
$ rpki-client -vvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa
File: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (raw, json)
Hash identifier: IfMWwhDvn79zUR3Or4ntsHEBkoKu9G8xlYcDLbW/Ei4=
Subject key identifier: 5A:36:D6:C8:E5:2E:B2:87:AD:1F:3A:A7:FB:81:E7:3A:DB:24:74:3C
Certificate issuer: /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E
Certificate serial: 7854DF03809F6A709BD495C22643BDAEA7F6E6EA
Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa
Signing time: Sun 03 May 2026 02:25:25 +0000
ROA not before: Sun 03 May 2026 02:20:25 +0000
ROA not after: Sun 02 May 2027 02:25:25 +0000
asID: 139952
IP address blocks: 103.162.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl
rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 10:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:54:df:03:80:9f:6a:70:9b:d4:95:c2:26:43:bd:ae:a7:f6:e6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E
Validity
Not Before: May 3 02:20:25 2026 GMT
Not After : May 2 02:25:25 2027 GMT
Subject: CN=5A36D6C8E52EB287AD1F3AA7FB81E73ADB24743C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:81:4b:2e:58:1d:0c:21:5a:59:67:7e:66:
d8:ad:68:97:47:95:19:d2:33:e1:36:c2:c2:cb:08:
6a:a2:2d:8e:c0:00:79:0b:12:29:b7:ca:92:31:d5:
b0:73:66:a3:ba:a4:ec:e1:94:ea:64:1f:ea:a2:c7:
20:4a:84:ff:fa:62:61:72:89:75:ec:a9:0e:57:c7:
48:e8:06:ce:6c:bb:4e:6c:cf:66:8d:51:4b:b9:eb:
db:76:56:dc:3d:61:ab:2c:ae:9d:a5:44:17:fc:36:
3e:09:9f:2b:6a:a9:89:d5:a4:c0:6b:8d:51:07:d0:
89:d6:57:1d:5e:46:b4:22:c6:e7:25:77:e2:b1:63:
93:13:41:da:89:8d:72:c2:a9:68:5f:28:68:30:c9:
2f:10:7b:b7:5b:13:f0:f9:d7:22:f2:c7:e3:0c:b3:
7f:3d:83:ff:97:c9:3b:47:0a:55:47:66:e6:98:a1:
91:96:ff:e4:4c:f1:42:0b:39:94:f1:50:d7:2e:53:
bd:30:de:8c:c7:36:10:2b:05:a1:a8:d7:50:8a:ea:
9f:a1:84:e8:70:7f:64:da:5d:e6:29:85:59:66:f1:
f0:46:e9:7d:19:55:5c:63:a3:73:67:7e:a9:37:6b:
1e:d3:22:ac:c7:3a:23:72:4a:29:70:2a:87:dd:0c:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:36:D6:C8:E5:2E:B2:87:AD:1F:3A:A7:FB:81:E7:3A:DB:24:74:3C
X509v3 Authority Key Identifier:
keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.220.0/23
Signature Algorithm: sha256WithRSAEncryption
36:54:f8:66:1b:c6:13:06:98:6c:58:6a:06:06:82:0d:d4:47:
fb:91:81:bb:0a:de:2d:41:4c:38:6b:5d:3f:b6:1a:bc:9f:13:
9a:0f:89:db:bd:77:19:c4:e3:66:43:4a:65:26:7b:0f:90:6d:
ba:bd:2f:6c:51:dd:36:9b:86:0a:50:d6:48:46:47:88:65:6b:
27:dd:d0:2c:11:c8:3c:8b:4f:17:d9:10:1f:e2:2b:27:fc:4b:
16:31:19:58:6c:c8:9e:90:6c:a9:98:a2:ec:c8:6a:25:06:49:
3e:cc:62:6b:4d:96:11:e7:af:24:dd:46:b0:56:c0:fa:e0:97:
62:c3:11:46:a3:a7:03:1f:35:ae:5e:30:5c:18:3d:bf:44:8f:
12:23:47:48:ca:2b:45:b8:ed:7b:c1:ec:7e:55:db:27:ec:f4:
68:cb:f4:8e:a1:c6:fe:0f:c4:c9:da:9d:c8:8b:08:99:78:76:
d2:93:56:89:69:01:82:23:84:1e:4f:ec:43:95:d1:29:6f:3c:
e9:cf:b1:70:5b:3c:98:ff:d1:7b:d1:57:5e:ac:2b:6e:f2:46:
dd:2e:5a:09:6b:73:5c:f4:6e:b3:f4:7a:a6:31:88:9e:76:52:
00:e5:ad:e7:9b:64:48:7a:7d:08:6e:1b:54:33:19:d0:53:85:
a1:ce:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:57 2026 by rpki-client