
$ rpki-client -vvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32342d3234203d3e203435373233.roa
File: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (raw, json)
Hash identifier: IT4wEh8zWC2aFJaduZl+3xieFOQo82r5tnnrLJAHogw=
Subject key identifier: 4C:86:46:EF:D3:1A:39:C7:5B:09:03:2D:70:BE:47:7E:67:C6:A1:AC
Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60
Certificate serial: 0228B3177D67452E2540B11469D62CBCC86AA8AC
Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32342d3234203d3e203435373233.roa
Signing time: Sun 03 May 2026 02:29:07 +0000
ROA not before: Sun 03 May 2026 02:24:07 +0000
ROA not after: Sun 02 May 2027 02:29:07 +0000
asID: 45723
IP address blocks: 103.28.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl
rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:28:b3:17:7d:67:45:2e:25:40:b1:14:69:d6:2c:bc:c8:6a:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60
Validity
Not Before: May 3 02:24:07 2026 GMT
Not After : May 2 02:29:07 2027 GMT
Subject: CN=4C8646EFD31A39C75B09032D70BE477E67C6A1AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:5f:75:3f:2e:b6:c5:9c:3f:cf:b5:12:94:
6c:d9:db:b3:34:8a:2f:72:70:72:92:78:f7:5e:1c:
3d:1b:bd:07:75:4c:d4:bb:71:27:2d:3d:5f:76:9c:
a0:87:f4:a6:35:ce:0c:7c:fe:23:47:2e:4b:2d:a8:
71:7d:99:9f:ee:b3:20:10:08:51:59:12:d5:72:de:
02:0e:9c:bb:51:dc:c6:25:57:7f:cd:07:b2:5f:11:
1c:1b:7a:64:3c:e4:e0:04:b6:81:4b:90:f2:3e:1b:
ee:30:72:b3:e4:c5:84:fc:fa:2f:e4:1d:98:11:ce:
20:5a:ea:74:d6:ba:09:c3:84:4b:ae:f7:c1:04:0f:
81:6f:66:b1:67:d1:f2:00:22:52:88:12:a5:e8:83:
da:4a:b9:ab:08:8b:56:eb:bb:0c:0d:55:8d:5a:0f:
19:44:2a:59:bf:bc:6f:f2:55:c3:12:63:5f:7a:8e:
f2:90:8e:12:ef:38:e4:46:2c:23:2a:1a:10:86:8f:
15:37:62:c4:7c:7f:eb:73:d8:53:4f:81:90:62:3c:
10:92:bb:f8:3c:c8:de:a6:1a:ae:cf:70:4a:5f:80:
30:35:1d:43:0e:49:e0:06:1b:74:d2:65:a4:99:74:
af:d9:c3:79:8c:6e:1f:9e:09:4a:af:51:23:a4:f6:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:86:46:EF:D3:1A:39:C7:5B:09:03:2D:70:BE:47:7E:67:C6:A1:AC
X509v3 Authority Key Identifier:
keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32342d3234203d3e203435373233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.80.0/24
Signature Algorithm: sha256WithRSAEncryption
72:eb:fd:45:77:f9:5a:bf:dd:22:99:9f:48:22:e7:8d:a0:6c:
58:54:15:82:64:c9:1a:34:cb:f7:9b:8e:e9:34:9a:37:68:92:
cd:09:1a:98:ae:32:ed:cc:59:c4:db:7f:cd:cf:6a:ca:94:0e:
90:b2:05:1d:3e:2e:48:46:ef:2f:e3:f2:80:0b:46:0f:8a:58:
b3:80:f2:df:c7:8f:aa:80:ea:c1:2d:7d:1a:d9:0c:93:cc:6d:
ea:d2:bc:d3:aa:b4:d6:4f:5a:83:7c:98:9b:46:d1:79:52:d5:
b7:f3:c6:c8:ba:b8:96:93:05:91:dd:24:5e:0e:d5:66:d2:98:
c3:a1:93:c6:dc:43:18:b5:02:61:74:89:e2:b0:aa:9f:63:70:
6b:78:9a:ee:2a:be:00:ec:7f:b0:61:a9:a7:78:1a:02:f5:37:
2c:5a:45:2a:89:6e:d6:6c:fd:e6:9e:91:59:21:27:fb:3c:3b:
c8:10:43:fb:2f:b4:59:f6:b3:e3:bb:44:08:27:c3:d5:50:a8:
e7:c3:29:7a:79:8d:32:58:ab:68:1c:2f:94:76:a4:5d:af:d1:
a7:1f:4d:c2:8a:d6:06:61:a9:03:01:bb:3c:12:eb:94:a7:cb:
b0:21:27:95:1f:71:fa:3f:f4:b4:20:8e:0e:6d:de:9c:6a:11:
2a:d9:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:16 2026 by rpki-client