
$ rpki-client -vvf rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33352e302f32342d3234203d3e203538333639.roa
File: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: OhU6QiMCF4ACcpqhynxB56U3zBuIn9qNb0BYC0SetEg=
Subject key identifier: 33:14:B0:17:58:0D:79:D5:F7:7D:63:11:D2:65:88:B8:C6:9D:DC:32
Certificate issuer: /CN=885F36F281B0D4CC516E3818323CB9C1F30AF373
Certificate serial: 22ED8BF5677870FA3AA38A40576E7F5D31F6416A
Authority key identifier: 88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33352e302f32342d3234203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:14:56 +0000
ROA not before: Sun 03 May 2026 02:09:56 +0000
ROA not after: Sun 02 May 2027 02:14:56 +0000
asID: 58369
IP address blocks: 103.140.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl
rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ed:8b:f5:67:78:70:fa:3a:a3:8a:40:57:6e:7f:5d:31:f6:41:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885F36F281B0D4CC516E3818323CB9C1F30AF373
Validity
Not Before: May 3 02:09:56 2026 GMT
Not After : May 2 02:14:56 2027 GMT
Subject: CN=3314B017580D79D5F77D6311D26588B8C69DDC32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:8c:87:cb:6a:6a:c1:f9:e3:18:7b:85:4b:
e1:6a:b2:c4:76:ae:7d:cc:47:fa:e1:9b:9e:a8:ec:
22:8e:3a:77:ad:fd:c8:54:11:d5:09:f7:f4:41:42:
a5:d9:d3:89:ac:79:65:81:2e:d4:bc:37:e9:61:0e:
fb:b6:4c:c9:c0:d8:83:41:6a:6b:bc:51:9f:06:54:
b8:a4:8b:c0:ad:3c:7c:29:ba:e6:af:0c:3a:01:ab:
df:6a:ce:7b:27:ea:de:92:13:4e:f1:c3:cd:85:9e:
ee:52:60:f6:6f:fc:e3:42:d1:1c:c0:b3:37:50:e1:
2c:30:c7:43:1b:89:0c:58:a8:1d:83:76:9e:c3:93:
93:b2:8d:ae:87:2e:a8:30:92:fc:24:36:50:9a:7a:
7a:ba:8a:7f:87:92:6b:05:d5:23:e3:3a:35:cc:b8:
af:cb:85:5e:ab:25:8a:7a:76:76:9c:aa:98:41:51:
9b:e1:7f:71:13:01:2d:5a:d5:fc:05:94:07:1c:06:
f7:7d:9c:dd:ef:26:e3:91:ca:69:b3:a1:00:c1:1b:
81:a6:aa:1f:5a:21:47:8d:60:a6:4c:05:c9:e6:4f:
ea:cf:94:54:83:2e:8d:be:39:c5:be:6d:6d:54:02:
d4:9d:44:4a:29:ff:bd:b1:f1:81:97:dd:0b:bc:49:
45:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:14:B0:17:58:0D:79:D5:F7:7D:63:11:D2:65:88:B8:C6:9D:DC:32
X509v3 Authority Key Identifier:
keyid:88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33352e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.35.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e2:a7:ea:1c:3b:02:0a:95:4a:78:cb:9f:92:8c:e1:a2:ae:
6d:a8:2c:d4:0f:b6:e3:d4:bb:1a:53:44:66:ce:48:9a:5d:c8:
5f:a5:c9:90:dc:22:1f:07:ba:ef:ea:91:bc:6c:39:d2:eb:c9:
0f:c2:b2:ed:f6:ea:fc:9f:7a:58:62:b0:79:37:94:bd:fc:85:
2e:04:51:86:3a:9e:ca:fd:b4:b0:6a:ed:c4:3c:2d:a7:ed:e6:
67:3f:8d:e6:cf:b9:07:0a:30:17:52:be:be:6b:69:5f:db:9d:
46:7d:b3:86:f3:07:b8:8d:e9:d9:dd:c4:b9:56:b4:bc:3b:f8:
e3:b4:0d:47:d5:4b:07:ba:aa:80:3e:59:f3:bc:f7:d7:d8:bf:
a2:91:dd:a3:b6:3b:7d:60:90:a6:60:87:9c:b7:df:c2:c6:cc:
09:53:2e:8b:c3:7c:6c:ab:a4:2c:08:d8:d3:0d:6d:76:25:b9:
55:b0:4c:b5:8e:fb:43:54:b0:02:5e:d8:20:61:86:4c:b9:b7:
53:0a:fd:2f:90:b0:f3:15:f4:fd:3b:b9:3f:14:18:69:5d:17:
f3:84:9c:cd:d3:b4:2b:32:8c:ba:54:83:82:8e:b7:94:55:24:
d8:3d:c5:4f:4c:7d:6e:1b:1e:42:84:6e:9e:6d:2b:90:8e:f9:
4a:7f:49:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:10 2026 by rpki-client