
$ rpki-client -vvf rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa
File: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (raw, json)
Hash identifier: 4g4u+OEshRSiXLYJx+dZnyPxCHcmqZ8djxIy4N3tcCM=
Subject key identifier: 48:8E:7E:C4:DB:77:29:0E:C4:29:B7:24:5E:A0:96:2E:76:3C:5D:8C
Certificate issuer: /CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0
Certificate serial: 5F23D3324E011738588D002790107E30E14F12DE
Authority key identifier: 5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa
Signing time: Sun 03 May 2026 02:33:31 +0000
ROA not before: Sun 03 May 2026 02:28:31 +0000
ROA not after: Sun 02 May 2027 02:33:31 +0000
asID: 141058
IP address blocks: 103.36.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl
rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:23:d3:32:4e:01:17:38:58:8d:00:27:90:10:7e:30:e1:4f:12:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0
Validity
Not Before: May 3 02:28:31 2026 GMT
Not After : May 2 02:33:31 2027 GMT
Subject: CN=488E7EC4DB77290EC429B7245EA0962E763C5D8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:a4:30:a2:b9:b4:a6:7c:1e:38:ed:ec:18:
68:6c:a7:64:3d:60:07:58:8e:7d:72:30:ff:19:b7:
5c:67:58:04:db:45:d9:25:29:3b:bd:44:40:2b:a9:
dc:6f:89:ea:5f:e3:0b:ed:3c:4c:ac:bd:a9:c8:e8:
62:f7:18:01:35:4e:82:64:de:3b:e4:ff:f5:dd:ad:
7f:23:d2:5f:6d:8a:16:6e:89:5a:14:26:13:38:4e:
28:2f:53:d4:2f:5f:77:89:3a:8d:9a:02:e9:7f:88:
55:df:1a:4e:77:1e:b9:ad:10:1c:c2:28:91:40:e9:
a9:b3:97:b0:9d:76:34:af:71:ea:34:99:bd:37:87:
ee:a4:84:e8:73:3b:94:7d:0a:d5:0b:99:01:e1:ab:
d9:13:f8:71:47:23:69:7b:e7:cc:5c:31:55:a3:cc:
8f:d0:09:ab:24:71:cd:a9:45:62:be:4c:68:02:1c:
ce:ef:3d:6b:fa:e0:51:08:6e:ce:ec:3b:7f:8e:f5:
18:78:7f:bf:f8:9c:0a:67:51:bc:6b:31:0d:80:1f:
76:57:7c:2d:b9:73:91:2a:71:0b:44:8d:84:ae:47:
9e:02:e9:22:23:3c:50:68:d5:a2:4d:de:31:d9:78:
94:97:19:8c:42:af:ff:89:5f:a9:69:2a:fd:dd:be:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8E:7E:C4:DB:77:29:0E:C4:29:B7:24:5E:A0:96:2E:76:3C:5D:8C
X509v3 Authority Key Identifier:
keyid:5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.250.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f5:7f:87:bd:8d:98:4b:17:76:4c:fb:30:46:a2:5c:21:66:
a3:66:37:5f:20:77:48:5d:58:a6:41:e1:d8:74:73:cb:d2:69:
66:27:ce:0f:be:28:0b:ce:c6:21:8f:81:75:85:3c:c7:04:52:
b3:3f:28:1e:d9:dc:5c:f2:84:8a:14:c4:69:b9:b1:8f:19:f8:
7a:0e:e2:20:f4:16:3a:04:9a:fe:b5:ad:d8:ee:4e:94:52:b6:
15:f3:70:2a:32:84:77:07:fc:b0:45:57:13:e8:66:43:c1:65:
8d:f2:fc:20:33:65:4f:06:b1:87:da:53:44:c7:d9:44:c7:59:
a1:8b:59:21:0d:0a:67:7b:23:bc:fa:63:0f:70:2a:06:c7:ed:
0a:97:c8:75:16:7d:b5:20:f3:c5:a0:75:82:86:9e:9f:92:fd:
f2:1d:7a:35:60:d9:8f:9c:df:05:2a:ca:7b:9e:ff:32:a9:5b:
a0:41:75:5e:7c:58:a1:33:f2:f1:eb:55:c9:88:e4:6b:11:7f:
d9:ba:7b:64:7f:1e:b0:bf:80:47:a0:ff:85:71:33:14:10:04:
ec:ed:e3:29:44:8f:82:07:49:c7:ef:6b:93:df:dc:2f:31:3e:
51:57:69:93:fc:c1:fc:34:35:37:e0:a7:40:f5:0a:e1:ee:2d:
2e:82:1a:5e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUXyPTMk4BFzhYjQAnkBB+MOFPEt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFFN0Qy
Rjk1QTBDMDAeFw0yNjA1MDMwMjI4MzFaFw0yNzA1MDIwMjMzMzFaMDMxMTAvBgNV
BAMTKDQ4OEU3RUM0REI3NzI5MEVDNDI5QjcyNDVFQTA5NjJFNzYzQzVEOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiKqQworm0pnweOO3sGGhsp2Q9
YAdYjn1yMP8Zt1xnWATbRdklKTu9REArqdxviepf4wvtPEysvanI6GL3GAE1ToJk
3jvk//XdrX8j0l9tihZuiVoUJhM4TigvU9QvX3eJOo2aAul/iFXfGk53HrmtEBzC
KJFA6amzl7CddjSvceo0mb03h+6khOhzO5R9CtULmQHhq9kT+HFHI2l758xcMVWj
zI/QCaskcc2pRWK+TGgCHM7vPWv64FEIbs7sO3+O9Rh4f7/4nApnUbxrMQ2AH3ZX
fC25c5EqcQtEjYSuR54C6SIjPFBo1aJN3jHZeJSXGYxCr/+JX6lpKv3dvo7PAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUSI5+xNt3KQ7EKbckXqCWLnY8XYwwHwYDVR0j
BBgwFoAUWsf9wTgOmDOfKNvcV7IefS+VoMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTNiODU4ZjYtZGUyMC00MTIxLWJjZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEz
ODBFOTgzMzlGMjhEQkRDNTdCMjFFN0QyRjk1QTBDMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81QUM3RkRDMTM4MEU5ODMzOUYyOERCREM1N0IyMUU3RDJGOTVB
MEMwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUzYjg1OGY2LWRlMjAtNDEyMS1i
Y2VhLTkwNzZlZGNjYzA5Ny8wLzMxMzAzMzJlMzMzNjJlMzIzNTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyT6MA0GCSqG
SIb3DQEBCwUAA4IBAQCU9X+HvY2YSxd2TPswRqJcIWajZjdfIHdIXVimQeHYdHPL
0mlmJ84PvigLzsYhj4F1hTzHBFKzPyge2dxc8oSKFMRpubGPGfh6DuIg9BY6BJr+
ta3Y7k6UUrYV83AqMoR3B/ywRVcT6GZDwWWN8vwgM2VPBrGH2lNEx9lEx1mhi1kh
DQpneyO8+mMPcCoGx+0Kl8h1Fn21IPPFoHWChp6fkv3yHXo1YNmPnN8FKsp7nv8y
qVugQXVefFihM/Lx61XJiORrEX/Zuntkfx6wv4BHoP+FcTMUEATs7eMpRI+CB0nH
72uT39wvMT5RV2mT/MH8NDU34KdA9Qrh7i0ughpe
-----END CERTIFICATE-----
Generated at Wed May 13 05:57:39 2026 by rpki-client