
$ rpki-client -vvf rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e35352e33362e302f32322d3234203d3e20313336303532.roa
File: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (raw, json)
Hash identifier: 635Ti/3KrhSgNu8Gwnt/QjYuKqvc1Cqug8YI7DrA208=
Subject key identifier: 94:87:28:DB:32:DE:3F:AF:1E:58:70:B7:86:AD:C3:C4:98:97:4F:1C
Certificate issuer: /CN=23A948EB16F42F91944CC667D8613DD9AD7F2481
Certificate serial: 751D7EF14354DE0C12838CD6D821E9B0A7DC61DC
Authority key identifier: 23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e35352e33362e302f32322d3234203d3e20313336303532.roa
Signing time: Sun 03 May 2026 02:33:15 +0000
ROA not before: Sun 03 May 2026 02:28:15 +0000
ROA not after: Sun 02 May 2027 02:33:15 +0000
asID: 136052
IP address blocks: 103.55.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl
rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:1d:7e:f1:43:54:de:0c:12:83:8c:d6:d8:21:e9:b0:a7:dc:61:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23A948EB16F42F91944CC667D8613DD9AD7F2481
Validity
Not Before: May 3 02:28:15 2026 GMT
Not After : May 2 02:33:15 2027 GMT
Subject: CN=948728DB32DE3FAF1E5870B786ADC3C498974F1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:78:09:ff:52:5b:f6:a2:7a:39:94:86:ad:
cb:e7:98:9c:20:37:39:1e:7b:57:bb:09:9c:51:77:
13:27:4f:51:75:8e:e5:2b:36:fb:1e:60:a8:d1:03:
cf:c4:24:de:48:c2:f0:2b:74:56:6a:a9:07:45:92:
77:92:c9:e3:1e:54:e5:ae:6e:d1:19:9d:65:9f:7b:
bd:98:62:e8:23:af:3c:51:ff:19:4f:0f:ac:be:93:
c5:a1:f6:41:43:f7:86:27:c2:4a:57:7d:1c:ae:49:
6e:89:1c:04:4b:71:80:a3:11:04:3f:65:71:2c:fe:
6e:95:30:29:b8:d1:27:11:64:fe:ce:55:cb:71:9b:
77:99:e1:1a:c6:0f:82:c0:44:7e:e0:d5:95:1f:6b:
b9:b9:13:f5:1d:20:58:2c:db:ab:75:66:02:f8:fd:
8b:fb:7b:24:4a:23:22:2a:9e:eb:e1:c3:9d:21:23:
93:f1:fb:07:8a:20:94:40:20:86:5a:b1:71:f1:76:
fb:43:0f:3a:d7:0b:cf:55:1d:84:5d:d7:2f:4a:eb:
dd:8b:a4:4c:37:36:76:2c:f8:8b:09:7a:d3:fc:aa:
3a:7f:6a:11:91:81:5d:ba:a3:1d:04:08:08:4d:79:
58:d7:8f:80:eb:cf:58:81:cd:b8:42:e6:e2:10:b5:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:87:28:DB:32:DE:3F:AF:1E:58:70:B7:86:AD:C3:C4:98:97:4F:1C
X509v3 Authority Key Identifier:
keyid:23:A9:48:EB:16:F4:2F:91:94:4C:C6:67:D8:61:3D:D9:AD:7F:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/23A948EB16F42F91944CC667D8613DD9AD7F2481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23A948EB16F42F91944CC667D8613DD9AD7F2481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e35352e33362e302f32322d3234203d3e20313336303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:fe:cb:c3:99:3f:49:26:50:a1:21:5e:2a:48:24:a1:28:81:
d3:69:3a:87:07:3d:6c:69:eb:08:b0:9a:2a:78:31:96:32:74:
ad:ba:4a:1a:6a:80:b0:4f:eb:b8:54:5a:8c:18:4e:14:86:b6:
d4:89:5b:7f:34:ce:bd:8d:3b:98:b8:12:5a:c8:d6:9a:12:ff:
a7:9a:ac:62:f8:51:9f:3a:09:c1:ba:84:ab:7e:b5:a6:b8:ea:
f7:9f:a0:a0:fe:ca:69:21:22:b3:c1:29:d9:18:47:c6:a2:48:
b5:c1:24:69:9d:f7:b9:7d:bb:fd:75:e4:98:09:75:05:05:ce:
96:d2:85:3e:d9:35:08:b4:79:1a:65:0b:69:f5:73:ac:06:12:
2f:9c:dc:b9:38:c6:db:28:3e:fd:92:d0:fc:fd:a5:70:eb:70:
48:b5:3f:c5:7e:e6:5c:b7:41:4a:bd:29:23:73:fe:e2:40:2b:
cc:04:9d:f7:be:99:68:af:bc:8a:37:33:a3:ca:f9:15:69:42:
2f:3a:2c:ca:a9:75:e3:d3:57:d5:17:56:e7:87:ba:f8:de:d7:
78:bc:de:be:45:29:ec:80:2e:79:bd:db:cf:17:db:91:3f:ac:
99:b2:15:1e:3e:5b:a9:cf:d8:92:c6:04:c8:8f:20:6a:a6:22:
c8:f7:9c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:49 2026 by rpki-client