
$ rpki-client -vvf rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa
File: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier: cg3Tr+ZR3IqdPJrclTSnhr/cIHYjQx4+i+x5ElcD2Yo=
Subject key identifier: 51:A1:4B:51:3A:29:76:00:47:3A:EE:82:6A:51:C7:0E:F3:1A:3F:E4
Certificate issuer: /CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A
Certificate serial: 06AF58B62006C1308B41A6AE64D8C213698A777A
Authority key identifier: FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa
Signing time: Sun 03 May 2026 02:10:22 +0000
ROA not before: Sun 03 May 2026 02:05:22 +0000
ROA not after: Sun 02 May 2027 02:10:22 +0000
asID: 131111
IP address blocks: 103.159.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl
rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:af:58:b6:20:06:c1:30:8b:41:a6:ae:64:d8:c2:13:69:8a:77:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A
Validity
Not Before: May 3 02:05:22 2026 GMT
Not After : May 2 02:10:22 2027 GMT
Subject: CN=51A14B513A297600473AEE826A51C70EF31A3FE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:fc:bf:aa:eb:70:06:61:3f:89:80:c4:9a:
f3:fc:d0:79:0f:06:2c:8a:ee:31:f2:d5:02:51:a3:
78:38:f4:de:47:44:6b:7e:a4:42:a8:67:12:da:06:
f8:61:1c:1c:02:fe:24:d9:6d:32:2d:e8:0c:09:b5:
08:0a:5a:dd:0a:82:d7:bd:fd:84:a1:47:e6:6e:29:
d2:37:94:30:0b:50:79:bb:d6:2f:db:02:76:38:61:
48:fa:06:c2:03:1f:30:94:6e:a2:91:96:18:6f:29:
70:10:aa:cc:a7:55:1a:70:1f:8e:84:c5:90:2e:27:
2b:dd:18:19:ea:87:2e:20:6b:6e:bd:23:aa:6e:c8:
91:ff:76:fb:52:52:26:6a:fc:11:41:e0:32:19:88:
e5:91:e0:02:04:8c:ef:f0:a9:39:ff:3c:fc:41:73:
5b:1a:f5:6e:c6:39:c1:ae:c4:cc:e3:8f:b2:51:f5:
67:16:36:e7:5f:35:59:0d:e1:9f:49:e5:7e:4c:5d:
76:ff:9f:01:50:2a:d1:f8:0f:83:c0:54:e3:e4:ef:
30:2c:73:01:8a:54:90:48:89:e5:7c:a4:fb:67:2d:
91:39:05:bb:c7:17:52:53:e5:c4:c0:16:f2:a5:8d:
63:ee:bc:e5:f7:16:56:d1:06:5a:39:0f:cf:93:69:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A1:4B:51:3A:29:76:00:47:3A:EE:82:6A:51:C7:0E:F3:1A:3F:E4
X509v3 Authority Key Identifier:
keyid:FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.202.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:ae:07:18:92:eb:39:74:f3:43:99:24:d0:2a:9e:3f:0b:92:
d3:7a:83:de:38:9b:16:d1:3c:9a:81:9d:ea:17:ba:a1:e4:d7:
4d:58:c3:91:ac:84:fe:5d:3f:fc:24:ad:da:25:67:28:a7:34:
c4:cb:12:84:54:da:4d:4d:3e:04:06:da:f6:13:42:7e:de:5a:
e6:b0:5f:a9:80:83:1e:10:2b:9a:24:fd:2e:69:ec:15:67:f0:
32:69:50:f5:8a:a8:6f:71:83:c5:83:89:4e:be:1c:22:ca:e0:
0d:d4:fb:7a:52:6f:a0:48:1d:2f:b6:dd:9b:6d:cd:d9:f4:f0:
e5:17:04:49:f1:c2:23:8e:d7:bd:29:d4:f9:77:36:39:b4:6d:
21:de:f7:6e:08:cf:18:84:4b:ad:a5:dd:75:eb:3e:df:42:ff:
c8:85:a2:ba:59:de:19:2b:aa:b8:41:4f:47:08:46:6f:06:da:
39:08:53:77:53:51:0b:40:d2:e2:4a:d4:ab:4d:e2:96:c2:4a:
d0:57:0d:dd:ac:f7:39:34:62:bd:78:8c:69:7e:d6:8c:a4:1b:
37:11:13:95:b6:9e:5d:94:a9:55:ee:9f:6a:fe:83:0c:90:05:
d2:81:a0:ec:6a:5e:7f:53:8e:81:c2:0b:68:15:bb:f5:b0:36:
ed:07:1e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:19 2026 by rpki-client