
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa
File: 3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa (raw, json)
Hash identifier: ezm2UyLDROJssp5IVp01JQcXbqSnetzdwENXlkiCFfE=
Subject key identifier: AF:F3:43:BA:10:06:D2:AE:D3:2A:B3:D4:7E:8C:87:A6:FB:D7:EF:42
Certificate issuer: /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Certificate serial: 6B9CF214D5E85DCBFB72FDCED878A0A5C19F711B
Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa
Signing time: Sun 03 May 2026 02:49:55 +0000
ROA not before: Sun 03 May 2026 02:44:55 +0000
ROA not after: Sun 02 May 2027 02:49:55 +0000
asID: 138139
IP address blocks: 103.133.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9c:f2:14:d5:e8:5d:cb:fb:72:fd:ce:d8:78:a0:a5:c1:9f:71:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Validity
Not Before: May 3 02:44:55 2026 GMT
Not After : May 2 02:49:55 2027 GMT
Subject: CN=AFF343BA1006D2AED32AB3D47E8C87A6FBD7EF42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:5d:5a:7b:25:21:0e:37:01:0e:a1:eb:7e:
ab:fa:93:78:1c:3f:89:58:19:6a:e6:29:26:a8:13:
bb:f4:08:8c:d3:6f:90:05:02:20:bb:8d:54:a3:c3:
b1:43:20:71:c6:52:0c:d7:f7:d7:c8:54:eb:91:de:
c6:e7:92:2c:86:bc:83:b0:bb:28:24:53:5b:93:6f:
d9:a9:88:08:02:9a:64:0d:60:1f:cd:6e:87:de:84:
08:5f:f1:92:bb:b6:0d:9b:6f:ce:16:8c:c1:af:ae:
98:ea:84:35:ee:32:0a:09:42:f4:4d:8c:ef:33:2a:
64:76:98:ca:c3:13:5c:7e:b1:0e:5e:d8:62:cb:4d:
6e:48:b8:99:f7:d0:25:31:4f:3d:6a:78:fa:d7:d3:
ae:20:ee:44:50:bb:0c:6e:7a:c5:c4:b0:48:bb:6f:
d0:79:79:ed:d4:d0:1b:a4:aa:05:a4:ff:d4:f9:7d:
c6:1b:1d:30:8b:63:b4:15:c3:1b:98:e4:49:19:37:
b2:92:ba:e3:08:c6:0c:ea:af:e3:2b:0b:2d:5e:5f:
a4:04:44:ac:ad:ab:32:ab:d1:17:cf:b4:ff:ec:de:
30:2d:9a:45:d3:a4:95:8f:e5:cc:80:27:65:18:58:
80:ea:62:a8:22:a2:84:41:a0:82:fa:3d:c8:4c:dc:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F3:43:BA:10:06:D2:AE:D3:2A:B3:D4:7E:8C:87:A6:FB:D7:EF:42
X509v3 Authority Key Identifier:
keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.147.0/24
Signature Algorithm: sha256WithRSAEncryption
82:92:2a:89:61:93:0e:de:14:3f:dd:a5:e7:79:26:51:74:3f:
0c:25:b2:99:c9:c0:c8:af:54:13:da:6e:5b:8f:9f:b6:d1:44:
ea:1e:12:38:70:77:bb:2b:a3:b9:c2:b6:55:46:bf:13:7e:9d:
04:e2:bd:72:bf:d9:d5:83:df:42:bc:db:7f:24:9b:af:32:22:
0d:3f:ed:67:f8:50:57:de:31:e7:0b:75:55:5f:07:73:4b:91:
91:5b:a1:f7:c0:4d:92:0b:d6:c0:94:d6:87:c4:82:78:40:72:
63:91:80:c3:7c:03:30:14:88:e5:19:c2:86:de:ef:b9:1d:d1:
47:4b:31:79:5f:d3:dc:43:57:29:dd:40:90:41:ca:68:dd:64:
f3:86:08:8d:f8:f7:c8:91:b5:30:83:5d:f6:5b:53:4d:3f:bc:
e8:65:d6:1d:db:9c:1c:97:f2:19:32:cc:0b:63:aa:66:d7:ab:
6e:ba:34:59:65:dc:00:df:0c:73:39:09:19:a0:89:b3:82:37:
95:c2:f1:2e:8d:d0:16:4f:e8:ee:ab:53:90:95:18:54:8a:9b:
6a:c4:38:7d:29:96:0b:c9:de:e4:1e:6b:c5:ba:ed:b1:e9:fb:
32:10:ff:61:d6:74:b5:a5:26:7f:36:72:c7:be:65:6d:05:41:
19:2d:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:33:23 2026 by rpki-client