
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa
File: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (raw, json)
Hash identifier: KWc9OTSiXvMZVJYcyeDQq+tc4s6Lq68tyd9neBf4i2s=
Subject key identifier: CE:5C:5F:C1:5C:D8:ED:67:7A:F6:28:9E:A1:7F:C8:9E:E2:FE:AE:95
Certificate issuer: /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Certificate serial: 5E7C2CCC5D125AABF8E7E5B82781EFF1EB361634
Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa
Signing time: Sun 03 May 2026 03:07:28 +0000
ROA not before: Sun 03 May 2026 03:02:28 +0000
ROA not after: Sun 02 May 2027 03:07:28 +0000
asID: 138134
IP address blocks: 103.133.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:7c:2c:cc:5d:12:5a:ab:f8:e7:e5:b8:27:81:ef:f1:eb:36:16:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Validity
Not Before: May 3 03:02:28 2026 GMT
Not After : May 2 03:07:28 2027 GMT
Subject: CN=CE5C5FC15CD8ED677AF6289EA17FC89EE2FEAE95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:5c:00:89:2b:56:fe:d0:a8:d4:21:15:dc:
90:61:c0:24:0a:cd:0a:26:19:67:f5:de:a0:b9:34:
15:78:68:5f:ba:e2:62:2d:5d:98:31:57:78:98:bd:
aa:c2:12:65:46:e8:49:96:10:a6:53:0e:17:39:d2:
f0:ab:87:42:d6:b8:6e:52:2f:d9:ab:98:29:cc:25:
a9:82:c1:62:5a:1e:c8:70:b0:15:c7:3c:8e:ae:95:
f6:7c:4e:5a:f7:83:e3:b0:f6:40:d7:66:d0:e8:9c:
bf:a0:b5:e3:1f:f4:29:62:00:56:80:0b:48:70:33:
0d:51:c0:d9:59:c9:34:3e:58:9d:3b:75:53:5b:f9:
e0:a3:69:8f:c3:99:9f:a0:cb:92:00:bf:76:88:a5:
63:12:2c:6c:31:07:88:e4:5c:fc:a6:e5:3f:9b:5b:
4e:b2:b3:1e:ca:7f:f7:3a:4c:c1:81:ac:d1:a2:71:
28:39:df:7c:99:08:53:90:77:9a:a1:da:7d:9d:df:
fc:19:a4:cc:af:9e:ca:e7:40:16:53:4a:58:64:8e:
6f:af:c1:e0:9b:b0:cc:ef:b5:1d:13:5e:70:16:48:
c9:c2:2b:dc:38:87:5c:10:e9:df:11:43:99:c1:e0:
45:8a:ba:15:f0:f0:6f:6b:2b:7b:2b:90:86:ee:7e:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5C:5F:C1:5C:D8:ED:67:7A:F6:28:9E:A1:7F:C8:9E:E2:FE:AE:95
X509v3 Authority Key Identifier:
keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:dd:0e:39:9f:47:b3:c2:c7:74:d7:90:f5:37:31:37:f4:34:
35:4b:59:2f:01:b9:17:0b:88:90:89:48:45:3d:8d:d0:33:83:
08:b0:ab:07:f3:6d:77:b2:60:d0:f4:3a:6e:9f:8a:c5:6e:a7:
ea:ba:1e:31:e5:c9:ea:f2:cb:d9:b8:3c:ea:8c:22:02:4f:89:
ed:ab:14:5c:bb:7f:47:41:d7:08:8a:9c:5e:53:8f:14:2c:d1:
73:5a:0e:dc:b0:08:8c:83:e6:38:d7:8b:24:d3:b2:d1:5a:f5:
dd:26:b8:ea:c5:7e:7f:f6:06:f6:d4:cf:ad:81:39:43:71:a1:
2d:82:b3:eb:a7:e9:5b:0d:e2:f4:f9:be:ef:55:09:ad:ba:7b:
8b:ab:63:a9:da:6d:d9:d4:67:74:51:91:bc:1c:fb:23:fc:5e:
da:6b:b3:d8:f6:2a:75:14:f2:56:8e:2a:53:e5:0c:8e:90:49:
3e:94:e8:c9:d0:43:90:e2:bc:1c:43:f8:e1:da:66:d4:2b:22:
f3:8e:ad:e2:82:77:e9:c7:8d:50:38:bf:5d:a7:38:ce:5c:53:
be:26:09:15:d8:de:48:9d:2b:3d:dd:eb:d1:d4:40:24:8c:69:
e7:bf:74:c8:52:e4:a3:1a:c6:ee:aa:75:c5:6f:c7:b6:9b:c5:
ca:ba:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:22 2026 by rpki-client