
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa
File: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (raw, json)
Hash identifier: sW+l8TDeWzgFji1PeDbQ2pWWxA4Q2fxlWjumQ/6eJhY=
Subject key identifier: 07:3A:4E:55:DE:AF:2E:E6:09:B6:44:01:05:4E:1F:20:73:6F:0D:13
Certificate issuer: /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
Certificate serial: 2ECE5E5A9613DA5B8803D7C0E6137102E19711EC
Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa
Signing time: Sun 03 May 2026 03:00:22 +0000
ROA not before: Sun 03 May 2026 02:55:22 +0000
ROA not after: Sun 02 May 2027 03:00:22 +0000
asID: 135444
IP address blocks: 103.219.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl
rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ce:5e:5a:96:13:da:5b:88:03:d7:c0:e6:13:71:02:e1:97:11:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
Validity
Not Before: May 3 02:55:22 2026 GMT
Not After : May 2 03:00:22 2027 GMT
Subject: CN=073A4E55DEAF2EE609B64401054E1F20736F0D13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:d0:fd:40:42:2e:6a:a8:dc:1d:f3:50:7d:
a7:8a:10:e0:48:5c:a5:be:01:e2:7a:e6:41:7d:8f:
74:66:57:a4:64:b6:b1:ef:4f:69:43:2e:bb:12:e9:
84:15:11:be:25:96:f0:86:ae:a5:9b:c1:5a:23:33:
4d:ea:25:b0:a7:de:29:73:cb:fa:23:74:80:80:5b:
eb:e1:c6:76:32:6a:30:3f:9d:ce:04:8a:ea:03:cc:
d0:8a:fc:b1:21:34:43:61:37:a2:1e:89:a4:03:ec:
a1:8f:50:b6:89:57:1d:e1:f3:75:e8:7a:21:f3:ea:
bc:70:dc:ab:d0:50:7a:53:8d:77:10:b9:9a:14:bb:
e0:cb:cb:fd:5e:ee:6b:57:cd:9f:ac:c3:d4:44:03:
3b:96:f9:8e:89:ea:58:89:23:24:60:f3:32:e0:bf:
81:8f:cf:3b:92:d9:45:4e:be:98:8d:54:fd:9e:49:
d5:18:7e:2b:12:8d:ba:5a:cf:b2:79:e5:35:f2:d8:
63:66:89:69:69:aa:89:f4:06:c0:e2:27:4f:89:14:
6e:3f:66:ab:cc:e5:3c:2b:96:dd:6c:59:59:5d:b3:
03:2f:83:2f:8e:94:19:1f:3b:82:dc:b3:34:06:3b:
35:6c:0a:be:6e:a4:ba:d9:5a:c6:c1:e5:fd:b4:38:
5a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3A:4E:55:DE:AF:2E:E6:09:B6:44:01:05:4E:1F:20:73:6F:0D:13
X509v3 Authority Key Identifier:
keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.248.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:0e:65:a0:89:af:ed:88:8f:6e:19:bb:de:94:ea:39:35:9e:
1e:2f:89:4d:57:da:9b:94:53:38:9c:c7:0a:91:b9:d9:b3:32:
98:ad:03:ac:3f:70:04:64:10:ff:2a:41:d6:5e:75:a8:10:e6:
a6:af:2d:0b:a6:66:30:c6:11:69:12:7e:19:d4:15:02:26:05:
11:83:6d:e0:6e:76:70:3a:e0:a8:11:b1:6b:62:dd:35:1b:09:
d5:ce:f1:41:14:19:1c:cf:a4:d8:f2:5a:61:7e:90:61:07:1e:
1b:f3:51:d6:90:2a:0c:44:f1:2e:92:df:7c:67:fb:39:41:c2:
17:bc:2f:1e:71:39:89:a3:97:1d:24:9a:3f:d8:0b:29:e8:5b:
c5:cc:8e:17:46:0a:05:ed:86:e9:1c:0e:21:00:10:59:ce:67:
25:f7:a6:bd:14:ad:10:97:b7:dc:44:34:9a:54:c8:13:a9:38:
0d:11:12:a6:63:98:00:73:63:7c:82:f0:5f:91:a4:9c:d5:cb:
54:c5:f2:c8:57:83:fc:ad:ae:16:63:4f:ff:f9:c1:1b:c1:c5:
a8:23:18:4b:e0:16:56:8b:94:58:57:eb:23:93:0c:d5:90:b0:
8e:82:c3:b8:a8:95:dd:01:a9:ba:2b:f2:1d:cc:c1:7e:83:3c:
64:f6:9b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:46 2026 by rpki-client