
$ rpki-client -vvf rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/3130332e36362e33362e302f32342d3234203d3e20313530323233.roa
File: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (raw, json)
Hash identifier: cbw+qMwfHCXDiTnr7sY/MlfwfCUda213WDrCyTfAh4Y=
Subject key identifier: 80:3E:1C:F8:94:5C:40:4D:A6:E2:C8:44:F8:0A:64:3F:F5:29:24:5A
Certificate issuer: /CN=71468BECC53B96325385ED8BB32F3639F1F5E487
Certificate serial: 31DDAAE05BB430C8FF6E41879064E25646BCA759
Authority key identifier: 71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/3130332e36362e33362e302f32342d3234203d3e20313530323233.roa
Signing time: Sun 03 May 2026 02:33:22 +0000
ROA not before: Sun 03 May 2026 02:28:22 +0000
ROA not after: Sun 02 May 2027 02:33:22 +0000
asID: 150223
IP address blocks: 103.66.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl
rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:dd:aa:e0:5b:b4:30:c8:ff:6e:41:87:90:64:e2:56:46:bc:a7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71468BECC53B96325385ED8BB32F3639F1F5E487
Validity
Not Before: May 3 02:28:22 2026 GMT
Not After : May 2 02:33:22 2027 GMT
Subject: CN=803E1CF8945C404DA6E2C844F80A643FF529245A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:c5:9d:ce:bf:df:48:00:1f:ea:d8:6d:d6:
59:c1:6e:48:cb:6a:fc:bb:e3:45:ad:17:1d:38:af:
c5:73:b4:23:35:64:5c:f6:03:ef:4a:da:e7:66:8c:
69:8b:0c:47:ae:7a:f8:63:d7:45:d6:10:2e:50:3a:
f5:96:8b:72:01:37:2b:4f:17:5a:c0:29:a7:fb:ce:
7f:03:c2:82:49:f8:1d:4b:63:e1:5f:11:fd:6b:a6:
7a:8a:6a:85:82:b6:fd:29:d3:d1:12:34:8b:84:f7:
1e:b1:9f:66:64:e2:03:dd:47:6a:4b:90:80:27:67:
0e:9f:68:b5:f5:54:72:2c:3d:02:a8:9a:6d:5c:32:
7d:9b:ee:5f:bc:41:bc:80:01:1c:df:53:50:1c:ee:
75:d9:e3:76:74:9c:ad:03:f7:01:2b:31:db:55:a2:
12:30:87:e4:b1:bc:ff:b9:c9:50:f2:a5:08:cf:bc:
a5:cb:29:76:07:97:c2:24:cc:ee:73:cb:d7:63:02:
f3:ef:77:60:66:21:34:81:d1:90:6d:a4:55:17:f7:
60:ef:c6:d8:d3:e3:6f:16:b0:0e:39:b1:61:ab:c0:
33:87:2f:8b:9b:33:fc:d4:a1:6f:c6:30:92:b8:62:
c6:ad:83:28:5f:0c:54:11:a6:4c:9f:43:ff:5b:03:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3E:1C:F8:94:5C:40:4D:A6:E2:C8:44:F8:0A:64:3F:F5:29:24:5A
X509v3 Authority Key Identifier:
keyid:71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/3130332e36362e33362e302f32342d3234203d3e20313530323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:55:b3:7c:98:ee:d6:63:89:ef:55:da:c0:b2:22:dd:a1:96:
36:94:ba:f3:8a:92:1e:78:7d:89:26:8c:f0:1e:bd:9f:1f:d9:
f9:50:d6:17:84:0a:5a:07:1f:9b:c1:6c:97:30:52:01:5e:63:
4c:c8:9a:9d:c6:7f:2b:ae:40:27:90:71:92:de:69:96:d7:48:
3e:8e:1b:06:39:55:8d:60:af:06:f7:d3:13:8c:26:a8:85:9f:
06:61:3c:6d:8b:05:c9:1c:f7:ab:7e:8f:fb:41:34:fb:e9:4b:
d8:72:0d:63:82:2c:70:6c:dd:bb:17:9c:a8:79:eb:ec:00:9f:
5e:5b:b4:d2:57:38:aa:03:30:f8:c4:1a:55:30:5f:93:d3:74:
6d:ca:9e:94:ba:6d:d2:ed:64:96:bf:5d:ca:b5:31:a3:c6:d5:
99:8a:01:0f:84:86:28:89:dc:07:da:a5:1d:64:fe:dd:d0:e1:
a8:ec:1a:62:33:f1:75:2f:63:ca:ac:f3:b9:7f:f1:af:d6:94:
e4:a0:c3:cb:b2:07:a7:a7:cb:a1:92:c8:ee:08:2a:2a:45:4d:
59:38:10:6f:ec:73:80:2c:1e:06:a4:e7:d8:a7:a3:13:b3:68:
ba:f5:69:18:01:93:0d:04:30:2a:9a:25:e5:8b:bf:f6:e6:55:
55:7b:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:29 2026 by rpki-client