
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35362e302f32342d3234203d3e203538343734.roa
File: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (raw, json)
Hash identifier: 3fEh7FEkFoZkANDbmxn7uUTRJbfDqHdq2EELZjoFJiA=
Subject key identifier: 24:72:63:13:83:F6:0D:2E:16:4B:B2:E1:1F:C5:11:53:6E:F1:C2:9B
Certificate issuer: /CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
Certificate serial: 14D46791C7B0071CDABAAC8A1D365720F7C02B50
Authority key identifier: 8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35362e302f32342d3234203d3e203538343734.roa
Signing time: Sun 03 May 2026 02:24:22 +0000
ROA not before: Sun 03 May 2026 02:19:22 +0000
ROA not after: Sun 02 May 2027 02:24:22 +0000
asID: 58474
IP address blocks: 103.28.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl
rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 21:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d4:67:91:c7:b0:07:1c:da:ba:ac:8a:1d:36:57:20:f7:c0:2b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
Validity
Not Before: May 3 02:19:22 2026 GMT
Not After : May 2 02:24:22 2027 GMT
Subject: CN=2472631383F60D2E164BB2E11FC511536EF1C29B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:1f:a3:b1:16:39:07:e6:72:ce:5d:d3:92:
c3:10:3b:d6:ae:8d:01:6a:98:d7:cb:18:59:b4:d7:
95:91:3f:25:63:86:dd:0f:da:ba:02:52:45:f7:f3:
23:a0:00:33:94:37:2c:c7:24:73:65:e6:b6:a6:df:
34:bc:f3:67:ef:2f:11:ae:da:6c:36:93:41:f1:f1:
4a:2b:e7:e3:fb:a8:f5:09:9e:e9:88:de:b1:25:96:
a5:73:e2:ec:f1:b3:b2:f1:42:cb:ac:41:97:59:32:
bf:0d:0f:d0:9a:5a:5b:9d:4e:61:b1:71:7b:9f:d9:
70:06:17:c1:57:4f:9c:46:0a:a6:ce:f9:73:34:f2:
cd:56:c1:84:bd:c4:db:da:95:0d:01:06:57:3c:33:
31:6b:d1:7d:1a:89:2a:32:b0:c1:bd:75:1f:2a:5c:
b7:4e:6f:7f:c8:0b:97:a9:46:60:62:64:b4:b4:30:
50:d9:66:66:36:e6:8c:f0:11:a8:13:36:79:b6:13:
86:b5:a8:c2:a2:40:bf:45:19:f8:ce:1e:75:4c:7d:
45:25:85:c3:aa:83:e9:c4:d2:0c:c2:55:fb:43:e2:
c4:17:f8:5b:2c:bb:6b:ca:5b:70:19:06:4b:12:f7:
a2:f1:39:ba:22:39:34:01:fa:8a:75:31:b0:6a:d1:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:72:63:13:83:F6:0D:2E:16:4B:B2:E1:1F:C5:11:53:6E:F1:C2:9B
X509v3 Authority Key Identifier:
keyid:8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35362e302f32342d3234203d3e203538343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.56.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7f:0c:e1:7f:40:2d:d6:1b:6e:6a:80:9b:79:96:92:f5:9d:
e7:ca:30:ed:db:b8:b8:ca:8b:f7:70:3e:61:5b:54:55:e3:64:
a3:15:ad:d5:17:ee:a7:6c:ed:76:cf:47:ad:9b:0e:9a:be:14:
83:c0:ca:07:8d:2e:f3:7b:be:0b:21:81:a9:70:13:37:b3:ed:
fa:5c:67:c2:11:fe:b8:ff:fd:d3:2e:fb:cf:7d:de:97:63:81:
35:16:f8:23:18:4d:29:54:91:4b:72:96:16:dd:a1:28:ab:cb:
1d:44:67:77:c4:d8:cf:06:32:be:40:e8:d8:1d:2c:70:c0:db:
4f:79:c6:84:73:42:7b:42:22:bf:23:68:41:ce:3f:1c:c2:72:
4d:ad:b8:7c:1f:f1:31:db:0c:ce:8f:d1:9c:62:16:78:09:cd:
38:7d:67:f9:11:7e:b9:0e:17:6b:80:71:8d:ac:3c:55:da:6d:
65:36:ce:8f:d9:c0:da:28:83:06:fb:e8:71:55:e9:f1:ae:b3:
0e:65:71:54:20:65:a9:02:55:53:54:96:f7:e9:df:36:b1:db:
dc:be:97:63:c3:19:b3:81:a2:9b:94:0f:c8:05:a5:48:f7:ec:
60:08:0b:a5:f1:3a:eb:ba:9c:25:91:d0:32:98:59:28:e8:95:
c8:54:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 13:02:58 2026 by rpki-client