
$ rpki-client -vvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38332e302f32342d3234203d3e203435373233.roa
File: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (raw, json)
Hash identifier: LXt8OGULAdQpoNoWK4gxLrA5MzZUVnNwkr0fY1oAkvc=
Subject key identifier: 85:A4:D7:A2:21:99:91:FB:CD:D3:A0:9F:63:C2:BA:90:51:DF:C7:03
Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60
Certificate serial: 15BD1FBB67238374A8DDDD2158A46EDF248E5063
Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38332e302f32342d3234203d3e203435373233.roa
Signing time: Sun 03 May 2026 02:29:04 +0000
ROA not before: Sun 03 May 2026 02:24:04 +0000
ROA not after: Sun 02 May 2027 02:29:04 +0000
asID: 45723
IP address blocks: 103.28.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl
rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:bd:1f:bb:67:23:83:74:a8:dd:dd:21:58:a4:6e:df:24:8e:50:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60
Validity
Not Before: May 3 02:24:04 2026 GMT
Not After : May 2 02:29:04 2027 GMT
Subject: CN=85A4D7A2219991FBCDD3A09F63C2BA9051DFC703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:fe:bd:d1:d1:9a:83:12:a6:df:cd:60:af:
8c:a7:b8:bd:11:c1:96:df:30:64:af:5d:e2:c5:12:
b9:9c:98:9d:33:bc:ce:0b:ca:00:7b:9e:8a:7c:43:
83:4d:ff:b7:79:bd:03:51:0a:d7:e9:d5:22:69:fb:
df:5b:9a:cf:a7:16:43:0b:e0:8c:62:69:9e:55:6d:
da:e2:3c:9f:32:d0:bb:13:29:53:65:09:d2:d0:9e:
64:16:23:f8:03:3b:9d:a8:f7:35:de:38:3f:a0:42:
9a:34:ea:0d:e3:d6:32:06:ea:29:d7:40:ad:27:e4:
95:a7:af:cf:8c:f5:09:67:17:d7:df:b2:d6:d5:dc:
f6:18:63:55:62:4a:24:08:9f:1d:f7:cc:cc:bc:ef:
47:cd:d5:21:a6:ea:a0:31:ad:c0:47:c9:41:1c:3e:
0b:66:5a:88:18:dc:52:30:a9:b3:98:e6:e3:2e:69:
18:47:3e:cf:ac:5d:94:14:b8:c6:b4:6a:7f:eb:ba:
e5:15:84:86:ba:27:6e:38:66:70:ac:9d:1e:06:34:
a6:aa:80:27:5c:e2:d8:33:b8:9c:48:4e:b7:bf:f2:
37:59:be:36:0c:23:db:b3:c3:a0:ad:e2:b0:ab:73:
3d:e7:63:b8:8a:16:cf:b6:2f:9c:84:73:13:39:f4:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:D7:A2:21:99:91:FB:CD:D3:A0:9F:63:C2:BA:90:51:DF:C7:03
X509v3 Authority Key Identifier:
keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38332e302f32342d3234203d3e203435373233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.83.0/24
Signature Algorithm: sha256WithRSAEncryption
95:64:95:ed:9d:5b:f9:d3:73:ac:4a:f6:07:54:5c:de:81:47:
2a:77:6b:b5:16:69:34:f1:82:f3:fb:f9:01:0c:65:cd:8a:3b:
55:d7:3a:31:0a:26:e1:75:e4:cf:bd:fa:70:87:87:ec:06:eb:
06:2f:c2:b6:9e:c6:54:6d:c9:23:e6:57:d0:85:f7:45:88:3e:
66:c6:ca:66:c1:7c:b1:4d:f5:16:19:9b:bd:d7:31:12:6b:92:
9c:6c:d5:8e:3a:04:16:c8:b5:13:99:b1:48:9e:a9:e8:99:5b:
16:f4:44:04:c2:fe:ca:a2:5b:ed:12:c4:3e:15:05:96:4b:8d:
6d:af:97:9f:ca:f6:fd:b5:e9:f1:5b:2c:68:23:fa:3d:51:42:
43:c8:c4:d7:bc:d3:9a:b9:d0:bd:a4:26:af:d7:e2:25:8d:9d:
3e:40:43:04:99:a0:08:bf:aa:ce:07:12:90:0b:47:e3:40:2b:
61:22:8e:d7:36:5a:2e:7c:1a:02:a6:89:be:73:a0:95:79:e2:
4e:d4:a7:24:48:2a:5f:f2:3b:1e:ba:76:bf:54:61:c7:0b:d7:
7f:47:5a:eb:20:b3:e3:80:eb:c6:91:f8:f7:c2:36:02:e0:13:
b9:93:19:2c:43:97:7a:8c:e2:8f:6f:07:9d:46:d6:64:54:b3:
7e:6a:99:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:14 2026 by rpki-client