
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa
File: 3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa (raw, json)
Hash identifier: 2MukM/v9aFusn7PyNb19gRvoMiBXFptvUWQBjx4XUa4=
Subject key identifier: F5:16:63:B3:A9:11:5E:70:40:18:CC:33:3C:A5:FB:B0:CF:A3:F1:F1
Certificate issuer: /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Certificate serial: 3F451C7853C2FC48A3036AF88B7BB7D64822A206
Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa
Signing time: Sun 03 May 2026 02:49:57 +0000
ROA not before: Sun 03 May 2026 02:44:57 +0000
ROA not after: Sun 02 May 2027 02:49:57 +0000
asID: 138139
IP address blocks: 103.133.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:45:1c:78:53:c2:fc:48:a3:03:6a:f8:8b:7b:b7:d6:48:22:a2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Validity
Not Before: May 3 02:44:57 2026 GMT
Not After : May 2 02:49:57 2027 GMT
Subject: CN=F51663B3A9115E704018CC333CA5FBB0CFA3F1F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:52:d2:4f:b3:e9:76:9e:52:f4:7c:f6:47:53:
dd:4d:34:53:cd:e5:4c:87:f3:6d:e8:3c:fc:43:5c:
7f:34:7d:3e:ec:01:3e:f2:4d:a5:ab:3a:6d:70:b7:
25:da:31:21:4b:e2:1d:00:b8:63:84:30:7a:1e:ba:
c6:71:2e:40:4a:44:a7:a8:3d:14:86:71:5a:29:e9:
89:6f:8e:23:65:71:bb:6b:db:f2:18:f0:1c:ef:28:
b4:bf:d4:d5:f6:00:51:cd:66:b8:92:9c:59:ae:f9:
56:64:35:5f:19:65:3f:77:df:7e:34:59:cd:58:4f:
39:6d:1a:2d:fd:f9:70:85:51:41:8c:a6:6a:e5:7f:
72:bf:ef:ef:d4:12:f4:b8:1d:42:82:a8:b4:14:9e:
52:58:07:c2:6f:2d:e3:07:13:40:09:45:fb:e5:38:
50:2d:1f:15:10:08:f0:2c:c6:1d:0a:05:b5:98:da:
14:fb:ca:9c:61:ab:3b:c3:50:1e:b0:ec:d7:30:ac:
ef:25:d3:55:0c:7d:8f:95:1e:35:3b:e9:5a:72:bb:
a7:0f:0a:e3:a3:c0:94:93:cc:dc:f0:05:98:8d:00:
a6:ac:2f:f0:89:93:7f:f3:e0:c7:96:ec:52:49:2c:
0b:fb:2b:38:df:cf:75:51:25:41:2d:b6:0c:6b:dc:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:16:63:B3:A9:11:5E:70:40:18:CC:33:3C:A5:FB:B0:CF:A3:F1:F1
X509v3 Authority Key Identifier:
keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.145.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6a:f9:c8:b4:f1:ba:2b:dd:7b:6e:55:2a:37:5e:a4:f3:70:
9c:a9:e3:04:69:3a:f5:97:fe:06:b9:8d:d3:1b:4e:b7:49:26:
d7:73:24:41:e2:4c:bb:17:d6:19:5d:a7:55:2a:1f:db:00:ed:
81:b7:e8:4a:9e:cd:5c:41:c0:3f:fe:3d:79:23:0e:0f:02:76:
f2:fa:26:c5:fa:27:b3:e5:53:8a:a0:7a:17:92:4c:a1:d7:75:
12:ae:f8:22:27:a5:ff:56:59:f1:34:0e:68:8b:6a:c3:38:e3:
9a:75:a6:59:e5:94:81:20:d1:e9:f2:44:af:3e:bc:76:ba:bd:
88:72:3c:d4:25:dc:38:5a:4a:76:b0:f4:ab:62:4d:e5:c3:e6:
f6:b5:e1:31:85:2b:7d:61:50:c8:f1:e5:d5:94:46:3a:e6:7a:
6f:94:35:cc:07:3c:6d:18:10:49:fc:77:76:66:6f:43:d6:91:
90:5f:4e:ab:2d:23:6a:74:5d:d4:f4:6a:a3:a1:84:eb:f7:d3:
c6:ab:e9:c3:e1:36:a7:82:f9:b3:46:40:a9:72:66:50:f6:ee:
38:9b:aa:14:69:23:92:d8:41:ff:44:e4:2f:57:14:6f:ba:33:
eb:df:df:c5:cb:6b:b7:7a:d4:5b:93:63:ff:eb:08:b0:36:5c:
37:22:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:31:38 2026 by rpki-client