
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/3130332e34382e3132382e302f32322d3234203d3e203633383631.roa
File: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (raw, json)
Hash identifier: crz5wQlV27LIwISEyXo4hYXR+StXchnW3rusJFfd1fY=
Subject key identifier: 84:5F:A3:95:52:F7:BD:AF:99:7F:62:2C:B7:DD:C3:67:78:F9:E1:32
Certificate issuer: /CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526
Certificate serial: 0947A88836A7649D840D6B413FA3A0D49FA33623
Authority key identifier: 4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/3130332e34382e3132382e302f32322d3234203d3e203633383631.roa
Signing time: Sun 03 May 2026 02:54:20 +0000
ROA not before: Sun 03 May 2026 02:49:20 +0000
ROA not after: Sun 02 May 2027 02:54:20 +0000
asID: 63861
IP address blocks: 103.48.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl
rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:09:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:47:a8:88:36:a7:64:9d:84:0d:6b:41:3f:a3:a0:d4:9f:a3:36:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526
Validity
Not Before: May 3 02:49:20 2026 GMT
Not After : May 2 02:54:20 2027 GMT
Subject: CN=845FA39552F7BDAF997F622CB7DDC36778F9E132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:54:e2:ef:5d:7e:47:18:6e:b3:43:58:c4:
12:8b:10:77:94:41:5b:69:d1:f9:42:81:bc:c7:92:
d3:97:e4:9b:f3:53:1b:70:00:a4:92:57:99:60:2f:
af:0e:d2:4b:a0:87:b9:ec:f7:04:7f:97:77:bc:b5:
75:a3:ff:c2:81:a8:53:21:8a:dc:ba:f0:28:fd:48:
e2:5c:ba:ed:3c:9f:99:c4:c6:3b:64:b4:d5:52:f6:
6c:ba:4f:30:52:f7:18:28:0d:04:40:d5:31:68:df:
fa:22:c0:ca:23:bb:5a:2b:41:32:af:5a:9f:58:b9:
07:ac:30:5a:db:e7:9a:cb:5b:0d:3b:99:e8:57:14:
98:a4:b9:3f:13:91:11:84:ef:e4:ba:2e:61:ef:d7:
34:4b:80:65:3a:64:3f:b2:b5:2f:56:c2:56:d2:21:
55:97:19:22:b7:1d:ca:1a:32:2b:e6:29:81:67:69:
f7:b8:69:38:f2:40:b8:d0:5c:94:6b:b4:f5:42:3b:
66:ad:ae:ee:1e:aa:36:4d:09:48:45:7e:19:76:3a:
a9:1a:d6:b1:03:df:32:ad:6e:11:51:a5:75:b0:92:
2f:e9:a5:67:99:23:55:0c:9c:7a:f4:f6:d0:48:e4:
ce:91:9c:c3:bc:ad:d0:22:44:35:4d:14:79:5e:08:
2f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5F:A3:95:52:F7:BD:AF:99:7F:62:2C:B7:DD:C3:67:78:F9:E1:32
X509v3 Authority Key Identifier:
keyid:4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/3130332e34382e3132382e302f32322d3234203d3e203633383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.48.128.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:4d:99:76:f3:55:9f:5a:40:22:04:e2:de:b3:fb:1e:af:b4:
8a:67:f3:0f:28:fd:62:7a:14:e1:e7:ef:2a:45:e9:1f:38:e4:
51:3c:c8:1f:21:2b:63:97:06:4f:6b:82:6b:ca:dc:98:90:0d:
e6:2e:aa:60:65:96:94:f8:5c:dc:c6:18:70:e4:ad:9d:1a:4a:
9f:ad:bb:cc:f5:02:ee:24:ce:b3:45:96:1c:e1:7a:68:81:a4:
8e:ff:9d:6b:6d:d4:43:f6:a5:6e:7e:16:dc:52:83:c1:1e:a2:
0a:a7:dd:cc:c9:f2:a1:45:87:98:97:60:bf:8a:c5:d7:41:58:
da:1d:52:be:00:57:28:0a:d3:03:95:c2:d2:f1:d7:51:e8:37:
25:4f:7f:f2:4f:9e:b5:b3:95:c8:65:1b:26:09:67:b0:96:e4:
60:e1:e5:e9:79:ef:d7:8a:73:39:39:ef:d9:e6:fc:73:71:7d:
fd:71:78:8a:0d:b0:f6:ef:d7:3a:62:20:fe:e3:b1:39:d6:05:
19:07:90:21:6a:c2:a6:c1:99:92:98:2e:ec:f9:1e:a6:87:bc:
f4:e1:e0:3f:a5:06:e2:a3:1b:ea:fd:ec:f0:29:99:21:b6:74:
2f:f5:4e:66:08:ef:ba:e6:0b:80:8e:6f:6b:e0:b8:68:a9:2a:
5b:e0:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:16 2026 by rpki-client