
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/3130332e3232352e34342e302f32332d3234203d3e2034383030.roa
File: 3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier: 0VVs/sIJ5MrPj5d4PmHdMp47XW+kiXnvAYhD29LsMwA=
Subject key identifier: 11:F0:1B:66:0C:9E:D2:FF:9C:42:48:BA:F1:1F:A7:BF:87:7A:3D:2A
Certificate issuer: /CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
Certificate serial: 33DE61641FB79FA4B92911A0E873ED8CE058B9CC
Authority key identifier: 1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/3130332e3232352e34342e302f32332d3234203d3e2034383030.roa
Signing time: Sun 03 May 2026 02:36:21 +0000
ROA not before: Sun 03 May 2026 02:31:21 +0000
ROA not after: Sun 02 May 2027 02:36:21 +0000
asID: 4800
IP address blocks: 103.225.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl
rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:de:61:64:1f:b7:9f:a4:b9:29:11:a0:e8:73:ed:8c:e0:58:b9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
Validity
Not Before: May 3 02:31:21 2026 GMT
Not After : May 2 02:36:21 2027 GMT
Subject: CN=11F01B660C9ED2FF9C4248BAF11FA7BF877A3D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:81:f7:f4:6b:9d:06:b2:b1:6c:13:7a:61:
ab:31:d1:44:cd:14:e0:ac:8b:31:34:89:56:8b:f2:
59:24:20:ee:aa:02:2d:01:2c:11:f1:76:8c:28:0a:
9c:f4:c4:8d:07:ec:6e:16:54:2c:09:51:f5:67:ef:
d2:a8:25:de:11:50:04:67:76:fa:96:49:06:b5:01:
ce:cb:53:39:53:28:f7:61:31:a9:0c:7b:f6:1d:26:
e6:17:1c:1d:e6:43:85:5f:81:f0:24:68:d4:79:56:
fe:23:62:40:a1:12:bd:48:ed:21:2f:fc:46:04:de:
b7:91:e1:73:2f:a1:49:e9:2b:71:81:1a:9e:cc:c2:
7e:da:37:f8:a7:7d:b1:90:a2:7c:c5:8c:3f:b5:55:
06:20:aa:b0:17:12:27:5a:ba:0c:6b:6f:a3:8e:86:
e0:04:66:0a:2f:3a:0b:57:ad:56:8b:ef:32:ee:b3:
1c:56:fa:af:4b:9d:7e:63:a1:c7:64:d6:61:4f:0c:
cc:69:ec:0d:89:17:cd:49:e9:f2:8c:bd:6b:5e:13:
a7:66:b7:85:c0:33:b5:3a:5e:03:2b:7c:f7:01:c8:
ea:1b:70:07:be:92:00:a8:ca:8d:87:7b:c3:be:d0:
57:00:3a:1a:46:1e:0a:6d:81:e2:b6:6b:c7:8a:24:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F0:1B:66:0C:9E:D2:FF:9C:42:48:BA:F1:1F:A7:BF:87:7A:3D:2A
X509v3 Authority Key Identifier:
keyid:1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/3130332e3232352e34342e302f32332d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.225.44.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:8e:ca:0c:6b:3f:96:c7:c8:fc:2c:63:8d:6e:3d:fb:0f:8b:
0b:43:6f:a7:18:d2:79:02:71:43:d1:ed:d3:7e:1a:e1:67:97:
17:14:d2:e1:b9:80:61:46:29:c5:16:ac:7b:44:d3:62:fd:7f:
e8:6f:f5:4f:ec:e9:75:81:7a:76:98:28:98:4f:7c:44:58:9a:
a0:cf:d3:4f:01:dd:77:74:cf:c7:09:78:93:9f:95:82:87:60:
44:bb:12:18:38:0d:28:85:7a:06:06:be:1b:a2:39:7e:91:98:
cf:b6:99:4f:95:5d:c3:5c:dc:7e:bf:d8:77:70:89:20:55:ce:
ec:56:7a:09:ec:cf:85:b7:e7:29:43:ff:37:d4:39:24:60:49:
74:e1:cb:20:36:b4:11:26:5e:ea:20:57:75:45:4a:58:61:68:
32:20:c8:3e:d7:04:bb:61:fb:4b:b8:09:a6:3d:79:7f:30:95:
ee:9f:31:29:ec:d9:a6:0d:0a:fe:16:a3:e8:39:2a:9d:6f:1e:
aa:15:5b:8c:d5:cc:9c:ca:2b:60:c3:7a:4a:c4:fa:32:23:7d:
6b:76:e7:5c:9b:9e:3f:a2:b8:bf:a0:e8:c3:50:42:b8:90:62:
8b:c0:00:a2:a0:c0:27:8f:64:06:29:e6:ed:02:b5:59:84:fc:
e1:d8:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:25:53 2026 by rpki-client