
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa
File: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (raw, json)
Hash identifier: /fa1hwZEt68IrXwKEonGaCZwd1oMYZDyXJq4KeJo86E=
Subject key identifier: 32:EA:EA:1F:E5:BA:60:83:E2:AD:A7:D6:F3:17:57:53:19:00:6F:A2
Certificate issuer: /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Certificate serial: 125C7C01DFEB70072990853E2015A2DE9FE0226F
Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa
Signing time: Sun 03 May 2026 03:07:28 +0000
ROA not before: Sun 03 May 2026 03:02:28 +0000
ROA not after: Sun 02 May 2027 03:07:28 +0000
asID: 138134
IP address blocks: 103.133.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5c:7c:01:df:eb:70:07:29:90:85:3e:20:15:a2:de:9f:e0:22:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Validity
Not Before: May 3 03:02:28 2026 GMT
Not After : May 2 03:07:28 2027 GMT
Subject: CN=32EAEA1FE5BA6083E2ADA7D6F317575319006FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:79:fc:c4:58:b1:55:73:5d:ef:53:fd:e4:
3e:d0:d3:31:fe:51:54:5f:08:31:ff:c5:cb:0a:b4:
51:50:a9:75:b9:af:d0:5f:45:29:3d:48:1d:dc:1e:
0d:02:cd:e8:82:0f:f2:a4:c3:c7:3c:3f:04:f3:9d:
52:89:d4:9b:cc:59:31:6b:30:8a:8f:f3:69:f8:b6:
fa:13:7c:1f:49:47:50:15:23:18:e5:ea:45:74:68:
c6:77:59:68:8f:03:b5:3d:fd:c2:46:30:53:a8:47:
37:b9:44:4b:4a:e0:8f:0b:82:09:aa:f7:e4:0b:90:
e9:f9:cc:a2:85:4b:0d:57:e7:67:98:39:96:42:0f:
7e:e1:c6:2f:09:07:b1:db:8a:4d:1c:38:32:76:dd:
78:00:19:83:20:ed:74:91:51:ae:f7:53:49:fd:54:
09:de:9d:b2:1d:e4:58:c5:fd:6a:8b:21:66:1e:ac:
54:6a:77:c2:4d:63:65:81:44:91:26:d5:60:ec:f2:
d3:b9:8e:b4:a3:7f:bb:0f:24:21:bc:13:98:9d:82:
44:2d:3c:34:0c:50:5e:08:3d:62:96:6d:6a:1c:b1:
db:ba:cb:58:73:ca:d9:fd:e4:17:d4:d5:46:19:80:
cc:b5:29:8c:64:3f:98:18:88:4e:a0:74:c4:14:2a:
cc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EA:EA:1F:E5:BA:60:83:E2:AD:A7:D6:F3:17:57:53:19:00:6F:A2
X509v3 Authority Key Identifier:
keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.62.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a0:81:d8:df:c2:0a:01:88:71:bb:9d:dc:9b:2a:f2:d1:80:
b2:0e:8b:7c:46:95:fb:ca:08:8f:e7:e6:f0:85:76:ac:29:03:
d3:39:d1:49:5a:ee:bc:2a:2c:7b:e0:20:bb:a7:8e:70:16:96:
39:b6:df:57:4f:83:ab:42:9b:56:fa:15:e9:81:40:ee:30:6f:
d0:10:11:16:b8:42:91:d2:77:60:3f:04:80:db:88:47:aa:aa:
84:b7:79:d0:0b:e1:04:19:78:d4:7d:29:77:45:c1:a4:c8:2b:
44:14:b4:e7:88:84:c5:eb:1c:a3:16:5c:80:be:2f:58:0f:2d:
07:ad:ee:f1:41:dd:e2:c1:ca:d1:0f:00:56:db:47:59:c0:ac:
ad:c9:ae:47:3f:2c:2a:4d:c9:c2:f1:0f:43:85:02:f3:58:a0:
6d:f0:64:a6:3e:22:10:21:db:2e:82:d0:0f:cf:e5:06:29:0e:
5a:b5:27:f1:4f:51:05:94:07:94:e6:75:32:2b:0a:ed:9e:67:
31:b4:ae:e4:69:5a:f1:ea:17:b3:56:23:53:20:a1:09:89:a8:
cd:d2:9c:7f:33:21:ba:a5:3d:2a:9d:d9:f4:9e:56:73:09:1f:
95:f2:4e:72:3f:93:09:52:1c:54:cc:0b:f1:31:1c:21:4f:09:
05:b3:1e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:05 2026 by rpki-client