
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa
File: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (raw, json)
Hash identifier: nlxlV3qQfxFiozQP6dQce25XVv+jgI/sDm2SO5XtMkQ=
Subject key identifier: A4:62:E9:69:0C:70:FD:DA:A9:41:B5:5E:B3:25:E8:DC:F1:C6:F7:16
Certificate issuer: /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF
Certificate serial: 28ACDEA60F37906A354B7A0365E588869CD32208
Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa
Signing time: Sun 03 May 2026 03:19:14 +0000
ROA not before: Sun 03 May 2026 03:14:14 +0000
ROA not after: Sun 02 May 2027 03:19:14 +0000
asID: 140469
IP address blocks: 103.153.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl
rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ac:de:a6:0f:37:90:6a:35:4b:7a:03:65:e5:88:86:9c:d3:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF
Validity
Not Before: May 3 03:14:14 2026 GMT
Not After : May 2 03:19:14 2027 GMT
Subject: CN=A462E9690C70FDDAA941B55EB325E8DCF1C6F716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:3c:c3:08:0b:f9:1b:f2:a3:3d:d2:1d:37:
6b:24:20:59:d7:99:e6:2a:20:55:83:60:a4:46:9e:
a2:12:90:f1:74:29:d2:c4:2f:19:b1:aa:29:e0:41:
2f:fa:f6:16:a1:b3:e0:10:e0:2a:03:1c:4b:8e:b0:
4c:9a:41:93:61:71:e8:04:fa:2b:05:5c:3a:c2:9c:
b3:ce:08:4f:97:86:3d:11:80:1e:0d:fd:88:35:04:
e9:bd:b9:a4:61:35:99:2a:83:9c:49:28:85:e2:11:
a3:65:3b:cd:45:cb:4c:1d:88:4e:f5:65:e2:32:39:
90:fd:ec:db:79:da:ff:28:3e:71:24:bc:a7:f1:48:
a3:b8:19:59:99:e5:94:90:97:64:fd:79:66:cf:40:
70:65:10:d9:d3:e8:b3:fc:72:eb:23:45:7e:8e:fc:
06:9e:b2:5b:7e:1c:3b:a4:84:c3:60:db:f9:1e:c5:
ce:62:73:0d:9c:00:f5:71:73:c7:81:3a:53:94:82:
0a:9c:da:5f:a6:90:72:c9:03:0a:55:ed:0f:78:f4:
aa:ff:e3:a2:10:a6:a4:13:2f:dd:b5:05:02:31:6a:
96:9d:16:36:90:56:41:45:bd:56:6b:90:de:b7:9e:
f3:69:4c:3d:f7:89:c9:88:8a:ec:39:f3:34:69:6b:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:62:E9:69:0C:70:FD:DA:A9:41:B5:5E:B3:25:E8:DC:F1:C6:F7:16
X509v3 Authority Key Identifier:
keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.190.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:8c:4e:e5:9e:ce:d2:ba:89:7a:66:60:ab:7b:9c:be:b4:0c:
ce:50:52:7e:0e:cb:7a:58:ae:ce:64:2b:ec:dc:c7:e0:a6:28:
bd:88:c3:46:95:94:72:0c:67:b7:a7:1d:b8:36:0a:fd:8b:58:
e4:e0:d9:ce:ce:8e:2a:52:5b:0a:6b:e6:00:f4:2d:13:f1:c1:
45:ef:c0:33:d9:38:76:4b:0c:f0:97:15:a4:8a:ae:a6:bf:9c:
96:55:ef:f5:9d:d7:21:8e:eb:93:4e:4e:b1:1d:61:a7:6e:43:
34:c2:25:f1:6f:0d:0b:b6:54:c1:e2:a7:48:2f:ac:ad:00:0d:
76:51:a6:1c:ed:ec:2c:af:97:f7:db:79:99:36:1e:7d:61:a7:
64:5e:f3:96:7a:9d:fd:0b:87:17:02:45:01:57:14:73:19:4a:
88:68:ff:3b:e2:d1:2b:39:10:6e:aa:f8:77:c8:40:6e:9b:20:
4a:84:59:8f:26:25:7a:f2:99:4c:87:a6:23:ea:c5:57:2e:cb:
b1:f1:ed:51:af:c9:b8:18:a1:4f:e9:3b:ad:66:8a:bc:f9:8d:
42:59:85:0c:bc:b1:ff:61:66:a1:43:bd:ed:d8:1e:bc:c3:7a:
69:3e:1c:22:e3:dd:bc:67:fa:2c:96:b4:49:9b:a0:52:29:65:
1b:e9:2e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:32:48 2026 by rpki-client