
$ rpki-client -vvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa
File: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier: 5tf246IHwaj7s4oEu9nu0sb2z4yR2BLV01+7PT3/O1c=
Subject key identifier: 11:C7:3C:76:84:42:EB:8C:C9:7D:E1:64:BC:2F:74:6D:85:67:92:E4
Certificate issuer: /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
Certificate serial: 4ADA9E800A2FFA6BCEB455FA08C3E898B81FF85A
Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa
Signing time: Sun 03 May 2026 02:24:47 +0000
ROA not before: Sun 03 May 2026 02:19:47 +0000
ROA not after: Sun 02 May 2027 02:24:47 +0000
asID: 58381
IP address blocks: 163.53.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl
rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 13:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:da:9e:80:0a:2f:fa:6b:ce:b4:55:fa:08:c3:e8:98:b8:1f:f8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
Validity
Not Before: May 3 02:19:47 2026 GMT
Not After : May 2 02:24:47 2027 GMT
Subject: CN=11C73C768442EB8CC97DE164BC2F746D856792E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:e7:5d:e1:bb:10:88:4e:c8:32:b2:9a:86:
fd:2b:fe:05:66:6e:ec:7b:ae:e8:90:63:f1:3a:19:
03:ea:62:95:0a:1b:8c:f2:86:41:dc:58:2c:49:a3:
9e:31:51:0a:51:4f:0f:d7:68:a6:9e:6b:fd:d3:52:
d6:ba:83:d6:1c:5a:67:ac:1e:1d:54:6e:b1:9d:81:
c8:d3:ae:ff:13:88:71:92:6d:71:14:a1:91:f9:da:
6c:20:16:c8:7a:bf:2f:bc:74:9a:f2:bb:11:d4:84:
31:1b:fe:5c:e7:7b:9a:7d:78:22:cc:43:5d:7e:8c:
4e:1f:ad:05:00:ce:46:cb:b4:69:37:3d:2a:6e:09:
37:16:b8:db:5b:90:49:75:b1:7b:6e:f1:8c:f3:6c:
8a:ea:f5:58:04:c0:f6:55:6f:05:4c:59:ab:e1:c3:
74:6e:14:05:07:1f:6d:d2:46:dc:ea:00:dd:87:0e:
e7:4b:9e:52:d6:9a:6e:77:68:a9:72:e7:76:31:d3:
70:73:3c:d1:84:26:de:d5:0d:5d:e6:f5:e0:c2:2f:
e2:f7:27:1b:a9:39:d2:3d:65:31:a0:fa:50:e2:d7:
29:40:1d:29:16:93:ca:74:eb:d9:de:ff:6d:2c:3e:
64:8d:f6:c3:09:11:42:5c:bb:7e:3f:d4:95:0e:c1:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C7:3C:76:84:42:EB:8C:C9:7D:E1:64:BC:2F:74:6D:85:67:92:E4
X509v3 Authority Key Identifier:
keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.53.193.0/24
Signature Algorithm: sha256WithRSAEncryption
02:22:a6:72:23:d3:5a:f4:1d:ec:fe:24:36:39:28:a2:e6:28:
85:88:c2:42:11:80:e1:eb:71:93:09:28:f8:63:5f:44:9f:af:
f5:77:db:ae:de:19:7b:71:60:cc:dd:e6:ab:ff:cd:95:fd:a2:
36:0f:eb:21:54:8c:2e:12:06:5c:0a:81:4b:3a:8f:4d:65:2b:
d7:43:d6:d0:11:e6:03:c2:b1:ec:ae:6e:e7:5d:c5:d0:2d:94:
76:20:1f:95:33:fd:1b:08:57:47:99:4d:16:19:fb:c7:9e:27:
e4:14:70:a9:ff:0e:fb:3e:08:72:16:8b:fe:e1:a0:23:4b:f0:
13:e1:93:3a:65:96:b2:8a:d6:60:44:27:13:7b:f1:65:26:52:
80:67:9c:c5:98:41:e3:85:bd:d1:3f:64:6a:d1:15:f9:b2:81:
f1:1c:46:3c:61:d8:8a:2c:9d:4f:e0:10:45:d5:4a:cf:d2:65:
db:3f:c8:30:82:e2:2a:88:ca:40:94:f3:43:9f:2d:95:ec:3c:
9b:e0:53:3c:52:40:d4:44:3b:a9:29:76:ba:41:8f:73:8b:c5:
f6:3c:8f:65:25:48:21:c3:62:a6:6f:85:68:a8:40:2a:64:33:
df:50:ef:34:7e:74:98:40:f5:11:28:70:e4:3c:66:53:61:f6:
10:fd:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:06:52 2026 by rpki-client