
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32322d3232203d3e203435373233.roa
File: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (raw, json)
Hash identifier: umYqwo2FiD8e3UtdgPNaP9b6kDv065RdUn/kTf3EPuQ=
Subject key identifier: 07:56:0B:FC:B8:E4:A8:75:4C:C9:C6:9C:3C:C4:0C:68:C9:B4:7B:62
Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60
Certificate serial: 14EDF89B2A760ED58AC697830918F33DBF8928AB
Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32322d3232203d3e203435373233.roa
Signing time: Thu 20 Aug 2026 07:36:40 +0000
ROA not before: Thu 20 Aug 2026 07:31:40 +0000
ROA not after: Thu 19 Aug 2027 07:36:40 +0000
asID: 45723
IP address blocks: 103.28.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl
rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ed:f8:9b:2a:76:0e:d5:8a:c6:97:83:09:18:f3:3d:bf:89:28:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60
Validity
Not Before: Aug 20 07:31:40 2026 GMT
Not After : Aug 19 07:36:40 2027 GMT
Subject: CN=07560BFCB8E4A8754CC9C69C3CC40C68C9B47B62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:38:bc:06:54:95:9c:92:56:50:f5:70:c4:98:
98:09:2e:89:cd:ac:83:a8:79:42:85:ef:aa:81:b6:
13:a8:8b:86:18:7d:e5:a1:be:14:3e:3c:c5:2c:2e:
59:85:a2:10:ba:2d:c3:48:3e:f8:5b:31:30:13:27:
33:5c:98:e8:8d:77:d4:7b:3b:e9:c5:bf:e9:bf:b2:
8e:82:6d:54:5c:69:fe:bc:8f:21:24:0c:94:21:7e:
a6:da:0b:bd:e5:13:8d:ba:51:14:ed:fc:bc:30:6f:
60:a3:c4:e1:0c:65:e1:8b:c1:51:ab:f9:2c:aa:05:
d4:3e:29:3c:35:a5:f8:9c:e3:9d:b6:61:56:0e:58:
14:96:a3:9d:a2:18:c2:85:01:65:a9:f0:1a:2f:b1:
27:8b:b4:80:df:f0:fb:ae:9d:31:b0:23:73:9d:19:
84:2d:ed:ec:f5:12:56:a8:6d:de:1c:4c:22:af:0f:
b4:ea:7b:03:cb:63:8a:aa:02:d7:e6:d9:61:eb:f0:
2f:b5:a4:fe:fd:6d:6c:20:6a:fc:1b:74:3b:64:c5:
1c:71:6c:c0:87:21:03:42:cb:e6:e4:62:7f:98:09:
df:fc:82:a6:e1:de:d4:fe:1e:67:a6:08:04:63:49:
9f:66:64:d9:0e:1a:3d:aa:08:0e:71:ea:c5:11:03:
24:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:56:0B:FC:B8:E4:A8:75:4C:C9:C6:9C:3C:C4:0C:68:C9:B4:7B:62
X509v3 Authority Key Identifier:
keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3130332e32382e38302e302f32322d3232203d3e203435373233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.80.0/22
Signature Algorithm: sha256WithRSAEncryption
38:2b:8f:97:4d:d9:dc:15:2c:96:bc:59:57:04:81:fa:cd:6a:
f4:ce:31:da:f1:1b:dc:60:a7:41:c4:c2:f9:05:d2:43:18:e9:
cb:e0:59:c5:9a:8a:60:4d:bb:aa:e0:bd:13:7d:4b:67:80:7c:
5f:0b:d9:fa:33:ec:96:41:c0:18:19:bb:76:9c:07:4d:25:c3:
25:a1:80:c0:9f:2b:e9:8c:b5:0b:9c:e7:79:24:4a:16:54:06:
7c:8f:9e:0b:d8:aa:a0:4f:59:3c:d3:92:f5:83:78:81:07:39:
8f:50:d1:f6:c7:dd:ba:12:7d:71:9f:20:50:83:07:b8:7e:08:
80:dd:37:bc:83:01:ef:06:d3:6b:d1:92:55:f7:78:41:0a:d1:
6f:6e:66:69:19:4b:05:48:37:50:ef:96:b2:83:2b:66:f4:e2:
9c:8d:52:39:80:43:d5:a8:e8:0f:b1:88:19:dd:70:01:e9:5a:
f9:c3:2c:70:16:64:c1:2b:02:4c:a1:e6:f5:41:45:6b:ea:83:
e5:9f:ea:15:69:a7:a4:0f:03:98:ac:7c:25:a2:9c:ce:06:a0:
de:07:96:da:d4:a4:a0:39:31:ce:6b:92:43:1f:39:8b:63:af:
39:cc:19:3a:98:e1:8a:15:a4:2e:ee:fe:e6:5c:a7:ac:94:ef:
9c:36:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:52:45 2026 by rpki-client