
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/3130332e35362e38302e302f32332d3234203d3e20313532303030.roa
File: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (raw, json)
Hash identifier: OYr7fPU7LqGA/4X0nRg4WLnhKqVCaQ39UeYK0Ag4/eg=
Subject key identifier: 99:3E:04:72:16:06:49:65:FF:0D:92:E4:57:15:3D:7D:EB:D5:B6:86
Certificate issuer: /CN=476A27F6557241F0C8B13CD6474412B065E838A1
Certificate serial: 4F5932B44F743126037F4E5DE3697BCED0D580FF
Authority key identifier: 47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/3130332e35362e38302e302f32332d3234203d3e20313532303030.roa
Signing time: Sun 03 May 2026 02:51:17 +0000
ROA not before: Sun 03 May 2026 02:46:17 +0000
ROA not after: Sun 02 May 2027 02:51:17 +0000
asID: 152000
IP address blocks: 103.56.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl
rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:59:32:b4:4f:74:31:26:03:7f:4e:5d:e3:69:7b:ce:d0:d5:80:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476A27F6557241F0C8B13CD6474412B065E838A1
Validity
Not Before: May 3 02:46:17 2026 GMT
Not After : May 2 02:51:17 2027 GMT
Subject: CN=993E047216064965FF0D92E457153D7DEBD5B686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:d5:f5:ea:a4:a2:61:0b:91:c4:36:65:a6:
fa:a2:3a:3b:78:13:ff:22:89:11:29:6a:81:d7:18:
1f:4d:e3:00:a3:2e:11:b6:00:7b:b4:33:fe:ee:2b:
10:3f:61:f2:2c:57:78:4a:a3:c4:a4:17:e5:a7:91:
5a:7a:c8:3d:06:c3:82:87:39:a7:9a:3d:c3:74:08:
c9:c2:b7:64:7f:d7:bc:b3:55:ea:af:8b:26:29:09:
9e:89:c0:1f:78:09:b6:01:63:7a:66:00:06:df:71:
8d:01:25:fa:d2:5e:52:b1:1f:76:bd:9d:2e:63:af:
0a:bc:21:67:25:c9:f1:47:e8:bb:4f:a6:22:a7:87:
3a:e4:97:24:f2:50:dd:e7:0e:dd:9c:ed:98:6c:f2:
c4:77:57:af:33:60:4e:3c:a7:90:78:33:a6:9b:d6:
d9:dc:b8:78:b6:18:43:46:af:56:06:b1:ea:96:87:
2e:bf:d4:60:62:85:8c:94:fe:6a:07:6e:ac:9b:7f:
7c:fb:ba:de:c7:dd:75:d1:f7:5f:4f:0a:85:27:a8:
7e:cd:80:75:5f:e3:a4:38:31:3d:7f:e7:d8:8d:4c:
77:3f:5f:a4:d2:a9:c1:e6:36:13:17:b5:a8:0a:91:
a3:60:c8:4d:bf:0e:6e:16:84:a1:82:f4:45:2f:ad:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3E:04:72:16:06:49:65:FF:0D:92:E4:57:15:3D:7D:EB:D5:B6:86
X509v3 Authority Key Identifier:
keyid:47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/3130332e35362e38302e302f32332d3234203d3e20313532303030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.80.0/23
Signature Algorithm: sha256WithRSAEncryption
44:b7:d4:47:76:ee:cf:17:9a:2f:bf:10:fc:2e:00:09:3b:f2:
28:74:65:ee:a8:d1:62:1b:61:65:46:95:b0:87:1e:f1:14:39:
e0:2f:9e:4d:25:62:f3:13:d2:30:26:d5:b3:30:31:8d:fd:8c:
2f:f7:82:f1:cf:f1:d7:2f:36:a4:69:a4:a8:52:e8:f0:9c:90:
50:75:32:e8:e0:49:af:19:9f:ca:d3:52:59:28:8b:52:98:d0:
f3:1f:b8:f7:d8:77:08:87:10:27:01:e5:2d:e3:3d:96:fe:26:
7e:76:4a:02:c2:3e:7d:cf:bd:da:dc:f4:f8:bd:e4:a4:dd:68:
0b:5d:f5:7c:d6:b2:3b:4f:f4:77:76:28:59:62:eb:3a:a0:01:
36:28:75:bd:0a:12:3c:4f:0c:38:e9:98:87:03:f6:f9:5b:33:
60:68:bb:ff:d6:aa:e2:7e:c3:24:2c:ba:d1:36:b9:1d:b9:ae:
fb:2d:93:d9:82:0b:64:dc:71:bb:d0:c4:d1:3c:af:9a:de:4a:
63:da:5d:f8:76:fa:e0:f4:3c:5b:65:fa:79:a3:9d:e4:9c:62:
8a:45:2a:38:bf:29:d2:a3:37:15:98:3c:76:1a:40:65:c4:cd:
b5:d4:99:39:ca:4a:fb:9a:fa:cd:88:aa:66:3a:1e:c9:68:7d:
bf:f6:a8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:06 2026 by rpki-client