
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa
File: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (raw, json)
Hash identifier: NfZdw40oScaqtlsI5RivrkI1xwgmIqaZHKCKotkz/8w=
Subject key identifier: 6C:A8:6B:C1:4B:30:05:99:C5:A0:65:9E:E9:3E:F7:59:7F:95:52:DA
Certificate issuer: /CN=13A93ABF25B29F4F42FB718CCE181B65D3B54BCB
Certificate serial: 418E83DC4FDCB41BCB38A6784E2889E1E9DA733E
Authority key identifier: 13:A9:3A:BF:25:B2:9F:4F:42:FB:71:8C:CE:18:1B:65:D3:B5:4B:CB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa
Signing time: Sun 03 May 2026 03:01:07 +0000
ROA not before: Sun 03 May 2026 02:56:07 +0000
ROA not after: Sun 02 May 2027 03:01:07 +0000
asID: 140457
IP address blocks: 103.13.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.crl
rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 13:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:8e:83:dc:4f:dc:b4:1b:cb:38:a6:78:4e:28:89:e1:e9:da:73:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13A93ABF25B29F4F42FB718CCE181B65D3B54BCB
Validity
Not Before: May 3 02:56:07 2026 GMT
Not After : May 2 03:01:07 2027 GMT
Subject: CN=6CA86BC14B300599C5A0659EE93EF7597F9552DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:ba:db:af:e3:ff:31:5b:5b:41:24:84:b0:
c3:00:3b:c0:fc:da:0a:46:bf:37:7a:20:e1:08:e4:
31:d5:68:aa:1b:09:61:db:aa:a2:97:87:3f:27:04:
3e:7d:88:36:ee:04:7e:04:93:67:d9:4a:71:39:5d:
35:a3:11:1d:57:74:7e:71:7b:2f:bc:18:e7:92:de:
81:cd:6b:ef:c4:30:60:50:b5:65:46:b3:f2:b7:f7:
3b:56:7d:f8:75:c7:50:15:89:8f:b6:3f:f1:6f:20:
2b:0f:f9:dc:93:2b:00:2e:6b:22:27:2c:86:29:e0:
c4:ea:df:d7:3f:1f:e3:09:e4:80:72:21:52:a6:bf:
3a:d7:ad:1c:36:e7:43:a9:93:09:00:d8:4c:8b:c8:
de:07:c9:fb:f8:6c:d6:6a:d6:e2:84:6c:9a:c3:47:
be:72:b7:92:5a:b8:1b:99:d9:90:3c:be:29:46:9f:
07:64:4a:d2:b3:2b:3e:7c:a1:26:d6:bd:a2:e1:24:
c1:31:1f:d3:cf:d9:d1:81:0e:52:97:ca:a4:61:04:
3d:aa:21:88:39:87:5c:30:cd:fd:f0:3e:cd:96:b1:
17:66:29:ee:1f:e4:3e:65:9a:b5:fe:f3:f2:7b:0e:
12:a3:b9:92:c9:83:c4:9c:9a:a6:f1:b7:25:63:9c:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A8:6B:C1:4B:30:05:99:C5:A0:65:9E:E9:3E:F7:59:7F:95:52:DA
X509v3 Authority Key Identifier:
keyid:13:A9:3A:BF:25:B2:9F:4F:42:FB:71:8C:CE:18:1B:65:D3:B5:4B:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.136.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:3c:e2:4a:5b:c0:72:88:ab:9a:c0:0e:66:b9:83:89:ec:13:
fe:b1:b7:cb:56:23:a5:74:95:22:88:07:da:b7:36:0c:c2:8c:
40:16:2e:a8:a6:6c:8e:cb:e2:96:d7:de:a7:10:74:7a:0e:26:
9c:bb:2c:d6:2f:41:82:98:dd:53:3d:f0:35:86:c1:3b:af:43:
26:f5:89:d0:73:30:8d:18:85:54:83:90:13:6e:4d:c7:92:b1:
94:6c:cb:59:06:b3:9a:27:c2:85:ce:a3:cc:ac:07:d0:c5:d5:
d8:81:50:67:f3:a8:b2:61:f1:33:8f:aa:43:fb:db:a0:34:a9:
b7:25:cb:61:60:e6:fe:28:53:54:ea:19:1a:23:7b:72:22:4f:
42:ee:48:3b:bc:7c:df:0f:81:86:c2:d0:42:20:c2:69:46:6d:
93:39:85:6d:f4:aa:8d:f2:32:d4:ba:e9:cf:cd:aa:4a:9d:48:
9e:a9:2f:82:4b:63:0c:fb:77:d0:2b:67:5b:2c:68:90:1b:31:
7d:a5:82:d1:61:2c:70:91:d0:d3:82:a2:cb:90:d7:6a:10:e1:
11:bc:7d:d8:f8:33:dc:69:bc:cf:96:2f:d4:bf:10:27:ea:42:
9b:46:e1:14:af:1b:32:90:c6:22:d0:ac:33:f9:73:d8:32:90:
83:33:5a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 18:56:15 2026 by rpki-client