
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/3130332e34312e3230302e302f32322d3234203d3e203633353132.roa
File: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (raw, json)
Hash identifier: ZyMegzYLPmuWd/ikDAjq3H75TE6NMvhpUlSw0zwrA5M=
Subject key identifier: 13:25:B4:FD:27:81:B8:42:2D:AE:9B:EB:58:D2:F5:03:C0:62:AE:DE
Certificate issuer: /CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA
Certificate serial: 5BDF18B96D4CCAD1823BDFABC4861FBC071EF252
Authority key identifier: B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/3130332e34312e3230302e302f32322d3234203d3e203633353132.roa
Signing time: Sun 03 May 2026 02:30:42 +0000
ROA not before: Sun 03 May 2026 02:25:42 +0000
ROA not after: Sun 02 May 2027 02:30:42 +0000
asID: 63512
IP address blocks: 103.41.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl
rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:df:18:b9:6d:4c:ca:d1:82:3b:df:ab:c4:86:1f:bc:07:1e:f2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA
Validity
Not Before: May 3 02:25:42 2026 GMT
Not After : May 2 02:30:42 2027 GMT
Subject: CN=1325B4FD2781B8422DAE9BEB58D2F503C062AEDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:5b:2c:52:47:94:9a:ca:96:84:42:c4:1f:
c9:e1:e6:19:56:da:6a:09:33:88:3b:4c:49:f0:93:
15:0b:ab:4e:c2:aa:7c:61:c0:cd:6d:ec:8f:be:43:
f0:14:7f:e5:00:aa:69:f9:4f:11:ec:cc:5a:f9:11:
d8:d6:fc:08:f5:75:67:b9:ce:04:37:39:10:22:0a:
3e:40:98:4d:d8:a0:b7:f1:56:ee:ad:b5:9d:66:a5:
6a:47:12:fa:08:7c:49:e9:78:5e:25:9d:0a:1f:fa:
35:8f:c6:35:9a:f7:5e:71:70:10:f3:8d:ab:4c:38:
5e:de:2f:8f:f7:0c:55:23:f1:40:48:ec:de:ea:6a:
16:81:20:3a:b5:05:37:b5:5d:d0:6e:3f:36:05:e7:
7d:c0:79:fd:44:b5:85:25:54:b6:46:d3:59:2c:0b:
67:09:db:f3:c2:9c:7b:85:0d:ad:0a:bf:88:ab:86:
5b:9b:0d:aa:e9:23:63:80:f4:eb:0b:cf:63:39:43:
cc:ab:2d:44:d0:49:f1:92:a3:e4:71:2a:b6:ef:4c:
ad:f0:39:a2:f4:be:2e:7d:b0:ac:1c:03:42:6e:e0:
6d:91:c3:72:29:07:a1:80:3d:0a:37:fc:2e:e6:d7:
50:d5:5b:f8:35:0e:e7:da:15:bb:4e:a1:df:22:73:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:25:B4:FD:27:81:B8:42:2D:AE:9B:EB:58:D2:F5:03:C0:62:AE:DE
X509v3 Authority Key Identifier:
keyid:B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/3130332e34312e3230302e302f32322d3234203d3e203633353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.200.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:f4:40:44:0a:a6:12:24:e6:f9:a5:62:68:d4:c2:3e:b0:1b:
d2:f6:80:68:8a:22:26:15:78:5a:ab:e0:79:7e:50:d3:fc:0e:
45:aa:5d:58:09:b6:09:c2:30:80:84:92:31:be:81:a0:a5:48:
d6:ca:5e:5a:dc:33:d8:c0:9d:43:da:9b:63:44:ae:52:a1:df:
af:08:38:58:ac:eb:d8:ed:20:d4:5e:ca:89:0d:9c:6a:ce:3e:
51:77:26:1e:40:c8:82:7b:f9:f8:38:5d:f8:99:8f:89:23:13:
c5:49:8d:c2:e9:cc:28:08:d0:c0:6a:50:ac:94:5d:0c:6a:6b:
3f:d1:52:b7:1f:87:6d:9c:c9:c8:66:38:4e:a4:49:6f:b1:88:
8b:03:de:25:1d:d9:90:ce:ab:db:0b:3e:4a:6c:d4:8c:95:5c:
03:84:5a:47:35:c5:7f:fc:2b:14:86:91:9b:10:cf:3d:bf:b5:
5c:4f:14:1a:e5:60:12:64:64:4d:17:0e:e1:7b:8c:43:89:d8:
6f:56:3e:fe:02:68:48:d4:39:da:55:9e:24:9d:3f:12:9c:96:
e2:6b:f6:be:0b:4a:b8:2b:5e:f6:21:79:66:03:52:75:1a:50:
4f:97:f9:4c:7e:69:60:b5:f9:4a:0a:92:15:98:7d:1c:31:1b:
c8:dc:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:09 2026 by rpki-client