
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa
File: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (raw, json)
Hash identifier: cRnHdJ6ERY/gOe2MatEAOxOT41WEyNcMegmve8GczJo=
Subject key identifier: 58:19:B9:53:59:5E:C8:D6:78:7B:D3:51:9F:66:76:3F:EC:ED:51:EB
Certificate issuer: /CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A
Certificate serial: 0A5E491700661E852576DA25176580403403241C
Authority key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa
Signing time: Sun 03 May 2026 03:17:35 +0000
ROA not before: Sun 03 May 2026 03:12:35 +0000
ROA not after: Sun 02 May 2027 03:17:35 +0000
asID: 133354
IP address blocks: 103.232.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl
rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5e:49:17:00:66:1e:85:25:76:da:25:17:65:80:40:34:03:24:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A
Validity
Not Before: May 3 03:12:35 2026 GMT
Not After : May 2 03:17:35 2027 GMT
Subject: CN=5819B953595EC8D6787BD3519F66763FECED51EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:e6:ba:6a:7e:d8:0b:d3:54:ad:a3:ab:af:
76:cf:22:14:f9:cc:f1:53:be:e4:bb:76:cd:a7:71:
9e:17:cc:33:36:31:87:a0:c7:e2:9b:38:df:e7:57:
f8:77:ad:19:ab:1b:38:94:f0:85:83:5e:3b:9a:07:
10:a1:4f:6b:1f:1f:cf:c2:1f:23:6a:32:45:82:21:
5f:97:2a:22:79:44:67:f3:3e:fc:3d:79:57:cc:7e:
42:75:5d:20:91:f2:72:cf:54:bb:53:ec:60:f8:1c:
e1:d1:9d:de:0d:09:da:81:c5:7e:4e:a4:cb:e8:44:
af:7b:ff:49:38:38:54:58:bd:f4:82:7c:da:28:cc:
9b:95:4e:e3:a2:5d:ce:e9:49:17:5e:b5:f3:a3:20:
bd:30:74:ea:71:3c:ed:7b:31:49:ce:68:07:63:39:
bb:e6:b1:ba:2b:ae:6d:57:b5:50:f6:65:29:43:6d:
64:a2:bc:bd:d2:9b:27:1b:8e:fb:fd:ad:ac:80:cf:
11:2f:1f:a3:d1:1a:2c:13:c4:b6:20:52:61:82:ae:
bd:d2:39:4a:5a:8a:4a:df:f6:25:2f:91:75:34:fa:
4b:ab:fc:f4:8e:2c:87:e3:56:fa:87:20:94:1e:b2:
60:e0:73:a2:d4:52:7d:8f:a6:84:02:a0:b2:b1:5a:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:19:B9:53:59:5E:C8:D6:78:7B:D3:51:9F:66:76:3F:EC:ED:51:EB
X509v3 Authority Key Identifier:
keyid:F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.232.32.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d1:32:e9:f4:02:aa:7e:b3:69:04:39:92:93:3b:86:53:f1:
72:b4:32:70:69:4e:88:a6:35:9e:d4:b5:93:2e:6a:93:4f:ca:
d7:1a:93:46:f2:8d:9f:a0:8b:61:5d:f4:28:6a:82:6a:b4:ad:
d2:36:c9:6f:51:6e:1a:2b:27:a4:32:6b:0e:ca:72:63:ce:04:
49:4c:d4:39:96:f2:18:28:2a:7f:36:3f:2f:6b:1e:ea:b3:97:
3b:64:a6:4c:6d:dd:bf:5c:70:ba:a0:fa:de:30:95:be:d6:86:
1f:95:83:b2:10:f6:59:51:79:ec:be:ba:f4:6a:63:54:dc:1d:
34:e3:f6:ca:31:d6:d5:a0:f8:1a:f2:2d:35:a0:14:97:db:a0:
78:79:24:c9:36:a2:a3:8d:2e:a5:e9:8a:2b:bc:6f:4a:85:77:
45:01:56:a6:59:d3:a3:35:a2:10:ab:b4:85:69:b0:55:9f:dc:
1d:bd:0d:39:50:ab:b8:69:b7:7c:64:63:3c:2e:2e:d4:42:02:
27:4a:94:71:c0:ba:0a:69:b8:11:0f:cb:7d:dc:49:7a:78:50:
07:5a:d1:a0:ec:60:de:2c:2a:05:c4:c2:92:2f:a8:1d:02:98:
26:fe:fb:d0:69:91:cd:9b:94:91:39:53:d7:fe:31:c2:6c:33:
01:9e:bf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:16 2026 by rpki-client