
$ rpki-client -vvf rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/3130332e35332e37362e302f32322d3234203d3e20313333383137.roa
File: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (raw, json)
Hash identifier: gNsJ7E8Wxy2p/7sU5QpT/62BpjOz3T6D3tTX9O4/j10=
Subject key identifier: BE:FD:A4:CF:5B:66:00:40:61:12:BD:77:72:16:D3:03:61:B0:2C:E9
Certificate issuer: /CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3
Certificate serial: 113CBA6FCEA96EB537AD82A0C4F3B043EDA5C855
Authority key identifier: 48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/3130332e35332e37362e302f32322d3234203d3e20313333383137.roa
Signing time: Sun 03 May 2026 02:40:11 +0000
ROA not before: Sun 03 May 2026 02:35:11 +0000
ROA not after: Sun 02 May 2027 02:40:11 +0000
asID: 133817
IP address blocks: 103.53.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl
rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:3c:ba:6f:ce:a9:6e:b5:37:ad:82:a0:c4:f3:b0:43:ed:a5:c8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4885E75D6B0A938F5FEE35FABA26DEA08AF687D3
Validity
Not Before: May 3 02:35:11 2026 GMT
Not After : May 2 02:40:11 2027 GMT
Subject: CN=BEFDA4CF5B6600406112BD777216D30361B02CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:93:73:40:14:b9:67:58:41:bd:53:b2:b8:
80:30:80:2c:30:be:fd:24:1e:eb:4b:b4:20:8f:d4:
ba:b9:07:f8:05:53:ef:18:b4:03:10:87:73:cc:f6:
a9:ec:9d:1f:0e:00:21:e1:99:24:12:ef:cf:b9:b3:
53:b3:16:91:a3:ab:ab:36:d6:74:cc:b7:c8:20:31:
92:a3:ee:0b:a5:56:3c:c2:bb:4c:71:4c:28:d4:5d:
ac:02:2e:71:40:31:a1:33:fb:44:43:73:63:d6:8b:
68:9f:8e:4e:ca:a5:5c:35:6b:31:c2:93:f1:9f:43:
e1:e4:0e:ab:af:b9:4b:77:30:bf:2b:a0:36:0a:0c:
33:7e:b0:aa:11:07:7a:0f:67:d3:fb:30:cf:12:29:
78:a2:17:ff:61:db:0b:25:28:bb:ef:30:d5:22:c3:
94:8f:64:d3:cc:e8:d1:a0:85:e6:e9:c4:99:57:f2:
6c:ff:33:6a:87:dc:4c:c0:4f:ae:34:e1:cb:65:82:
1c:04:7e:ca:44:3c:51:d0:f8:eb:71:27:ea:b4:d0:
7b:52:da:0d:4b:5d:a5:3d:fd:08:d3:1d:75:86:01:
c0:9e:ea:da:5c:e5:50:1d:73:cb:a0:37:7d:20:c9:
0c:fb:c3:d4:c7:a4:0c:63:d7:b5:82:90:ba:49:35:
3b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FD:A4:CF:5B:66:00:40:61:12:BD:77:72:16:D3:03:61:B0:2C:E9
X509v3 Authority Key Identifier:
keyid:48:85:E7:5D:6B:0A:93:8F:5F:EE:35:FA:BA:26:DE:A0:8A:F6:87:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4885E75D6B0A938F5FEE35FABA26DEA08AF687D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/3130332e35332e37362e302f32322d3234203d3e20313333383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.53.76.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:2a:5e:12:70:d2:dd:b3:3d:ec:7d:e5:b4:35:f1:ba:ad:40:
1e:f9:a4:83:05:5d:08:52:53:53:d0:24:41:72:34:89:09:d7:
fb:91:0f:07:aa:b7:bf:64:34:05:dc:ec:62:d6:fa:bd:d6:67:
0a:87:9a:28:7c:2a:9a:de:b8:3a:35:72:65:37:44:62:a6:eb:
56:f7:31:b3:a1:dd:27:1a:d3:91:16:09:d3:ce:fb:ac:a4:a5:
06:d0:fe:61:ea:d6:c0:0f:64:ec:70:17:2a:88:e9:9a:a1:be:
be:11:37:2f:98:ed:2a:d0:33:6b:12:2e:de:f4:04:1d:40:d2:
ee:a4:f6:4b:37:51:25:bf:39:6b:7d:48:41:9f:61:1d:d8:76:
ac:f8:69:13:f4:9e:e7:e9:97:8f:be:bf:f9:55:90:ac:0b:29:
da:2c:60:aa:ee:41:40:90:47:78:0c:7c:2e:46:45:bc:19:a6:
45:fa:b1:76:24:bb:97:f6:b8:09:0b:71:09:0d:18:cf:3a:4b:
de:49:88:22:f5:e2:e6:b4:aa:ca:88:73:50:c2:2b:ef:af:38:
72:02:fb:37:59:6e:d7:77:22:67:52:5b:1f:4c:b4:c8:01:3e:
e2:93:33:94:a4:9c:bb:f0:23:89:29:68:0d:d5:f3:eb:46:07:
c6:31:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:41 2026 by rpki-client