
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa
File: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (raw, json)
Hash identifier: XOxY41uvBdSNzSAGeoheHPNQsOiig6loN0GxpT95Je8=
Subject key identifier: 20:B9:F3:DD:A9:B2:30:F1:24:C6:52:0E:92:5E:9E:DB:CE:9E:47:7F
Certificate issuer: /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F
Certificate serial: 5D9D6D1CD722B2059ED308D7A16141648B696C87
Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa
Signing time: Sun 03 May 2026 02:34:27 +0000
ROA not before: Sun 03 May 2026 02:29:27 +0000
ROA not after: Sun 02 May 2027 02:34:27 +0000
asID: 139419
IP address blocks: 103.144.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl
rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9d:6d:1c:d7:22:b2:05:9e:d3:08:d7:a1:61:41:64:8b:69:6c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F
Validity
Not Before: May 3 02:29:27 2026 GMT
Not After : May 2 02:34:27 2027 GMT
Subject: CN=20B9F3DDA9B230F124C6520E925E9EDBCE9E477F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8e:df:b4:25:fb:09:f4:fd:b4:f8:39:99:a0:
63:b6:48:dd:69:f3:13:26:3a:5b:ad:72:67:1d:13:
4d:9b:fd:c1:a2:d0:7f:bd:c4:53:a2:00:33:f4:f4:
d0:0f:37:8c:85:a7:5e:45:ab:3b:5d:b5:88:1b:3e:
ce:fd:5b:7f:33:ae:5f:57:22:eb:db:bf:dc:5e:fc:
1b:15:08:69:ec:20:32:71:5e:15:68:6e:84:ef:c2:
fc:6a:0b:dd:d8:21:77:07:ea:f7:38:06:aa:7f:9e:
ef:37:b2:e0:1a:b3:b9:8f:62:03:31:42:e4:99:23:
a9:05:4c:e6:71:f0:35:e7:df:a2:06:09:57:f3:37:
a2:e4:6f:63:c8:f9:1b:99:92:a7:2a:fa:43:5a:f0:
b9:41:b2:8a:ee:8a:07:78:3e:84:45:70:c8:11:3e:
71:a4:8d:cd:c7:36:b4:3a:8b:31:93:52:31:99:3e:
c8:3a:c9:1a:f3:84:e4:96:d8:9e:2e:0f:9b:93:b2:
14:25:d5:45:24:91:8d:7c:39:a7:40:42:0f:da:7b:
ab:c6:72:fc:fc:6b:de:a2:55:55:2f:cf:db:62:28:
e9:38:51:ef:56:a9:72:c0:3a:5a:2b:94:ec:95:59:
b5:87:6c:0a:a8:48:8a:0d:54:ec:cd:a3:cb:89:72:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B9:F3:DD:A9:B2:30:F1:24:C6:52:0E:92:5E:9E:DB:CE:9E:47:7F
X509v3 Authority Key Identifier:
keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.55.0/24
Signature Algorithm: sha256WithRSAEncryption
13:64:f0:2f:38:9d:3a:61:ff:3b:36:e0:31:be:d5:91:97:01:
9a:57:7f:4b:0b:ee:40:29:bb:e1:67:8b:38:80:b0:5a:6f:90:
a7:cf:c9:c1:36:06:25:d3:ad:11:10:31:41:74:6a:31:8b:f9:
30:82:bd:73:c9:32:7f:66:a9:e4:3c:d3:0c:1f:78:b1:f7:fd:
8d:83:3c:c0:df:48:99:6c:25:e3:cf:9a:18:91:b1:03:64:17:
61:57:8c:f7:0c:22:5b:4c:03:20:6a:68:c7:25:fd:1c:73:25:
64:53:d7:40:b9:5d:cf:aa:f7:0e:55:f5:86:57:e3:83:02:d2:
db:56:60:aa:3e:66:f1:af:09:34:4d:a7:d1:f7:a8:e6:ab:65:
4e:0b:ff:cf:0f:89:7c:1d:c8:2e:27:49:75:c3:33:ba:56:90:
c6:57:eb:bf:92:03:94:83:b2:5e:4c:99:36:51:82:b0:d3:be:
58:f2:d0:f1:c2:ea:40:45:ef:ea:4f:7c:b4:83:78:fe:fe:58:
c2:2b:3b:0a:42:62:99:04:81:01:78:fe:51:8c:f0:46:2f:b2:
be:8f:35:be:e9:f2:05:48:06:de:c2:a7:01:22:ce:fe:5d:39:
bd:7a:2c:3b:b6:3c:aa:0e:da:42:d3:89:c3:87:8a:f0:23:bb:
08:cf:c0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:06:28 2026 by rpki-client