
$ rpki-client -vvf rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa
File: 3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa (raw, json)
Hash identifier: nNVKvZ0ilopUJmLIwR3JaCCbYQBiWauo32pM1hDB2qM=
Subject key identifier: 47:97:EE:68:ED:82:84:BF:F6:73:71:72:78:0C:59:43:EB:88:4E:CC
Certificate issuer: /CN=143B0FF235C900164875105AD0C37F3C7DB28151
Certificate serial: 3E59F09C61AFCBF6FC1EC43AA7442AE96173EEC0
Authority key identifier: 14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa
Signing time: Sun 03 May 2026 02:14:07 +0000
ROA not before: Sun 03 May 2026 02:09:07 +0000
ROA not after: Sun 02 May 2027 02:14:07 +0000
asID: 135451
IP address blocks: 103.65.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl
rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:59:f0:9c:61:af:cb:f6:fc:1e:c4:3a:a7:44:2a:e9:61:73:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143B0FF235C900164875105AD0C37F3C7DB28151
Validity
Not Before: May 3 02:09:07 2026 GMT
Not After : May 2 02:14:07 2027 GMT
Subject: CN=4797EE68ED8284BFF6737172780C5943EB884ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:aa:d7:ff:36:81:fd:6e:d6:ec:49:40:f0:c2:
78:bb:2d:10:38:31:d4:fa:7a:e0:6e:c5:ee:b8:a2:
16:b8:05:18:cd:4f:7f:19:08:8b:05:70:a3:06:c6:
4d:e6:51:2f:7d:b8:58:de:9a:5c:cf:90:6c:f0:a6:
e9:82:a9:c9:a3:e0:6e:41:a4:66:84:b5:31:15:cc:
92:15:1e:08:7d:cf:e3:d2:2f:f6:7e:1f:ab:6a:d3:
52:7a:9b:c9:7d:21:0d:d1:2c:86:56:8d:4c:3b:fa:
8d:23:8f:bb:0c:20:29:e7:71:6b:62:72:8e:cf:15:
fb:b0:90:ef:f5:09:94:c2:c2:7b:e0:af:af:6e:14:
f9:45:7a:f7:b8:3f:ed:e1:2e:04:6b:e8:38:cb:ee:
db:95:43:31:aa:65:db:3e:c5:10:51:88:90:3a:85:
e2:44:0a:b4:d1:57:d3:52:b8:28:5c:b3:b6:26:c0:
da:03:10:82:d4:59:b6:6e:2b:a0:9a:b1:14:aa:9a:
89:75:e6:f3:b8:58:d7:1c:da:51:5c:45:60:9a:34:
f1:d1:fd:a3:de:76:b4:22:69:41:67:8b:51:42:f5:
78:ac:ba:32:1f:e0:3b:75:42:4e:07:28:a5:56:af:
18:06:af:78:ee:e4:b8:1e:a6:8c:ec:8f:46:dd:75:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:97:EE:68:ED:82:84:BF:F6:73:71:72:78:0C:59:43:EB:88:4E:CC
X509v3 Authority Key Identifier:
keyid:14:3B:0F:F2:35:C9:00:16:48:75:10:5A:D0:C3:7F:3C:7D:B2:81:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/143B0FF235C900164875105AD0C37F3C7DB28151.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/143B0FF235C900164875105AD0C37F3C7DB28151.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.65.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:cd:86:19:36:44:9d:63:a2:66:52:09:2d:31:c0:9c:07:ae:
bf:26:8a:fd:fa:06:e6:62:05:bc:a0:de:86:9e:cb:78:59:8e:
1f:9f:8e:69:47:32:1a:2f:d6:d8:84:b8:c7:d5:78:ff:99:4d:
80:d9:51:9e:15:d8:4c:50:56:b6:93:8b:09:93:3e:d8:97:f8:
86:bf:da:83:33:1f:b9:bc:ed:1d:ad:d7:97:50:ec:57:07:13:
1d:5e:78:6e:17:bb:01:76:2b:b8:c1:c6:8f:48:6a:f1:1c:1b:
87:ec:c9:78:5e:e6:28:44:97:d4:aa:4a:c1:f4:17:56:11:ef:
57:d5:06:2e:87:62:d5:ee:d1:9a:64:81:81:53:f7:18:7b:e6:
83:a6:35:9c:4d:0e:da:f3:d1:0a:68:e7:7e:c1:cf:12:37:e5:
0c:13:b3:b3:f3:7e:d2:01:be:5e:af:b8:a3:2d:9a:99:82:27:
f3:22:e8:c5:71:f6:f5:94:a1:13:5c:a5:e3:b9:0e:48:d5:3e:
95:92:5c:62:a5:5a:00:a2:53:e2:0e:80:4a:ee:94:05:7d:bc:
7b:f5:49:19:7c:b2:9a:ee:9a:28:57:34:7d:85:58:f8:4f:3f:
27:fd:24:62:0e:c7:7d:c9:fc:24:ec:74:49:5c:f5:04:4f:cf:
69:97:2f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:11 2026 by rpki-client