
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa
File: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (raw, json)
Hash identifier: Ms7vmWNJU/eH2w3Abb6Bd4CfaUQxIKMjBcLzJ9Mjepo=
Subject key identifier: 75:CC:B1:CD:A9:36:1F:CE:B3:9A:C6:B8:D5:35:F3:1F:6C:13:E1:33
Certificate issuer: /CN=4560165A105018777E945437E2CDF8199768DFF6
Certificate serial: 328FDAE82E1ABA06218984F6D4F683BD7CBEC1B6
Authority key identifier: 45:60:16:5A:10:50:18:77:7E:94:54:37:E2:CD:F8:19:97:68:DF:F6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4560165A105018777E945437E2CDF8199768DFF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa
Signing time: Sun 03 May 2026 02:32:32 +0000
ROA not before: Sun 03 May 2026 02:27:32 +0000
ROA not after: Sun 02 May 2027 02:32:32 +0000
asID: 138130
IP address blocks: 103.133.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/4560165A105018777E945437E2CDF8199768DFF6.crl
rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/4560165A105018777E945437E2CDF8199768DFF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4560165A105018777E945437E2CDF8199768DFF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8f:da:e8:2e:1a:ba:06:21:89:84:f6:d4:f6:83:bd:7c:be:c1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4560165A105018777E945437E2CDF8199768DFF6
Validity
Not Before: May 3 02:27:32 2026 GMT
Not After : May 2 02:32:32 2027 GMT
Subject: CN=75CCB1CDA9361FCEB39AC6B8D535F31F6C13E133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:80:7b:09:9c:db:b8:44:44:6a:ec:47:18:
25:50:c0:66:2a:f1:09:68:b4:86:aa:79:bf:34:9b:
24:00:07:86:1c:0a:3c:be:18:57:1f:f3:ad:57:db:
cc:b6:d1:7f:06:84:ad:c6:b2:af:47:b7:b7:78:a4:
f2:1a:60:86:d1:ba:03:00:79:14:4b:45:70:91:b8:
47:62:0f:8d:a5:f9:ba:e2:6d:d6:2e:21:94:da:b9:
5c:4d:39:eb:8e:38:1c:e1:8d:0c:18:76:98:99:4e:
20:0b:1c:08:a6:22:43:47:70:93:ac:f2:37:d4:22:
4f:9c:94:09:ec:5a:d1:2a:08:18:87:8e:0e:8c:24:
ea:68:cb:ff:93:7f:c6:03:3a:0e:20:7c:12:e0:9b:
bb:79:a0:61:3d:8a:eb:ca:96:3e:e8:2f:a1:40:0b:
26:2b:36:a0:ef:87:63:67:21:34:f9:65:73:d3:87:
4f:cf:33:7b:88:01:7b:10:18:c9:df:d6:78:d5:cd:
7c:41:a3:36:2a:3d:cd:87:d3:73:88:f5:5b:55:e5:
da:48:37:3c:c6:4d:e0:ca:14:2d:4a:6c:7f:1c:1a:
73:19:a8:c3:d0:32:df:8e:f8:9a:8f:82:15:ab:58:
6f:08:fa:d7:ad:29:8b:59:d8:96:92:4a:33:17:10:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CC:B1:CD:A9:36:1F:CE:B3:9A:C6:B8:D5:35:F3:1F:6C:13:E1:33
X509v3 Authority Key Identifier:
keyid:45:60:16:5A:10:50:18:77:7E:94:54:37:E2:CD:F8:19:97:68:DF:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/4560165A105018777E945437E2CDF8199768DFF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4560165A105018777E945437E2CDF8199768DFF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.24.0/22
Signature Algorithm: sha256WithRSAEncryption
72:32:b2:28:cf:56:72:13:45:12:1f:25:2c:c2:cd:bf:e2:07:
54:9f:ef:3f:2c:b3:d7:90:cc:2e:09:cc:0c:2f:dd:62:73:2b:
8c:0f:59:8f:d9:16:d5:8b:78:43:42:d8:e7:e9:2f:5d:bc:c5:
6d:aa:c2:d3:08:07:d9:68:b1:46:c9:80:f8:6a:1c:2c:01:05:
5a:ec:3a:62:54:3f:c0:2e:58:bd:56:6e:b5:b6:fc:97:2c:f2:
ac:bd:29:43:0b:9e:9a:cf:42:0c:d0:af:e3:62:17:1c:a0:22:
54:f4:c9:0b:2b:11:24:99:bd:0a:39:41:f2:ea:0a:62:4a:1f:
62:f8:ec:64:6d:e2:09:76:d0:59:8c:bd:f7:47:23:d4:c3:bd:
cc:f4:1f:79:43:32:38:d9:54:45:db:70:c3:4b:06:f9:d0:ff:
4a:df:66:05:8b:9d:73:72:30:a9:1f:60:ee:e0:83:65:ac:65:
4c:b9:77:80:f1:10:71:a5:a7:5a:fb:9d:17:b0:09:a6:16:ba:
3c:64:db:09:92:8a:a2:55:b8:f8:cc:8f:75:ee:a1:8a:02:45:
3c:0c:d1:29:d0:cc:2b:ac:09:a3:e6:80:e5:c6:1f:6e:c7:6c:
00:3d:49:dd:29:99:ae:d6:75:01:39:25:5c:02:c5:16:0a:12:
61:e7:88:1b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMo/a6C4augYhiYT21PaDvXy+wbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU2MDE2NUExMDUwMTg3NzdFOTQ1NDM3RTJDREY4MTk5
NzY4REZGNjAeFw0yNjA1MDMwMjI3MzJaFw0yNzA1MDIwMjMyMzJaMDMxMTAvBgNV
BAMTKDc1Q0NCMUNEQTkzNjFGQ0VCMzlBQzZCOEQ1MzVGMzFGNkMxM0UxMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr94B7CZzbuEREauxHGCVQwGYq
8QlotIaqeb80myQAB4YcCjy+GFcf861X28y20X8GhK3Gsq9Ht7d4pPIaYIbRugMA
eRRLRXCRuEdiD42l+bribdYuIZTauVxNOeuOOBzhjQwYdpiZTiALHAimIkNHcJOs
8jfUIk+clAnsWtEqCBiHjg6MJOpoy/+Tf8YDOg4gfBLgm7t5oGE9iuvKlj7oL6FA
CyYrNqDvh2NnITT5ZXPTh0/PM3uIAXsQGMnf1njVzXxBozYqPc2H03OI9VtV5dpI
NzzGTeDKFC1KbH8cGnMZqMPQMt+O+JqPghWrWG8I+tetKYtZ2JaSSjMXEItRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUdcyxzak2H86zmsa41TXzH2wT4TMwHwYDVR0j
BBgwFoAURWAWWhBQGHd+lFQ34s34GZdo3/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGZkZmYzOTAtMTY5NS00NGVlLTg4ZTUtNDJlZDEyODE2YjAwLzAvNDU2MDE2NUEx
MDUwMTg3NzdFOTQ1NDM3RTJDREY4MTk5NzY4REZGNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NTYwMTY1QTEwNTAxODc3N0U5NDU0MzdFMkNERjgxOTk3NjhE
RkY2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRmZGZmMzkwLTE2OTUtNDRlZS04
OGU1LTQyZWQxMjgxNmIwMC8wLzMxMzAzMzJlMzEzMzMzMmUzMjM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4UYMA0GCSqG
SIb3DQEBCwUAA4IBAQByMrIoz1ZyE0USHyUsws2/4gdUn+8/LLPXkMwuCcwML91i
cyuMD1mP2RbVi3hDQtjn6S9dvMVtqsLTCAfZaLFGyYD4ahwsAQVa7DpiVD/ALli9
Vm61tvyXLPKsvSlDC56az0IM0K/jYhccoCJU9MkLKxEkmb0KOUHy6gpiSh9i+Oxk
beIJdtBZjL33RyPUw73M9B95QzI42VRF23DDSwb50P9K32YFi51zcjCpH2Du4INl
rGVMuXeA8RBxpada+50XsAmmFro8ZNsJkoqiVbj4zI917qGKAkU8DNEp0MwrrAmj
5oDlxh9ux2wAPUndKZmu1nUBOSVcAsUWChJh54gb
-----END CERTIFICATE-----
Generated at Wed May 13 06:48:40 2026 by rpki-client