:C2:B2:11
Certificate issuer: /CN=064B9E28C1AE598921210EB5E94CAE9E89533533
Certificate serial: 77C800744119B43F5A1FC8BCB35CF48F337A5BFA
Authority key identifier: 06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa
Signing time: Sun 03 May 2026 02:14:35 +0000
ROA not before: Sun 03 May 2026 02:09:35 +0000
ROA not after: Sun 02 May 2027 02:14:35 +0000
asID: 38320
IP address blocks: 103.158.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl
rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c8:00:74:41:19:b4:3f:5a:1f:c8:bc:b3:5c:f4:8f:33:7a:5b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064B9E28C1AE598921210EB5E94CAE9E89533533
Validity
Not Before: May 3 02:09:35 2026 GMT
Not After : May 2 02:14:35 2027 GMT
Subject: CN=D038CA5996C253FF1EF5F3CD30126FC2E5C2B211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:d7:d0:c8:0b:86:fc:a0:46:ff:ed:ad:0d:
34:f0:0d:a7:ee:f5:e2:85:b8:75:bc:60:31:f1:39:
54:91:d5:d6:21:74:56:82:93:53:84:13:01:65:5d:
e8:35:c2:57:fc:05:e7:e8:ea:69:13:5c:71:68:0d:
1b:4e:02:66:23:91:64:b6:07:26:5e:5d:8a:f7:9f:
3c:89:3f:38:85:b0:c1:05:14:14:a4:86:a8:52:87:
3c:99:29:a2:f4:ae:26:bd:44:b3:f0:20:14:67:37:
b3:c3:7e:3c:af:03:4a:6b:94:e1:12:47:3d:86:09:
e3:03:e5:fc:4f:d3:a6:7a:67:d5:70:1d:c7:05:cf:
6f:25:ce:c2:40:94:9a:87:43:bc:24:64:c1:93:bb:
fe:3c:30:37:96:10:2e:3d:8c:0e:6e:36:97:ae:b4:
ca:72:f9:fc:e7:25:e6:6c:4e:04:0d:bd:07:f0:87:
ee:99:42:2c:18:bc:c9:46:1f:8e:d2:1e:47:f9:11:
b4:92:99:d2:b0:44:9a:6f:9e:67:46:cb:95:33:a1:
cf:0c:36:a9:8f:31:1e:d7:73:bc:2a:f0:65:f7:44:
9f:2d:dd:5e:21:51:37:bc:16:a9:15:e1:e7:4e:46:
94:56:d5:1c:18:e7:c6:60:83:65:ea:b8:e3:de:b7:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:CA:59:96:C2:53:FF:1E:F5:F3:CD:30:12:6F:C2:E5:C2:B2:11
X509v3 Authority Key Identifier:
keyid:06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.128.0/23
Signature Algorithm: sha256WithRSAEncryption
81:24:9e:3b:99:6d:9f:df:06:69:1a:44:2a:57:b6:e2:c8:c4:
87:be:f7:e5:81:53:87:23:b6:ee:be:36:fd:71:35:47:bb:0f:
d8:f9:10:de:22:bb:42:68:6c:af:31:7e:d9:f2:9c:08:93:33:
55:2c:1b:83:b6:6a:32:6f:17:c7:3a:55:ca:52:31:ac:6e:8d:
a9:74:19:ac:b5:67:4f:bb:ca:94:65:98:cf:24:ee:48:c2:a5:
14:16:21:0b:30:53:a6:18:fb:94:82:da:40:d9:53:25:e3:e1:
b9:b7:84:8a:9f:c2:59:c7:a3:5c:3d:be:be:36:f6:76:b0:49:
4f:d5:fd:93:b5:4c:97:37:b6:3b:77:8d:e4:e4:92:2d:20:e9:
f1:0a:1d:24:96:f4:69:94:d3:3a:28:79:f3:81:12:d1:14:9d:
0c:ac:0c:81:94:59:e6:76:3e:76:ec:56:2f:2c:31:c7:9b:48:
df:e1:f0:95:bf:7d:39:4b:3d:9f:07:ec:e2:84:cf:c7:77:44:
04:d9:97:2b:71:11:86:50:f2:7e:cd:e8:2a:de:22:74:c6:4a:
25:3c:1d:5b:81:16:e2:6d:e8:d1:ea:7c:a5:3d:3a:54:7c:36:
82:fd:09:81:01:cc:a9:30:72:f5:c8:1f:18:5c:2d:74:64:e0:
55:4f:42:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:07 2026 by rpki-client