
$ rpki-client -vvf rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa
File: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (raw, json)
Hash identifier: nv4ivE8SW9hoYRCCG42Qh0+UnGFF2lzp7pEbSpYGfVM=
Subject key identifier: 04:AF:FA:F6:A9:37:FF:9A:A2:DA:D4:E3:A9:78:A6:B2:6F:05:28:7B
Certificate issuer: /CN=566E09CA4830024428EFAB32BD4C5C0588342F87
Certificate serial: 36734366C9CA96645D1EC3F229A2CFBFF18F7815
Authority key identifier: 56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa
Signing time: Sun 03 May 2026 02:23:58 +0000
ROA not before: Sun 03 May 2026 02:18:58 +0000
ROA not after: Sun 02 May 2027 02:23:58 +0000
asID: 136885
IP address blocks: 103.105.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl
rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:73:43:66:c9:ca:96:64:5d:1e:c3:f2:29:a2:cf:bf:f1:8f:78:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=566E09CA4830024428EFAB32BD4C5C0588342F87
Validity
Not Before: May 3 02:18:58 2026 GMT
Not After : May 2 02:23:58 2027 GMT
Subject: CN=04AFFAF6A937FF9AA2DAD4E3A978A6B26F05287B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2a:d1:3e:05:ac:0a:46:e3:17:c0:f4:ec:57:
7a:d5:ff:ed:b0:e7:76:90:af:e5:af:af:49:03:06:
bf:66:ea:2c:5f:91:84:94:2c:0e:3f:0e:30:a7:57:
be:b6:91:09:71:ef:da:47:9e:2d:ba:9e:e5:b7:79:
7f:37:ad:b9:a7:91:ba:b2:9f:28:b5:cf:66:fe:f7:
ef:5d:2d:41:ee:f8:57:f6:bb:f8:35:b7:62:ad:8a:
22:d1:e9:78:78:c1:06:f0:0a:2f:c1:cc:d5:43:65:
2a:50:65:ff:9b:85:b9:ae:4a:11:01:d8:6c:89:f5:
20:df:e8:b8:19:a7:1d:ab:7a:52:e3:70:6d:04:d3:
66:2c:8c:da:67:64:e8:8f:fa:ed:45:b9:a3:46:ac:
7e:2a:af:6e:9f:dc:55:38:42:f5:36:16:d5:49:fc:
1d:c7:48:03:4a:b0:59:48:2d:9b:5b:a4:19:76:e7:
45:67:04:55:f9:a3:a1:6d:76:b1:9b:07:79:02:1e:
fd:e9:f1:e5:1f:28:15:b3:0e:ea:d3:c2:d6:d3:88:
09:67:9c:6b:1c:3b:1a:9e:8d:59:93:50:7f:e6:06:
e3:8e:21:3f:86:2c:91:3f:a7:a1:32:2a:db:0a:db:
10:fc:cf:cd:44:a1:36:70:a6:c8:16:1a:7e:0e:20:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AF:FA:F6:A9:37:FF:9A:A2:DA:D4:E3:A9:78:A6:B2:6F:05:28:7B
X509v3 Authority Key Identifier:
keyid:56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.252.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:54:c5:d7:ce:87:46:fe:57:60:8d:ff:c8:ef:19:4a:34:86:
5d:f0:8f:2d:4e:68:e8:71:f7:ed:1f:9e:67:42:2c:cd:e2:9e:
72:0c:d1:ba:1d:ef:b1:42:b4:01:37:32:21:8d:8f:b1:c7:64:
98:b3:8b:8e:ac:e1:cf:0b:78:9f:27:83:4f:4e:3b:4b:cf:0f:
70:cb:f7:5f:75:32:0e:74:7a:16:f4:1f:62:1b:21:d5:c6:6e:
84:12:5c:cd:c7:4d:78:b0:60:3e:1d:ce:cb:05:7d:0f:55:f5:
d1:a7:1d:e1:c2:b5:a2:2b:1a:49:ec:a2:d3:8b:be:9f:7a:6d:
8b:da:7b:f0:9d:fc:ad:16:78:96:c4:3b:7b:84:e2:e9:70:f2:
29:c5:bc:23:1a:f9:0a:c5:af:e2:04:2f:3b:2a:9e:da:34:f9:
da:da:b7:0b:6c:7c:bb:7c:fb:cd:f8:7e:90:52:4d:e4:01:32:
56:5d:f2:79:8b:d7:55:cf:97:68:a0:a2:99:62:00:7a:0b:83:
af:3f:61:46:1f:f6:0e:e9:39:97:75:ae:bf:47:85:7f:86:3e:
16:31:c6:1d:a4:8b:a5:3d:78:ab:ad:74:51:9b:c9:5c:31:32:
3c:b6:12:6f:d5:d1:5a:dc:91:3c:b2:7c:b8:73:5f:97:8f:cd:
1a:69:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:03:13 2026 by rpki-client