
$ rpki-client -vvf rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: vc1a0hkgw07q2g/3N/OSu/ce4WygjulqelJe6kgXLWg=
Subject key identifier: 33:DE:F5:50:51:55:16:F3:C4:35:AC:21:FC:A4:ED:BE:4D:55:14:61
Certificate issuer: /CN=4758527FF3B22322A18B7C6E96C4B735849522DD
Certificate serial: 42D2955F1DB8F068E6334B03F11011C220C83FA8
Authority key identifier: 47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa
Signing time: Sun 03 May 2026 02:44:26 +0000
ROA not before: Sun 03 May 2026 02:39:26 +0000
ROA not after: Sun 02 May 2027 02:44:26 +0000
asID: 135478
IP address blocks: 103.121.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl
rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d2:95:5f:1d:b8:f0:68:e6:33:4b:03:f1:10:11:c2:20:c8:3f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4758527FF3B22322A18B7C6E96C4B735849522DD
Validity
Not Before: May 3 02:39:26 2026 GMT
Not After : May 2 02:44:26 2027 GMT
Subject: CN=33DEF550515516F3C435AC21FCA4EDBE4D551461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:7d:2c:cc:d7:a8:4c:81:8d:91:f3:bc:15:
20:fd:32:46:43:01:2b:72:26:7f:93:f9:49:cd:1d:
37:e8:b3:b4:64:43:7a:b6:a8:c2:f0:a7:6f:ca:6e:
48:74:1d:bf:e3:5d:be:20:6f:7b:50:99:7d:62:a1:
86:99:95:c0:71:76:92:fc:9b:41:96:44:84:3d:10:
d2:14:65:6a:df:c4:6b:39:60:aa:de:09:67:31:8f:
a1:3d:1b:70:f1:94:d2:77:62:e5:3d:87:76:bb:13:
08:4d:d5:28:b3:b3:39:5a:2c:20:3b:ff:6e:5c:21:
16:8f:eb:4e:df:c3:4f:e4:48:64:2d:f5:c2:30:43:
83:f0:f7:56:9f:12:ba:fa:e7:49:05:8c:b4:09:84:
8c:28:04:66:51:6b:dc:c5:8b:91:12:9e:b3:a6:f5:
80:d2:6b:5d:3f:ca:89:ab:42:cf:43:97:c0:50:f6:
32:83:e3:1f:30:7a:77:3f:8e:a9:39:5e:c9:f6:40:
20:d3:29:e5:7e:b0:7b:85:c1:1e:47:39:ce:e6:6c:
5d:22:55:8c:ff:5b:5a:a7:f1:8f:55:dc:7c:80:c5:
42:63:d0:67:66:6b:2a:44:84:c0:33:55:b2:7d:48:
eb:cb:9a:ee:c0:2f:ea:a0:88:65:cd:d2:d2:0a:26:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DE:F5:50:51:55:16:F3:C4:35:AC:21:FC:A4:ED:BE:4D:55:14:61
X509v3 Authority Key Identifier:
keyid:47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.244.0/23
Signature Algorithm: sha256WithRSAEncryption
59:99:dc:ff:5c:c3:d0:53:e4:95:58:38:90:43:6e:1d:87:11:
f7:16:21:49:90:d8:aa:f1:b5:4c:a8:ea:e3:57:9d:49:eb:d6:
cb:56:c4:d6:a4:e8:ee:72:f5:ef:84:e9:0a:f4:57:11:11:ad:
87:c9:5f:5d:a3:4a:37:84:75:c1:1d:fb:64:cc:7b:59:eb:80:
ef:b4:96:22:92:8c:54:e7:ea:4c:60:94:f9:4d:dd:77:6f:d4:
6b:7a:73:70:83:24:29:76:d2:36:a8:fe:6f:91:35:4f:be:90:
23:54:d3:29:a4:a0:2d:70:a2:8c:ff:07:d4:38:a6:52:f8:f2:
3e:b2:3a:4a:69:1a:7c:a3:ec:77:f2:f4:fd:ee:33:b9:77:1a:
98:57:ca:82:e3:64:86:e3:11:c4:e5:08:20:0c:8e:7c:ce:2d:
ce:94:61:7e:2d:41:07:85:45:cc:91:48:df:84:1b:c3:70:a4:
31:12:38:00:5a:86:35:5a:b4:ed:e5:65:55:a4:e1:7d:77:e9:
2e:f8:7a:70:a3:d5:ab:00:aa:ad:bf:d0:45:4d:4f:f3:86:a4:
fe:7a:f3:71:fb:26:e7:59:ac:35:a9:d6:5e:1c:fc:7d:06:76:
9e:ed:e7:39:a0:c2:6d:87:b3:75:fe:05:83:a1:db:47:f5:a5:
a3:2e:1b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:57 2026 by rpki-client