
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa
File: 3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa (raw, json)
Hash identifier: Q0OtuE0x+1dg20GdJHzojtIIWvsVtWVNvAlS/PxOJuA=
Subject key identifier: F4:F0:21:7E:F4:CF:57:0A:F7:59:C0:84:CF:3B:F3:1C:7D:08:64:06
Certificate issuer: /CN=7091DC8336BC57D39C24D1C393F2B14780B192CD
Certificate serial: 4520166A1CFCE3577705CAE7523FED0A919085A8
Authority key identifier: 70:91:DC:83:36:BC:57:D3:9C:24:D1:C3:93:F2:B1:47:80:B1:92:CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa
Signing time: Sun 03 May 2026 02:13:32 +0000
ROA not before: Sun 03 May 2026 02:08:32 +0000
ROA not after: Sun 02 May 2027 02:13:32 +0000
asID: 138057
IP address blocks: 103.120.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.crl
rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:46:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:20:16:6a:1c:fc:e3:57:77:05:ca:e7:52:3f:ed:0a:91:90:85:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7091DC8336BC57D39C24D1C393F2B14780B192CD
Validity
Not Before: May 3 02:08:32 2026 GMT
Not After : May 2 02:13:32 2027 GMT
Subject: CN=F4F0217EF4CF570AF759C084CF3BF31C7D086406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:2f:83:d1:97:d4:fe:4b:7a:ab:b8:25:c7:
21:94:9f:ba:4f:b3:8b:2b:4e:8b:ec:c9:54:29:c3:
15:33:da:a6:19:ba:29:48:ae:d3:42:a9:26:fa:4d:
c2:a1:fc:7c:0e:dc:aa:86:47:38:4b:7b:d4:cd:71:
54:17:93:1a:84:c0:91:23:2d:94:82:74:4a:92:9c:
57:08:d3:50:83:15:9b:d2:08:7b:a2:0c:f1:f4:2e:
a7:73:5c:2d:90:80:17:e8:a0:a2:d5:01:06:cb:78:
84:4e:6d:88:d3:58:98:82:fb:e1:5c:ee:1c:5b:7e:
76:01:be:ab:50:b7:6c:9d:9d:07:b2:a6:0b:67:33:
02:c8:85:70:71:fe:2b:a6:c5:b4:f3:1c:2c:d2:aa:
ec:15:26:e3:19:bd:72:cd:10:13:9f:aa:bd:1b:a3:
22:6e:dc:f4:7f:77:23:52:60:15:8b:f4:57:52:e9:
ab:59:53:2c:54:30:7b:fa:29:52:5b:20:bb:9b:d4:
91:f7:8b:86:7f:7a:85:a1:3c:3c:9c:af:9b:51:89:
76:f6:3f:53:74:ad:b5:84:d5:47:27:54:04:79:c6:
68:c5:3d:5f:0b:8c:0d:1c:7e:20:4a:8a:6b:aa:91:
db:8a:0a:3f:ac:40:2b:8e:33:f4:e8:81:2a:f4:70:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F0:21:7E:F4:CF:57:0A:F7:59:C0:84:CF:3B:F3:1C:7D:08:64:06
X509v3 Authority Key Identifier:
keyid:70:91:DC:83:36:BC:57:D3:9C:24:D1:C3:93:F2:B1:47:80:B1:92:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.120.138.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4c:77:d8:55:94:00:05:6d:dd:f0:4e:5c:47:44:9a:dc:14:
a8:8e:17:27:62:da:da:c1:ec:e3:c4:cd:df:ff:37:cc:a7:e1:
60:ff:dc:d5:2f:5c:a2:9a:36:46:c2:37:84:d6:cc:59:67:49:
a1:78:8d:2d:26:88:f8:6f:69:3e:88:3c:df:bc:7e:f3:17:e5:
43:ac:79:2c:d2:e1:72:0e:20:6b:e8:f2:f7:d0:31:4e:3f:dc:
10:a8:4d:7b:04:11:3d:bb:21:db:f0:08:05:40:0f:57:7c:ce:
75:db:a5:22:43:76:6e:52:98:ca:14:3b:e1:21:42:32:c1:4f:
5c:64:ff:d9:ac:6d:60:d3:7f:08:5c:9a:60:d0:a5:55:70:b3:
1a:39:b3:03:e6:c9:3c:1f:26:e0:7d:50:a3:bb:ab:22:4f:eb:
5c:9c:43:4c:e8:c2:f1:f8:a9:bd:72:f9:20:88:04:ea:ef:cf:
11:43:b2:73:01:f6:6c:75:b5:14:6b:7b:da:82:30:6b:81:94:
bc:48:19:47:95:5b:49:f2:c8:2e:55:56:38:87:35:59:1b:19:
a1:9f:6d:b4:f5:34:5d:6a:e6:0c:77:8d:7e:10:67:36:48:7a:
a3:7c:e0:db:22:ae:ff:70:35:94:12:55:17:f5:3d:2f:bf:33:
1d:17:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:15 2026 by rpki-client