
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36342e302f32342d3234203d3e203539313538.roa
File: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (raw, json)
Hash identifier: vQnWFglYbzJwVQsCkKEdFaQ62I0WzkhSOu2hoX2jL1c=
Subject key identifier: 3D:D5:2F:80:97:5B:D8:B3:4E:8D:3B:66:13:1F:A5:D5:D1:0B:25:F5
Certificate issuer: /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE
Certificate serial: 07E171FBF6D67E536EBAD117616CC3CCE9EC94B8
Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36342e302f32342d3234203d3e203539313538.roa
Signing time: Sun 03 May 2026 02:31:16 +0000
ROA not before: Sun 03 May 2026 02:26:16 +0000
ROA not after: Sun 02 May 2027 02:31:16 +0000
asID: 59158
IP address blocks: 103.224.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl
rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:e1:71:fb:f6:d6:7e:53:6e:ba:d1:17:61:6c:c3:cc:e9:ec:94:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE
Validity
Not Before: May 3 02:26:16 2026 GMT
Not After : May 2 02:31:16 2027 GMT
Subject: CN=3DD52F80975BD8B34E8D3B66131FA5D5D10B25F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:fd:2c:5e:88:88:38:a4:a3:3c:ac:ae:44:
bc:a0:8d:90:73:ce:dd:9e:64:06:4d:2c:90:fa:26:
77:3f:73:ce:8b:1f:2f:d9:7a:98:ba:48:74:b0:d1:
82:d9:3a:42:e4:e4:7f:56:50:e9:72:70:b0:38:2c:
00:f0:3d:1d:a5:b2:7a:3b:a2:8a:7a:4c:db:7e:66:
a8:d2:f9:cf:eb:dd:29:34:32:db:a6:ff:bd:90:60:
bd:61:95:d0:84:a3:3e:71:2a:f2:42:ea:74:09:96:
f6:18:7c:70:22:3b:1b:f5:45:25:63:54:ba:db:04:
85:9a:e3:1a:85:d7:74:73:58:ba:c8:78:4a:11:38:
b7:e3:81:e6:12:52:69:2d:5c:4b:76:99:08:29:16:
e1:43:c9:32:9c:5d:ef:8a:53:93:d2:dd:95:a8:48:
b7:6d:aa:cd:1d:3f:3b:08:fd:40:31:5d:37:76:f1:
8e:27:5d:22:3c:2a:ad:28:be:78:b7:28:88:8d:a4:
27:ed:61:4a:24:e9:6e:a3:39:6b:54:d3:f2:aa:ab:
9a:0b:f1:d0:96:65:ac:a5:5c:b9:97:ab:7b:23:47:
de:49:c3:23:22:41:37:a5:34:37:7e:ee:30:b1:38:
88:50:67:17:ac:b0:9d:2a:c1:ce:25:57:d7:16:71:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D5:2F:80:97:5B:D8:B3:4E:8D:3B:66:13:1F:A5:D5:D1:0B:25:F5
X509v3 Authority Key Identifier:
keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36342e302f32342d3234203d3e203539313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.224.64.0/24
Signature Algorithm: sha256WithRSAEncryption
68:00:df:62:87:51:82:aa:77:62:36:08:2c:d4:a3:1f:a6:79:
ee:e2:d5:30:e0:93:3b:44:46:57:6e:8d:7f:33:04:8f:3c:13:
7e:a2:f6:ba:19:0b:c0:e7:dd:a9:39:e5:a7:27:2e:fd:9c:f1:
29:6c:51:42:ae:1e:12:bc:63:6b:4d:eb:8e:3d:93:f3:14:24:
a5:4d:d4:73:e8:8c:a6:dd:9a:01:b8:21:2c:56:28:09:46:59:
ef:da:50:9d:fb:95:94:af:5e:63:66:4e:95:56:bb:5c:da:d5:
6e:26:79:10:67:2f:e7:a9:37:22:0b:0a:ca:ad:6b:6d:bf:ae:
9a:f7:fa:c8:b5:2f:24:28:92:89:e8:53:ca:24:b5:45:f5:64:
28:23:01:85:f2:31:37:4b:08:1f:40:cd:57:17:60:b5:99:06:
cc:ee:de:bc:99:1e:3b:5b:62:29:d7:32:43:cd:f4:01:62:14:
d1:9b:6c:29:0a:33:e3:a8:be:13:a0:27:b9:bc:ac:64:dc:fd:
8a:d9:3f:44:e5:e0:e9:f9:e2:1c:40:ba:50:4c:ae:42:7d:00:
53:1e:07:47:55:06:09:24:c8:9b:c8:00:88:ae:bf:63:dd:22:
eb:aa:07:78:6f:22:80:ef:c1:35:11:54:5b:dd:6f:ac:e6:a3:
b3:c1:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:28 2026 by rpki-client