
$ rpki-client -vvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa
File: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier: xuKK+GWHrh3/9399GplJKm6iNLAQ7HWW260dXuul/ZI=
Subject key identifier: 5D:43:B2:A9:11:80:52:54:1D:8E:F4:5D:0D:DD:54:42:65:9E:65:23
Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB
Certificate serial: 0B90EE0F6AB00E61FBA338AB0962C49C38D6D065
Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa
Signing time: Sun 03 May 2026 02:52:19 +0000
ROA not before: Sun 03 May 2026 02:47:19 +0000
ROA not after: Sun 02 May 2027 02:52:19 +0000
asID: 55685
IP address blocks: 103.247.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl
rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:90:ee:0f:6a:b0:0e:61:fb:a3:38:ab:09:62:c4:9c:38:d6:d0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB
Validity
Not Before: May 3 02:47:19 2026 GMT
Not After : May 2 02:52:19 2027 GMT
Subject: CN=5D43B2A9118052541D8EF45D0DDD5442659E6523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c7:67:d4:9e:79:6f:76:4e:ab:91:80:d7:3f:
ac:f3:e6:5e:b8:a4:d6:48:55:17:bb:a2:66:4f:29:
3e:c8:be:89:53:04:48:f8:1e:23:84:e0:2b:9e:e6:
8a:12:97:fc:62:ca:b2:52:b9:c7:eb:35:a9:46:7a:
3d:c6:de:a9:ae:09:54:fc:d3:a5:12:83:65:a8:94:
b8:d3:4f:92:cb:25:96:6c:b4:bf:6c:5f:04:59:78:
00:d0:bf:d1:44:06:1b:70:ad:ab:75:11:29:f8:c0:
29:6a:1d:b6:42:8d:ce:b0:5f:d8:ad:16:52:d6:7c:
07:bd:66:d2:bb:7b:49:d3:f5:d1:b0:cd:8a:57:9c:
7b:06:b7:fb:28:f1:9d:c4:b7:e7:3c:7c:8f:d6:a5:
58:55:7a:e9:ba:02:a6:12:ce:cf:f7:d8:28:ab:7f:
b5:ac:3e:5a:82:e0:86:de:20:60:43:04:c0:71:b3:
a1:f6:63:b1:6a:5c:2c:fa:cf:99:5a:66:e6:36:7d:
5c:f6:50:27:83:37:2d:93:aa:c6:ab:48:f8:e8:43:
2e:74:f0:17:5d:2e:2c:48:70:28:8f:fa:64:97:9a:
8d:87:6c:5a:97:e1:30:4b:68:61:78:04:38:31:68:
a6:55:1d:6f:c6:fd:d8:22:62:8f:69:c7:ab:92:b2:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:43:B2:A9:11:80:52:54:1D:8E:F4:5D:0D:DD:54:42:65:9E:65:23
X509v3 Authority Key Identifier:
keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34302e302f32342d3234203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:49:80:5c:4f:25:c2:fc:13:5e:98:bd:e3:b6:ea:e1:34:ad:
5f:00:38:63:f7:10:38:2d:85:8f:62:4e:b1:ce:1d:28:c1:c1:
70:58:c0:e4:a8:90:50:0c:87:bb:76:d0:aa:91:44:ae:7b:2b:
91:ac:79:c7:78:21:38:63:f9:5e:bc:7e:ce:1c:e0:62:fd:cb:
2e:a6:45:c6:7d:2c:60:2c:2e:ad:e8:2f:6c:62:fa:e3:27:0b:
05:54:4a:76:b7:9b:b7:53:1c:ac:73:93:dc:94:71:0f:f6:dd:
2f:05:30:e5:c4:9b:3b:25:41:07:33:78:f2:77:b7:71:7e:14:
a9:98:06:3b:3c:c6:53:7b:a7:0b:f5:e4:45:96:02:7f:fa:40:
0d:6f:8f:18:27:0f:57:17:b6:36:03:80:e3:0d:76:dc:32:7b:
9c:8e:5c:b4:a1:b6:f7:ad:46:6d:c0:93:19:c7:8f:09:f6:92:
de:5e:35:96:e7:3a:3a:c8:cb:c8:5c:d3:2f:aa:ef:a9:44:d2:
19:03:58:67:ef:3c:d8:75:8f:34:81:dd:5e:46:c0:ef:a1:9e:
c8:79:76:4a:86:ae:fd:95:e7:f4:c2:f4:dd:37:df:bd:b4:28:
65:b9:8b:07:77:e8:67:49:e6:6a:4b:de:bb:6b:64:a4:84:cd:
fd:c9:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:05 2026 by rpki-client