
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36372e302f32342d3234203d3e203539313538.roa
File: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (raw, json)
Hash identifier: Aw8k55kVz/A5ACNLxhHkCsixHFEWcXHRzRLrIEuRqgk=
Subject key identifier: 7F:E5:C2:43:51:CA:09:05:6E:85:02:AC:71:61:5D:AD:D0:32:9D:3C
Certificate issuer: /CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE
Certificate serial: 338BB877E84517E3AC714C13180C97F393CC99F2
Authority key identifier: 4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36372e302f32342d3234203d3e203539313538.roa
Signing time: Sun 03 May 2026 02:31:15 +0000
ROA not before: Sun 03 May 2026 02:26:15 +0000
ROA not after: Sun 02 May 2027 02:31:15 +0000
asID: 59158
IP address blocks: 103.224.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl
rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:8b:b8:77:e8:45:17:e3:ac:71:4c:13:18:0c:97:f3:93:cc:99:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE
Validity
Not Before: May 3 02:26:15 2026 GMT
Not After : May 2 02:31:15 2027 GMT
Subject: CN=7FE5C24351CA09056E8502AC71615DADD0329D3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:b8:1a:d9:22:65:32:a9:48:7b:1e:e7:dd:
d0:de:20:93:0d:56:71:77:dc:35:71:ce:76:e9:36:
e4:49:1c:89:c8:e2:b6:60:84:83:0d:4f:a5:8a:87:
b6:54:56:16:55:f3:04:23:d7:49:c8:3c:80:3a:8f:
d4:45:91:c0:64:f0:3f:f7:5b:0e:d2:ea:3f:84:c5:
92:c5:24:d7:2d:ec:b5:09:26:fc:89:3c:84:48:13:
38:4e:1a:ed:35:15:59:6d:98:70:34:ed:29:00:94:
10:3f:1c:39:d2:92:02:17:e7:b0:29:1d:89:f6:2d:
64:87:57:56:a3:30:93:0d:d7:14:eb:96:9f:c0:67:
89:87:d4:29:8f:8b:86:86:1c:d6:f3:b9:8f:7d:e7:
1b:ae:bf:e4:e7:08:6c:2f:d1:2b:8a:ad:eb:b9:23:
f2:23:69:d6:62:3b:d6:e4:c2:c5:ef:b2:00:4e:4b:
57:21:84:b9:84:a9:78:5e:5a:b3:20:ad:18:e3:f7:
59:40:37:a0:f5:d3:bc:a0:4c:eb:f9:a0:40:1b:86:
b6:62:4a:11:81:24:e2:94:d1:05:71:79:f5:ca:eb:
cb:81:ba:51:06:18:f7:b7:3c:2e:65:bc:72:09:7e:
62:6f:ba:82:04:12:2a:a6:e3:72:2a:fc:7a:4f:82:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E5:C2:43:51:CA:09:05:6E:85:02:AC:71:61:5D:AD:D0:32:9D:3C
X509v3 Authority Key Identifier:
keyid:4C:BE:8E:07:0C:93:0E:7B:02:BE:56:57:C5:52:8E:6C:FC:D9:A8:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4CBE8E070C930E7B02BE5657C5528E6CFCD9A8AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36372e302f32342d3234203d3e203539313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.224.67.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:0a:45:1c:c4:1b:73:ef:d7:5a:b8:bc:4e:8e:f6:85:33:6c:
b5:ee:58:22:79:4b:09:b6:7f:d3:b7:31:e2:8c:63:be:a6:61:
fb:24:e0:b5:42:9d:71:c3:24:65:5e:09:7f:38:da:e8:4f:d4:
e5:92:24:7e:5d:0a:7a:5f:37:22:c7:8a:40:f8:8d:18:60:b5:
0d:57:46:8a:28:62:57:20:54:9c:59:79:4a:88:0b:b0:8f:e5:
a4:d0:f6:ca:69:3d:f0:ef:cc:75:bc:6d:a0:25:ff:ee:55:b1:
99:34:8e:5c:e8:cb:7c:80:53:19:e7:e8:21:0c:ed:08:4b:40:
94:e1:7c:eb:8a:b2:f7:0a:c0:59:82:e3:6d:a9:c2:ba:31:98:
f8:53:2a:2f:53:e8:93:0e:f4:5b:a5:fc:23:2c:df:29:47:a8:
3a:88:e5:ca:d2:f0:6d:61:03:bf:f2:8b:53:5b:8d:e5:59:1e:
49:a1:77:d5:67:f1:f3:9a:3a:bc:e6:fe:26:37:7a:15:90:9e:
dc:f8:88:61:15:b1:73:c9:b6:a7:1b:e4:0d:44:88:3e:5c:72:
f7:fa:2e:02:b9:eb:13:f3:a7:9e:20:a4:29:80:74:75:5d:c1:
ee:81:31:6c:7e:59:27:2b:15:b4:d9:49:ae:b7:51:d4:e8:86:
15:f4:0b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:22 2026 by rpki-client