
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa
File: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier: Lk1tNkM5iXGzAH8YNwcIq2YC8yUeom1TAzpJAMLwNHo=
Subject key identifier: A4:9A:8B:99:F1:CF:00:C9:53:68:75:F3:BA:59:32:AA:3D:9E:96:71
Certificate issuer: /CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Certificate serial: 588F6344CD12DE37EC662F7C6C3172ED9D16FBEC
Authority key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa
Signing time: Sun 03 May 2026 02:12:29 +0000
ROA not before: Sun 03 May 2026 02:07:29 +0000
ROA not after: Sun 02 May 2027 02:12:29 +0000
asID: 131111
IP address blocks: 103.158.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:8f:63:44:cd:12:de:37:ec:66:2f:7c:6c:31:72:ed:9d:16:fb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Validity
Not Before: May 3 02:07:29 2026 GMT
Not After : May 2 02:12:29 2027 GMT
Subject: CN=A49A8B99F1CF00C9536875F3BA5932AA3D9E9671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f2:7c:66:63:d5:26:7d:31:b0:26:16:ca:54:
1b:96:1a:ee:f0:a3:ed:a9:4e:1b:ad:b2:9f:9d:d0:
6b:24:ee:0f:0a:42:e2:95:d2:b4:55:aa:3e:82:11:
95:cb:4f:05:f0:15:8c:78:b1:fe:89:fc:eb:0f:86:
63:5c:4e:4b:64:0f:59:87:83:57:e7:3f:be:76:e5:
ab:28:97:51:ba:1a:96:96:ac:2f:0e:b9:61:12:e8:
a0:3d:67:b0:8f:9a:14:0a:d8:84:d0:25:57:b7:7f:
78:88:4f:4b:77:65:ba:2e:00:6d:ce:a2:c8:33:6f:
ed:99:92:f0:b9:ae:80:e9:6e:8d:93:6f:ff:91:c6:
6f:9f:4d:05:c7:23:db:01:a5:17:a9:d6:17:ec:c2:
fc:51:7f:9d:f0:6a:0f:bd:c8:b9:97:97:16:2c:41:
94:10:93:2c:9a:8e:4d:aa:b0:91:07:cd:93:c1:95:
a6:95:5a:19:e0:40:45:97:98:bf:4d:f6:68:37:f8:
7b:e3:16:53:d4:03:55:4a:82:6c:a9:09:ac:4b:a2:
ae:9a:ee:2a:a7:78:23:5f:77:1f:af:14:40:c3:8f:
a9:1c:ff:93:0d:8e:7d:f9:04:2f:a5:66:6c:e1:c8:
4c:0b:46:48:4e:0d:b5:c8:4e:3c:4c:b4:1d:8d:09:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9A:8B:99:F1:CF:00:C9:53:68:75:F3:BA:59:32:AA:3D:9E:96:71
X509v3 Authority Key Identifier:
keyid:69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.194.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3a:f8:39:94:11:f3:76:1c:62:eb:01:a4:2b:f3:5c:38:ea:
60:33:ae:45:6d:3b:03:71:0a:f7:46:27:66:e2:7c:d1:a2:63:
54:58:b5:de:78:16:0b:a0:c9:0b:01:98:1b:2f:f8:f5:7e:08:
56:d6:7a:5f:44:f2:54:56:30:20:12:ca:68:47:01:7c:8c:56:
1b:9a:e2:99:99:cb:59:de:70:5b:5e:5b:ca:ad:e2:00:cd:a6:
d6:81:90:42:ad:09:77:5a:2b:16:ee:62:e2:0f:2f:bb:fd:5f:
19:59:96:1f:7d:44:cf:97:b1:41:f3:a3:f9:11:d1:0c:6c:2d:
53:4c:e9:9f:0c:3d:9d:f2:a8:0b:eb:c7:7b:42:d8:7e:58:2b:
e0:da:3e:49:d1:f2:7a:fe:ec:16:7a:c4:d7:f8:96:62:a2:3f:
af:72:f7:05:fb:21:4b:3b:9d:5c:4d:2b:f4:2c:24:97:e0:ac:
15:48:44:28:e7:95:7a:24:29:96:db:9d:5b:91:c2:87:58:12:
5a:49:b0:71:20:d0:4f:a2:4d:f1:dc:50:58:35:58:ef:05:2c:
4b:47:a1:1f:05:2e:e9:41:97:f7:7c:da:59:fa:fc:89:15:23:
a5:5f:f4:68:b9:3f:b6:b5:80:e6:00:cd:3d:0e:91:da:25:50:
d8:a3:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:24:20 2026 by rpki-client