
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3130332e3234352e33382e302f32332d3234203d3e203535363838.roa
File: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (raw, json)
Hash identifier: TX/EOsfX6vX1OpTsTM5A3FXSv9I/LcPHoG5Z7q7voYg=
Subject key identifier: DA:33:FD:DE:71:21:ED:DB:F1:34:D6:71:D1:B4:A7:CB:5A:2F:27:C1
Certificate issuer: /CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B
Certificate serial: 62A4EE691D9AA26CF66B798AD2C5DEFE5D369CA7
Authority key identifier: 3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3130332e3234352e33382e302f32332d3234203d3e203535363838.roa
Signing time: Sun 03 May 2026 02:45:25 +0000
ROA not before: Sun 03 May 2026 02:40:25 +0000
ROA not after: Sun 02 May 2027 02:45:25 +0000
asID: 55688
IP address blocks: 103.245.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl
rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 10:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a4:ee:69:1d:9a:a2:6c:f6:6b:79:8a:d2:c5:de:fe:5d:36:9c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B
Validity
Not Before: May 3 02:40:25 2026 GMT
Not After : May 2 02:45:25 2027 GMT
Subject: CN=DA33FDDE7121EDDBF134D671D1B4A7CB5A2F27C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:09:5a:ba:37:e7:e5:5a:b0:1a:0e:1e:52:f9:
9a:af:ed:56:af:40:06:a3:5c:29:d8:52:d4:e6:0d:
32:4c:b8:3a:f0:46:11:6e:92:65:e3:3b:5a:d5:9d:
12:4d:37:c1:5d:b4:55:84:a5:fd:32:c9:c5:14:79:
cb:63:e8:af:88:ee:40:85:05:22:d4:1b:a2:98:62:
2b:f5:e4:2d:67:1c:76:88:5a:d9:d7:f1:36:f0:92:
ce:de:83:6f:3d:5a:b4:7f:b0:1c:34:7c:99:c9:d9:
32:fd:60:65:32:10:f4:af:71:1f:f4:03:49:3a:ff:
60:00:82:b6:ca:1c:c2:99:46:d5:b5:b3:86:2b:12:
9e:5a:97:f3:e9:62:aa:ab:f6:a0:76:4f:24:78:e7:
a7:c6:ea:e9:cc:f6:b5:f1:a7:c9:1c:62:e7:9d:65:
8d:d3:10:70:3e:ea:62:b7:1d:c4:fe:d3:5e:c3:a8:
cb:cb:84:32:bc:85:23:46:16:8b:9c:38:2d:e9:c2:
86:bc:81:ae:93:a4:75:2f:ea:34:46:9c:10:e0:4f:
80:08:eb:d3:6e:41:45:52:ce:c4:13:a3:6e:87:85:
0e:bd:81:aa:10:d9:5e:a9:d5:03:c2:32:8d:f7:6a:
1c:96:9b:1c:a9:8f:d1:f3:5b:ec:06:80:37:b3:dd:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:33:FD:DE:71:21:ED:DB:F1:34:D6:71:D1:B4:A7:CB:5A:2F:27:C1
X509v3 Authority Key Identifier:
keyid:3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3130332e3234352e33382e302f32332d3234203d3e203535363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.38.0/23
Signature Algorithm: sha256WithRSAEncryption
36:58:74:92:6f:e4:f7:38:fa:b0:cf:75:0d:25:9c:cd:a2:0f:
f7:c6:ed:bd:7e:72:53:ea:a8:a4:b0:70:eb:5f:7f:e6:84:62:
88:cd:6c:60:90:9d:cf:cf:0f:5e:c1:a3:54:e0:bf:cc:c7:90:
32:45:ef:00:8f:6c:21:87:82:a5:5e:af:c3:28:d7:fd:9d:6a:
8b:b8:50:86:10:54:13:72:0f:42:95:0d:92:f6:18:6b:a8:c3:
75:d2:4d:59:5f:ef:1e:fa:76:5a:39:3d:b0:09:9a:4c:60:5f:
10:11:bf:df:22:35:01:79:1f:52:52:f2:a9:04:fa:47:35:bb:
ca:94:8b:e8:64:8b:39:c0:12:c7:e5:44:ec:e0:57:ac:6f:34:
1b:9b:26:63:4a:3d:b7:5a:99:37:8d:a1:6a:c4:e6:da:6e:2a:
9d:19:03:66:74:8b:16:a7:e7:2c:b6:21:1c:d2:e2:96:a0:14:
aa:a1:41:ab:94:d9:01:b8:22:a4:0b:29:14:53:e7:c3:7f:49:
d8:f0:dd:29:56:ae:bc:23:54:e3:85:d1:0e:3c:d2:9d:1f:42:
89:5b:eb:8d:d8:14:7f:ab:8f:77:d0:21:68:c8:21:18:4d:f9:
d2:c3:2c:34:ae:f6:58:30:f5:66:6c:bd:85:32:80:03:ef:85:
0b:71:69:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:34 2026 by rpki-client