
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35372e302f32342d3234203d3e203538343734.roa
File: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (raw, json)
Hash identifier: zR5IozhEoErSJoyA48okITB8A0oyrUPSif4Fq0MXC9c=
Subject key identifier: DA:82:14:76:DB:2E:43:22:60:93:BD:6A:BE:33:F2:FB:00:C4:5E:DC
Certificate issuer: /CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
Certificate serial: 4CABB3A71DFAF7C9EFE9CDC2CF91508A2FA6BE3A
Authority key identifier: 8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35372e302f32342d3234203d3e203538343734.roa
Signing time: Sun 03 May 2026 02:24:24 +0000
ROA not before: Sun 03 May 2026 02:19:24 +0000
ROA not after: Sun 02 May 2027 02:24:24 +0000
asID: 58474
IP address blocks: 103.28.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl
rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 21:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ab:b3:a7:1d:fa:f7:c9:ef:e9:cd:c2:cf:91:50:8a:2f:a6:be:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
Validity
Not Before: May 3 02:19:24 2026 GMT
Not After : May 2 02:24:24 2027 GMT
Subject: CN=DA821476DB2E43226093BD6ABE33F2FB00C45EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:84:a2:69:c7:22:7b:a3:db:43:2a:2b:a8:15:
cf:6e:a1:b1:d3:69:93:a0:b0:18:ec:54:2b:92:47:
62:e2:70:d3:2d:8e:d2:80:bd:30:67:ae:dd:ef:ca:
4d:a7:37:84:7d:d9:ed:40:e1:b9:85:dc:b7:2b:7f:
8f:25:b1:8b:f4:66:5e:7f:0e:22:4e:b6:05:6d:e8:
ae:f4:40:9d:e7:93:c1:bf:2c:ab:9f:7f:38:78:7d:
fa:eb:53:2a:1d:b1:3a:f1:3f:2e:c1:c4:a8:c2:a2:
3b:2c:5c:e5:38:f1:95:75:d3:ff:0f:cf:ff:9b:1e:
8e:a8:d3:be:64:d8:22:73:c4:af:b6:48:60:60:be:
52:00:05:21:6c:1d:0e:dc:cc:0c:bc:53:54:49:83:
01:4a:b7:42:05:30:8b:07:a0:be:30:64:1d:65:f1:
6e:d4:71:f6:fa:f0:ae:b3:f0:93:08:25:4b:31:c6:
64:ab:78:21:20:ff:3e:be:d0:d5:de:c5:d1:f0:fe:
f7:7c:74:a1:9b:b5:0f:13:44:57:6f:ee:fc:1d:04:
95:b5:c7:65:1f:bf:52:10:d9:0c:d9:dd:da:33:f1:
bf:4f:8a:82:ca:c0:14:28:45:0a:e5:27:0d:25:f1:
03:4d:a3:49:99:73:d7:82:33:f2:1c:bc:fc:b5:2c:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:82:14:76:DB:2E:43:22:60:93:BD:6A:BE:33:F2:FB:00:C4:5E:DC
X509v3 Authority Key Identifier:
keyid:8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35372e302f32342d3234203d3e203538343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.57.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ed:ce:7e:ab:ad:ee:39:5f:1d:64:2c:eb:4b:76:aa:a3:ee:
c4:62:f6:6d:e8:3f:f9:4f:96:6f:af:3c:9a:47:63:c3:da:01:
5c:0c:5c:7e:f4:f9:ea:d9:7c:6a:c6:89:61:9d:dc:d9:70:f4:
18:c2:fc:ad:84:57:a8:ed:32:ff:25:97:42:70:cc:f2:7f:91:
47:8d:d8:a0:cd:59:ef:ad:56:d3:f4:46:49:1a:d6:9f:c8:27:
36:8d:06:cc:46:c3:d1:42:9c:a7:11:04:16:c5:c3:df:2a:c7:
f8:d0:f1:3d:d6:ce:ba:19:2e:09:d6:93:48:e4:99:39:69:ec:
4c:10:a2:ee:8c:89:44:77:f9:f5:14:33:29:47:50:bf:21:57:
84:75:da:cf:21:43:86:31:99:2e:b2:52:57:14:a0:96:ff:24:
d3:af:e3:e8:06:de:0a:66:7a:31:f4:15:b3:d8:5f:d3:db:7e:
d5:4a:31:4f:29:2d:c7:07:8a:b0:0e:33:9e:31:05:4f:50:fc:
0e:5b:df:fa:d6:c2:f2:35:f9:96:19:2f:80:a4:a7:4b:3a:25:
d8:ac:43:cc:37:f2:08:68:07:a0:da:1c:31:98:dd:ff:c8:6c:
4f:61:6c:b4:a3:8d:f4:4f:b2:57:22:2f:d0:ce:1d:2c:ac:b8:
e2:bf:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 13:02:58 2026 by rpki-client