
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa
File: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (raw, json)
Hash identifier: bFOzzHMeNiibUnZ6L+hq8KLmZQjQupaRQAA5Pf20Elk=
Subject key identifier: B8:8B:A9:48:AB:C1:87:3D:4F:46:96:BD:D2:76:5C:04:D8:5C:11:7D
Certificate issuer: /CN=883B1118323CCC5736EA818FCCFAFAA5F6346633
Certificate serial: 7BDD1541F8FC387D59B0ACCDF61DC725A777C878
Authority key identifier: 88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa
Signing time: Sun 03 May 2026 02:36:56 +0000
ROA not before: Sun 03 May 2026 02:31:56 +0000
ROA not after: Sun 02 May 2027 02:36:56 +0000
asID: 132663
IP address blocks: 103.26.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl
rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:dd:15:41:f8:fc:38:7d:59:b0:ac:cd:f6:1d:c7:25:a7:77:c8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883B1118323CCC5736EA818FCCFAFAA5F6346633
Validity
Not Before: May 3 02:31:56 2026 GMT
Not After : May 2 02:36:56 2027 GMT
Subject: CN=B88BA948ABC1873D4F4696BDD2765C04D85C117D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:6a:28:26:d0:cf:31:d9:45:23:38:a0:46:
23:bc:a9:75:e6:af:39:a2:15:37:f0:c9:6f:41:44:
28:be:d4:fe:fb:92:f8:46:5e:a0:2e:85:02:7c:36:
fc:97:4f:27:62:05:d6:2c:28:f8:4e:b8:ad:78:eb:
a5:ab:9b:f9:79:7f:cb:39:2d:7d:dd:a3:d3:3f:35:
a6:d7:eb:2f:2c:7c:56:87:d2:54:b9:2c:ce:db:ca:
11:18:f2:f2:21:14:69:31:01:07:1d:19:c9:0e:43:
9a:fb:ae:11:79:13:0f:7d:68:ff:c5:37:3f:ea:c8:
67:b7:58:d6:db:0e:80:40:63:d8:47:06:e6:d3:ff:
ea:b2:c6:ed:a8:95:98:ce:68:09:4d:3a:32:95:92:
05:1e:5d:c6:ca:1e:46:52:63:9f:f9:e3:dc:88:ab:
56:30:b7:ba:a3:84:ab:8a:04:55:20:f6:f2:58:d0:
06:46:8c:66:7c:fb:64:5d:f1:c7:f6:ab:81:cf:29:
ec:e1:9d:16:b5:71:b5:6d:8c:e2:a7:2a:4a:d5:e3:
e7:0a:fe:30:86:60:97:35:ac:da:14:a7:de:01:32:
96:97:65:c3:7d:4e:87:9f:c5:b3:cf:3e:5e:43:28:
3c:b7:c3:56:e0:fb:63:d6:aa:fa:a2:32:48:75:53:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8B:A9:48:AB:C1:87:3D:4F:46:96:BD:D2:76:5C:04:D8:5C:11:7D
X509v3 Authority Key Identifier:
keyid:88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.26.131.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:5d:42:62:70:d0:2b:49:71:1a:e1:04:be:31:04:4e:cc:ef:
c4:f3:ae:90:41:cb:51:3c:c6:66:ed:75:1a:56:d8:5d:8d:7b:
80:56:11:8a:2f:b0:ab:30:9b:a0:61:a8:95:6f:d2:82:3a:9f:
d3:b6:d3:ff:6e:8e:be:12:25:56:f5:b9:39:29:e5:39:d3:e6:
78:0d:c1:ed:2b:9b:9f:bf:b5:8b:f4:bf:26:87:b3:fe:eb:9f:
83:fd:05:d6:fa:02:30:1f:19:44:e0:fc:88:72:0c:4e:01:17:
e7:b8:65:14:92:60:35:2d:e6:f2:ea:80:b6:5c:89:c4:46:20:
cd:cf:c4:a7:4b:3f:12:1a:c3:49:b5:2f:b5:3e:92:84:d2:df:
33:32:18:1d:db:a8:30:2f:28:34:cc:f2:8d:23:00:fb:29:27:
15:06:85:f5:5b:88:2e:a4:9a:cf:62:02:40:e2:0a:f5:81:b8:
b8:bf:08:f8:66:94:ac:05:b4:e0:85:b2:f3:c2:33:e7:5e:39:
0d:16:80:78:cf:2d:f7:60:43:31:e3:80:7c:8a:d7:37:99:82:
3e:6b:e4:dc:a7:ff:7a:0d:d7:29:94:2e:56:0c:4f:8e:d4:fa:
6e:c4:d7:67:f4:de:d9:20:90:53:36:2e:f8:d9:a9:95:c5:7d:
71:fc:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:56 2026 by rpki-client