
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/3130332e33382e3231362e302f32332d3233203d3e20313335363336.roa
File: 3130332e33382e3231362e302f32332d3233203d3e20313335363336.roa (raw, json)
Hash identifier: 5DAzRoGMu3XXzMaa76xle0lQH8L2zRzEUNkEsL3fylI=
Subject key identifier: 0E:1C:8E:88:35:D2:CA:12:02:4B:48:30:26:A3:CE:D7:4E:94:F3:96
Certificate issuer: /CN=1DAB6FF699A8F14120B0EF2DABD67849161BA2C7
Certificate serial: 39825874D57E49AEB3358CE247B59AA60E63C417
Authority key identifier: 1D:AB:6F:F6:99:A8:F1:41:20:B0:EF:2D:AB:D6:78:49:16:1B:A2:C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/3130332e33382e3231362e302f32332d3233203d3e20313335363336.roa
Signing time: Mon 12 Oct 2026 03:52:03 +0000
ROA not before: Mon 12 Oct 2026 03:47:03 +0000
ROA not after: Mon 11 Oct 2027 03:52:03 +0000
asID: 135636
IP address blocks: 103.38.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.crl
rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 09:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:82:58:74:d5:7e:49:ae:b3:35:8c:e2:47:b5:9a:a6:0e:63:c4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DAB6FF699A8F14120B0EF2DABD67849161BA2C7
Validity
Not Before: Oct 12 03:47:03 2026 GMT
Not After : Oct 11 03:52:03 2027 GMT
Subject: CN=0E1C8E8835D2CA12024B483026A3CED74E94F396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:6e:b5:a1:01:80:f0:3d:66:0a:05:fa:9b:
c1:6e:5f:80:64:79:4d:07:f5:39:ec:e0:fe:c9:9c:
a9:38:32:06:51:39:ac:94:33:5e:dd:19:a7:b0:d6:
9f:d5:dc:f2:fa:09:04:d1:b9:40:e5:6f:64:76:ad:
65:70:bd:81:9f:db:0e:93:02:a4:e4:3d:93:c8:c5:
3a:e4:51:d4:0e:f3:7f:31:6b:06:57:17:92:ac:d3:
2f:31:b5:e5:48:04:f5:2a:6e:8e:5d:42:f1:52:4f:
0d:c6:e3:55:e3:d6:2a:02:5c:6e:ee:a1:5d:6f:2d:
a4:59:dd:e9:2f:9a:4f:16:ac:e1:54:25:f6:36:e7:
a5:1c:30:59:25:5a:cf:71:55:50:4f:7f:0c:fe:08:
20:d1:37:56:aa:17:b0:85:58:07:77:87:31:95:a4:
a9:ee:97:89:e9:5c:2c:de:06:3e:4c:a7:71:10:6b:
5b:34:ba:a5:86:d5:b2:ec:a3:b1:54:d7:a6:e5:fe:
13:73:c1:69:b5:ce:8a:9d:71:27:95:44:f1:29:8f:
ec:80:ab:e3:91:4c:89:9c:d5:3f:b1:ae:8b:ba:aa:
7a:3b:62:55:5f:52:75:b0:c5:7b:f9:f5:ff:73:93:
79:69:b0:b6:08:04:b4:ac:8a:ad:1e:9e:61:d0:6f:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:8E:88:35:D2:CA:12:02:4B:48:30:26:A3:CE:D7:4E:94:F3:96
X509v3 Authority Key Identifier:
keyid:1D:AB:6F:F6:99:A8:F1:41:20:B0:EF:2D:AB:D6:78:49:16:1B:A2:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DAB6FF699A8F14120B0EF2DABD67849161BA2C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53c1eabc-ed13-42c9-bc5d-7bd04217ccaa/0/3130332e33382e3231362e302f32332d3233203d3e20313335363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.38.216.0/23
Signature Algorithm: sha256WithRSAEncryption
53:ec:b0:d4:10:7b:42:ed:bc:06:f7:6a:04:02:a5:9e:2c:26:
c8:e1:09:d1:90:19:2b:f3:57:82:b0:02:81:13:28:3d:af:d2:
d9:6e:10:2b:b4:a0:1c:de:2b:61:c6:83:94:d8:2c:77:2e:bf:
bf:81:ca:8b:8b:5a:c8:3c:ef:73:49:a5:15:cf:83:36:0c:72:
89:31:db:cf:1b:b8:95:d1:9c:22:9c:87:36:a4:e2:5a:47:49:
04:36:e2:db:fb:69:21:83:7a:6f:62:cb:1e:3e:0c:d6:5e:14:
7b:a1:8b:fa:b2:4a:34:cc:e3:48:f4:eb:b6:86:d6:80:95:e1:
70:07:14:99:c8:29:b8:b2:6a:2f:c1:e1:c9:3b:36:33:32:ce:
e9:11:7a:42:70:05:1b:54:8d:10:ba:94:7b:63:c7:5d:01:e1:
d8:d5:46:23:49:95:88:80:40:01:54:a2:d3:31:d0:1a:5d:06:
9b:d2:42:1c:53:8e:88:92:82:f0:4d:f7:3b:59:8d:d6:45:b1:
10:87:07:29:8f:39:95:4a:64:57:59:52:60:cf:60:fc:f1:e8:
f0:89:25:b8:63:35:25:58:a4:7e:66:3a:a2:14:c8:d4:9f:87:
06:86:dc:de:50:ad:85:a2:49:4a:7d:75:04:5f:00:21:1f:06:
be:3f:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:15:33 2026 by rpki-client