
$ rpki-client -vvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32342d3234203d3e203538333831.roa
File: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier: fb53zmVp3ZEKD6KlMvVv2uQVwzv7wo/XFESLY4RW+fc=
Subject key identifier: 2E:B1:64:2F:8A:0F:5B:14:9B:21:A6:2C:B5:55:77:AB:E0:65:11:1E
Certificate issuer: /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
Certificate serial: 4D8A13D170BC48FAB727BE32CBCF6B838918AC3E
Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32342d3234203d3e203538333831.roa
Signing time: Sun 03 May 2026 02:24:47 +0000
ROA not before: Sun 03 May 2026 02:19:47 +0000
ROA not after: Sun 02 May 2027 02:24:47 +0000
asID: 58381
IP address blocks: 163.53.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl
rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 13:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:8a:13:d1:70:bc:48:fa:b7:27:be:32:cb:cf:6b:83:89:18:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
Validity
Not Before: May 3 02:19:47 2026 GMT
Not After : May 2 02:24:47 2027 GMT
Subject: CN=2EB1642F8A0F5B149B21A62CB55577ABE065111E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:61:32:7e:99:1a:fc:0f:e0:ed:cb:d3:a2:
d0:19:e2:7e:12:87:54:17:f5:0a:04:26:b3:39:50:
f7:e7:62:b1:fe:b9:d7:70:49:d5:a1:38:e4:21:18:
aa:ad:c7:74:d5:91:ff:16:f2:90:ec:73:37:e1:c7:
13:c6:7f:72:5e:d8:be:fd:ba:77:57:fa:41:ca:d2:
42:a2:28:d7:db:79:33:58:26:a0:9a:ea:65:8d:5c:
9b:9c:35:09:c9:72:6f:06:d5:6e:f1:e4:05:da:b9:
9d:1a:aa:41:22:5e:c6:44:10:8a:9e:f5:b7:bb:f2:
87:8e:7b:a5:0b:7f:e4:c7:ad:0c:aa:12:05:e8:ff:
09:0a:54:5a:a7:c3:8b:79:60:b5:23:d9:96:9e:6d:
7d:6e:f0:7b:db:bb:a1:92:9e:ee:28:d2:c7:d3:ee:
f1:31:19:ad:4e:a4:dc:2b:f2:4c:1c:d2:cf:7e:d0:
18:11:de:01:63:f1:f1:f1:ee:54:c3:0d:aa:7f:c9:
5a:95:13:d1:44:d7:76:64:9f:43:96:8c:aa:7b:3b:
ed:86:ef:42:38:42:fe:d6:44:5e:d1:4a:e8:c3:8f:
61:f4:fa:4c:59:11:79:78:48:35:d9:71:ec:4d:d2:
a5:ca:5d:a8:ba:3b:ef:f0:d8:e8:36:0d:13:65:88:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B1:64:2F:8A:0F:5B:14:9B:21:A6:2C:B5:55:77:AB:E0:65:11:1E
X509v3 Authority Key Identifier:
keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32342d3234203d3e203538333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.53.192.0/24
Signature Algorithm: sha256WithRSAEncryption
25:22:8e:ac:77:93:0c:4b:ac:78:70:65:b0:72:f4:d2:3e:bf:
57:a4:fa:d6:f3:18:30:38:7d:2d:e4:66:cb:0f:85:41:19:dd:
25:0c:aa:32:71:b1:51:0a:30:10:87:09:31:45:96:40:f9:4e:
6f:7a:d0:19:cd:f8:8e:01:b6:6e:ac:77:fd:43:eb:33:95:8c:
48:70:cb:f4:61:da:42:a7:cb:f8:31:89:3b:33:95:4d:8c:a7:
48:69:c1:f6:16:d4:58:48:c6:de:f4:eb:b6:ae:8d:de:63:13:
cf:42:91:24:f0:03:4c:03:ba:7b:e6:22:77:ee:bc:e4:c4:1a:
bd:a6:1d:34:da:58:e9:91:7a:19:f1:7f:dc:0e:13:f5:cc:f0:
60:72:27:29:2b:ec:72:53:8f:fb:93:04:5f:11:5c:df:59:f5:
db:b5:79:ed:29:93:75:fc:ca:7a:7f:1b:ac:96:6e:6a:94:5f:
88:79:3a:e2:43:3b:96:31:31:b3:a3:c1:0c:32:5b:58:9a:cb:
85:c9:54:8b:cb:39:28:e2:38:46:b0:ed:4d:65:cc:70:97:53:
b4:61:97:d9:41:c4:0d:9a:08:ed:9d:99:6a:2e:19:30:56:71:
0e:39:df:f4:b8:eb:9d:a1:24:25:77:95:db:63:1c:0d:e8:56:
3c:72:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:08:30 2026 by rpki-client