
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa
File: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (raw, json)
Hash identifier: 5WXzkwnRjAabSJmPonFxbSLdJu3Rkyb5SUPqv4YS6mc=
Subject key identifier: 28:7C:06:8B:39:6F:99:84:2C:DA:83:57:A2:B1:A9:98:28:FE:F6:AE
Certificate issuer: /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF
Certificate serial: 1B1E3F9DB618AD83F755A4347B5091CA9A23FDC2
Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa
Signing time: Sun 03 May 2026 03:19:14 +0000
ROA not before: Sun 03 May 2026 03:14:14 +0000
ROA not after: Sun 02 May 2027 03:19:14 +0000
asID: 140469
IP address blocks: 103.153.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl
rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:1e:3f:9d:b6:18:ad:83:f7:55:a4:34:7b:50:91:ca:9a:23:fd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF
Validity
Not Before: May 3 03:14:14 2026 GMT
Not After : May 2 03:19:14 2027 GMT
Subject: CN=287C068B396F99842CDA8357A2B1A99828FEF6AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:9b:df:78:dc:6b:4f:40:f8:c4:0c:3c:89:
ce:a6:df:38:02:f9:b6:8a:01:e9:4e:0a:98:2e:29:
ce:62:cb:8a:bb:73:df:f8:63:e2:4a:ad:02:48:3b:
cd:13:31:53:a8:8a:90:3c:f3:d3:48:51:a2:78:e9:
1b:52:7b:d8:af:d2:cb:06:28:43:b7:a6:77:9c:21:
80:e1:c3:e8:c3:f8:eb:f0:5e:35:8b:bc:ee:c5:e0:
f8:86:a1:0d:01:e9:ea:64:57:de:eb:c1:29:00:37:
34:03:e2:fd:92:a1:80:21:0d:9e:bb:2e:3b:5e:4f:
a0:13:f9:3d:7f:76:f6:ee:5f:c3:18:67:03:1b:32:
a9:d2:8a:bf:16:25:6d:78:82:31:22:eb:58:e2:3b:
b2:4d:6e:45:c1:0e:f8:2d:00:9f:33:c4:58:84:65:
fc:c0:64:a0:d4:cd:22:d1:eb:4f:a9:40:a7:41:84:
e0:3e:d4:36:23:7b:dc:bc:75:99:11:e1:1c:73:7e:
da:23:1e:f8:a8:d5:72:34:47:21:34:4e:a0:57:7d:
64:25:89:a4:68:e2:36:e7:6b:1f:a3:fc:48:87:e2:
43:32:39:c9:fa:89:b3:8d:5d:41:f2:46:02:d2:e3:
6b:25:21:02:83:af:01:79:94:44:b6:9e:04:6e:98:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7C:06:8B:39:6F:99:84:2C:DA:83:57:A2:B1:A9:98:28:FE:F6:AE
X509v3 Authority Key Identifier:
keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.190.0/23
Signature Algorithm: sha256WithRSAEncryption
dc:97:42:22:9e:ae:fa:39:c5:d4:2b:d6:c1:a2:d7:7e:08:88:
91:bc:a5:9c:77:c8:a4:f3:07:69:62:e7:92:ab:f1:b8:4e:11:
66:23:00:7d:e9:41:cb:da:fd:e3:79:a9:3e:3e:eb:80:f6:99:
b9:21:bc:c5:7a:42:35:90:7a:db:be:62:37:a5:0c:68:f8:49:
80:33:86:c1:13:20:ff:35:99:65:6c:f9:cb:2d:21:ec:70:5d:
03:3d:a1:bb:17:84:ad:32:bb:a6:81:6d:20:fb:1e:0d:98:7a:
41:b3:f4:4f:f2:e8:f5:a5:fc:31:7c:45:ee:7c:9e:6f:86:9b:
00:b1:b3:ed:d8:7a:be:a1:80:c7:1b:70:a1:d0:7d:98:e8:bc:
1f:42:8f:04:af:60:bb:5e:63:d3:b1:6c:bf:ad:d2:7a:82:71:
ed:6a:f3:ce:e4:1d:19:8d:8c:e8:6e:ca:eb:c4:7d:09:19:e0:
57:68:09:20:05:5d:9c:dc:89:54:3a:fb:39:c9:6d:db:aa:da:
63:7f:b5:1e:38:7b:b6:26:6d:f0:3c:9d:94:b1:af:f1:d1:7c:
4e:ee:f9:d3:02:d4:39:fc:26:2b:ad:30:e0:fa:f9:38:ba:5b:
4d:d0:3c:e5:83:73:93:64:eb:ad:62:53:13:33:07:23:9b:0b:
a8:40:e5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:32 2026 by rpki-client