
$ rpki-client -vvf rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/3130332e35382e3136302e302f32322d3234203d3e203539323738.roa
File: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (raw, json)
Hash identifier: OGWj7w+3IXgMzGQNophA491Hc35+yTJ0Ol+4T3sD95Q=
Subject key identifier: D5:CF:45:CA:CD:CB:BF:B0:C5:C7:17:95:D8:2A:C2:B4:A8:D6:A6:A3
Certificate issuer: /CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
Certificate serial: 358187DAE935A882C033862AE975C83FCBE4D845
Authority key identifier: 76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/3130332e35382e3136302e302f32322d3234203d3e203539323738.roa
Signing time: Sun 03 May 2026 02:59:43 +0000
ROA not before: Sun 03 May 2026 02:54:43 +0000
ROA not after: Sun 02 May 2027 02:59:43 +0000
asID: 59278
IP address blocks: 103.58.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl
rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:81:87:da:e9:35:a8:82:c0:33:86:2a:e9:75:c8:3f:cb:e4:d8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
Validity
Not Before: May 3 02:54:43 2026 GMT
Not After : May 2 02:59:43 2027 GMT
Subject: CN=D5CF45CACDCBBFB0C5C71795D82AC2B4A8D6A6A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:94:8b:3e:d4:cf:b3:39:c1:c8:60:00:4b:
30:b9:f7:1b:93:b9:0c:56:80:b8:06:75:d4:cd:84:
da:38:77:40:be:e4:1e:a2:ac:a4:30:d2:eb:25:36:
79:65:8a:2c:cd:49:a1:89:2a:d0:7d:38:e7:ab:c2:
7e:be:d2:91:c9:77:14:48:bc:e2:76:52:dc:b3:84:
26:37:de:f7:5d:b5:0c:94:7f:95:14:5c:e2:9b:6e:
9f:9a:34:1c:57:60:e7:b5:e8:77:6b:3c:c0:84:ee:
2f:ba:0e:62:14:94:57:fa:6c:c1:e4:6a:8a:ca:b8:
e9:3e:53:f1:e3:e8:c3:4b:67:5b:0b:46:74:49:05:
a4:c3:83:d5:be:1a:5e:a3:e4:12:bb:8e:d2:43:64:
8d:38:23:6a:03:4b:0d:af:53:41:0d:91:37:f3:78:
53:3e:dc:d9:fb:08:f8:9c:84:d6:28:72:fd:33:99:
42:b9:0d:9b:77:f4:1b:b6:0d:99:e5:e1:99:fe:e3:
2f:73:8f:6f:36:8b:89:d9:48:01:cb:e7:57:97:ba:
2b:51:22:17:ef:56:4e:23:10:8d:31:dd:5d:dc:d0:
b7:78:23:e9:cb:5c:05:cd:b4:71:1c:13:eb:cc:af:
12:99:35:d3:60:c3:f3:41:5c:38:c7:8d:63:9b:7a:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CF:45:CA:CD:CB:BF:B0:C5:C7:17:95:D8:2A:C2:B4:A8:D6:A6:A3
X509v3 Authority Key Identifier:
keyid:76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/3130332e35382e3136302e302f32322d3234203d3e203539323738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:5f:55:f3:3b:7e:d0:f5:de:ef:cc:66:64:a5:94:da:8f:e6:
21:21:02:75:fa:ca:bc:a9:78:cf:f0:77:99:fa:bf:9a:ff:43:
b0:0f:cd:15:50:51:0e:11:6c:3b:7d:bf:11:90:6d:0c:83:f4:
6c:58:c9:57:ed:75:a4:86:74:f2:39:d1:1f:19:4b:13:5f:d9:
24:92:af:4b:9c:42:9e:e2:c0:f4:03:97:2f:bc:57:56:c4:d4:
1a:19:a4:a6:6b:20:f8:6a:d8:4b:4b:9d:69:b6:d0:02:6d:68:
b7:c3:9c:f7:71:e6:99:7c:8e:4d:ea:c3:64:b0:3d:fe:98:fa:
94:e1:a3:07:59:0e:31:be:c8:11:7b:8c:96:08:eb:f4:40:02:
7d:61:cf:37:b1:03:6b:63:0e:47:23:89:58:de:e7:f1:ef:f9:
04:41:66:e1:df:1a:92:8c:2a:c7:4e:a6:19:21:93:23:e7:42:
0b:a8:13:91:72:11:9d:4f:d2:d8:d9:b5:dd:07:5b:ce:f1:6c:
85:df:ed:a5:60:6b:90:21:2d:6d:e6:c5:92:5a:65:da:44:98:
84:ab:a4:fe:79:0c:2b:9b:c9:55:06:07:fb:7a:29:d1:06:78:
0c:c2:13:2e:cd:8d:42:fa:22:16:3a:c5:d6:08:11:c4:97:ae:
ec:56:fe:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:33 2026 by rpki-client