
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa
File: 3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa (raw, json)
Hash identifier: BL3YV8OyoAQ7j+EF73e3LAhx4M4vSUgHtEhY9UKiKNQ=
Subject key identifier: 41:BE:2B:25:9D:66:99:3C:7F:A5:DE:07:81:EE:AC:46:0F:43:5B:17
Certificate issuer: /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Certificate serial: 79EF276D9553BFE9F8E8CFAA4604B2E7CC4CF044
Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa
Signing time: Sun 03 May 2026 02:49:56 +0000
ROA not before: Sun 03 May 2026 02:44:56 +0000
ROA not after: Sun 02 May 2027 02:49:56 +0000
asID: 138139
IP address blocks: 103.133.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ef:27:6d:95:53:bf:e9:f8:e8:cf:aa:46:04:b2:e7:cc:4c:f0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Validity
Not Before: May 3 02:44:56 2026 GMT
Not After : May 2 02:49:56 2027 GMT
Subject: CN=41BE2B259D66993C7FA5DE0781EEAC460F435B17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:0c:89:cb:9f:58:bb:d5:53:6d:20:16:6c:
b0:f0:7f:c7:ef:ee:7b:a6:20:6e:c2:ac:0c:71:53:
bf:bb:50:b2:14:96:48:8c:2b:6f:fc:83:7b:0f:a3:
0f:d9:f4:46:ca:18:a7:f7:7c:27:ee:76:d0:19:07:
7d:b7:52:a6:28:2a:1a:86:6a:e1:9e:6d:bc:e9:81:
e1:84:e6:8d:cc:21:92:93:54:30:62:2a:ee:75:92:
e0:55:0c:fa:71:37:5b:a0:85:7f:1c:57:1c:45:c1:
40:03:6b:3d:4f:67:7d:c5:5a:7a:ae:cf:e8:c6:ca:
74:16:49:33:35:aa:db:2e:f4:97:8f:d5:d2:8a:b1:
ab:f2:5d:54:80:74:21:75:a9:40:b7:87:42:29:ef:
74:c1:f5:88:8e:31:f4:44:4b:a1:f1:b9:ea:40:ab:
7f:55:8b:41:0e:5e:3b:83:29:bd:a2:4a:81:42:5b:
ca:6e:a5:41:0f:fb:9d:6b:85:2f:89:ee:7a:6e:ab:
0f:1c:dc:ac:cd:4c:b7:db:46:45:7c:b6:3e:77:90:
51:b5:52:1a:5b:91:33:10:0e:f8:68:85:8c:26:69:
0c:c8:5c:3f:9f:e5:08:4d:50:98:aa:41:3d:67:3c:
2f:e4:7b:36:ed:d1:13:00:d4:01:f9:71:c7:b8:ad:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BE:2B:25:9D:66:99:3C:7F:A5:DE:07:81:EE:AC:46:0F:43:5B:17
X509v3 Authority Key Identifier:
keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.144.0/24
Signature Algorithm: sha256WithRSAEncryption
43:50:fa:62:8d:d8:43:4c:7d:3e:e5:3f:e7:e2:49:1d:64:a2:
67:41:4e:19:f6:55:9b:be:22:1d:bf:7d:36:32:04:6e:b7:8a:
b8:8e:98:40:15:44:57:26:aa:cf:c7:fb:dd:96:a3:a9:3f:49:
5f:b2:e7:c6:69:34:4d:88:47:c4:16:25:b1:33:80:b7:42:9d:
77:02:28:9d:92:ca:2a:2e:a3:24:a0:5f:d9:f0:7e:df:b0:41:
f0:90:fa:08:5c:ec:fe:57:a4:5f:de:d9:ce:95:ca:eb:1d:27:
bb:58:36:86:c9:76:5c:e7:a8:73:85:c8:a0:b3:52:ac:92:35:
25:d3:b4:dd:df:a4:84:de:dd:5c:0c:a5:75:87:f4:cb:a7:fe:
6b:f0:49:34:a8:92:40:1d:3d:d4:f5:d9:8a:43:f0:ed:c4:33:
51:62:00:8a:5b:e7:80:e4:1e:4c:c4:d1:98:38:de:26:20:51:
94:b4:2f:8b:0e:f9:a6:2e:84:bd:8d:86:70:df:cf:15:8e:46:
36:1a:06:5e:63:16:51:4b:f7:31:89:c8:a3:1b:d6:46:35:c4:
77:be:07:d8:1a:25:eb:4c:dc:a6:c2:e2:18:e9:5b:b4:30:05:
18:2d:7f:3f:13:4e:74:6d:26:61:b4:9e:52:95:83:e5:f5:ef:
6d:02:de:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:40:19 2026 by rpki-client