
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35362e302f32322d3232203d3e20313332363337.roa
File: 3130332e31392e35362e302f32322d3232203d3e20313332363337.roa (raw, json)
Hash identifier: JZgdRbJu890tbXcbh9Oxv/c/hndsIuQkwCj004yU0ZY=
Subject key identifier: 65:53:36:F8:23:F8:96:09:49:DF:4A:F1:53:14:1F:C7:19:A5:5E:CE
Certificate issuer: /CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835
Certificate serial: 45E2C8DD6EE0478A4EBEA2D24ADD8273DB7D8D6C
Authority key identifier: 2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35362e302f32322d3232203d3e20313332363337.roa
Signing time: Sun 03 May 2026 02:22:33 +0000
ROA not before: Sun 03 May 2026 02:17:33 +0000
ROA not after: Sun 02 May 2027 02:22:33 +0000
asID: 132637
IP address blocks: 103.19.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl
rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e2:c8:dd:6e:e0:47:8a:4e:be:a2:d2:4a:dd:82:73:db:7d:8d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835
Validity
Not Before: May 3 02:17:33 2026 GMT
Not After : May 2 02:22:33 2027 GMT
Subject: CN=655336F823F8960949DF4AF153141FC719A55ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:40:60:36:2f:cd:ff:16:04:83:ad:38:00:
de:77:00:1f:c7:1d:bf:6d:4e:f5:5d:78:dd:92:d5:
a0:aa:7b:70:16:7a:43:43:96:4a:92:75:dc:c0:d5:
18:6e:8c:fe:b3:99:38:91:48:b7:86:18:29:6e:b4:
16:f7:8e:ee:04:f5:67:e2:9c:db:70:35:24:cd:ca:
a6:eb:23:25:e1:01:3e:24:b3:58:4c:92:cc:da:ab:
8d:30:f3:b4:3e:6b:19:82:09:47:9f:92:19:32:ab:
b5:f7:af:fe:a9:61:da:74:19:57:05:ab:50:2d:6c:
96:8d:d9:6b:4c:56:e5:22:d8:a3:c7:95:e1:70:31:
2d:98:e8:59:49:de:df:7b:c0:df:33:f9:11:b8:37:
12:e7:ec:4a:e3:7d:43:33:86:80:3b:6c:3b:80:ba:
66:e2:9d:05:ff:92:63:73:0b:da:20:5d:e7:ad:96:
d4:ac:da:54:e4:d7:63:88:6d:ae:ad:4c:e8:58:6b:
47:a1:49:19:99:8f:82:fa:8a:ed:fb:f9:5c:f2:a8:
c5:92:2f:ac:d1:3c:09:96:01:44:76:ef:3f:79:87:
16:e4:38:56:04:c7:d0:b2:20:3a:5f:2b:79:88:6e:
c3:81:e4:e5:c1:14:af:e3:46:86:f1:76:29:2b:61:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:53:36:F8:23:F8:96:09:49:DF:4A:F1:53:14:1F:C7:19:A5:5E:CE
X509v3 Authority Key Identifier:
keyid:2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35362e302f32322d3232203d3e20313332363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.19.56.0/22
Signature Algorithm: sha256WithRSAEncryption
24:b7:ce:95:4c:46:51:e6:bc:d6:35:07:2f:dd:0f:be:99:ff:
26:c1:0c:fe:87:2c:6b:9d:03:81:de:3f:fb:27:1e:3d:d9:b1:
48:04:91:08:00:6d:1e:00:07:96:34:54:b7:69:e3:b4:7f:23:
96:e3:d5:48:61:f2:e8:43:bc:0a:29:c4:25:70:b0:1a:05:26:
65:c6:89:ba:c9:dd:8a:2e:dc:da:02:8f:bf:33:f0:f6:30:42:
ce:fe:fc:2e:13:82:fa:0d:48:c1:dc:e9:6e:c8:3b:34:69:53:
ea:3b:d4:e5:1b:84:10:f7:5a:1f:93:3c:e0:44:39:a7:60:f4:
87:5a:0d:89:50:e5:2b:34:7a:db:00:ec:2b:b9:85:49:c2:ff:
bf:cc:a3:d5:28:62:8a:fd:a7:8b:56:90:97:ca:9e:8a:12:bb:
82:cc:df:ea:c1:44:a3:55:b6:ff:8e:1b:11:a5:78:35:96:bf:
4a:41:43:3b:31:33:7c:05:c1:51:ff:cd:0a:7d:b3:63:b4:fe:
8c:01:43:9a:5e:c0:0a:92:c7:e6:0b:20:59:17:5a:3c:cd:dd:
e5:e4:9b:22:34:61:51:a8:99:bb:2b:c3:a6:43:1e:12:e5:7b:
19:5e:ad:cd:27:02:1d:d8:9f:24:c1:44:e3:97:cf:4c:ae:34:
f9:db:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:25 2026 by rpki-client