
$ rpki-client -vvf rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa
File: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (raw, json)
Hash identifier: eZWOfDrRyxrGj36EawOrumVWs/n0x3oAEO6+YE8bAMk=
Subject key identifier: DC:DB:4C:78:85:10:19:A3:07:32:6F:46:74:9D:FC:B6:80:91:8A:EB
Certificate issuer: /CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450
Certificate serial: 532380FB3D88A300A9BCC32DE34B3316A744ECFE
Authority key identifier: A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa
Signing time: Sun 03 May 2026 02:15:15 +0000
ROA not before: Sun 03 May 2026 02:10:15 +0000
ROA not after: Sun 02 May 2027 02:15:15 +0000
asID: 149972
IP address blocks: 103.147.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl
rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:23:80:fb:3d:88:a3:00:a9:bc:c3:2d:e3:4b:33:16:a7:44:ec:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450
Validity
Not Before: May 3 02:10:15 2026 GMT
Not After : May 2 02:15:15 2027 GMT
Subject: CN=DCDB4C78851019A307326F46749DFCB680918AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:48:bd:ec:51:82:32:8c:c2:ca:32:e1:62:
1b:1a:83:f3:86:70:a3:78:0a:fe:c2:a5:ba:48:dc:
51:4b:58:71:8a:91:71:af:88:b6:d7:c2:50:d6:4d:
96:74:aa:55:f6:60:3a:cb:aa:6c:ee:2f:0e:e6:3c:
82:3f:03:17:f0:da:11:70:30:03:d4:51:cd:9e:db:
74:6c:59:75:2a:b0:0d:8f:5b:c5:96:eb:d7:be:76:
bb:e9:de:7a:5c:70:ef:29:a1:7a:ee:93:93:12:44:
b8:72:23:bf:00:ab:6b:96:df:81:bf:a4:c7:f1:5d:
af:5a:21:bd:d2:2a:7e:26:39:7f:ed:7d:d4:54:af:
fc:69:66:91:76:e8:2a:65:95:40:7a:05:14:bd:ab:
84:08:99:51:97:8e:6c:5a:97:b9:a7:69:64:3d:fe:
6a:2c:54:58:41:b7:ea:d4:47:c6:ee:86:ab:15:39:
2c:49:6e:13:3b:c5:6f:b5:02:41:6f:ec:28:f3:18:
10:e9:98:79:0e:84:06:85:dc:7f:9b:85:9d:89:26:
40:c4:58:ca:80:b5:e0:7a:80:7b:b9:61:25:e0:25:
d6:ce:3a:c5:3f:46:64:9e:b2:6c:e0:b7:b4:8e:e5:
ef:73:d3:fc:b6:f5:7c:57:6a:64:4b:89:81:9c:90:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:4C:78:85:10:19:A3:07:32:6F:46:74:9D:FC:B6:80:91:8A:EB
X509v3 Authority Key Identifier:
keyid:A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.114.0/23
Signature Algorithm: sha256WithRSAEncryption
37:36:43:37:35:32:3c:d7:5d:3e:9a:ea:28:c9:81:2b:45:a4:
5a:7c:c0:07:97:23:e3:86:cb:70:e3:02:84:0b:c4:81:8f:98:
c7:67:eb:48:61:05:b2:43:90:31:df:f2:e3:8c:2b:37:28:05:
b9:1a:40:da:f8:8c:a1:1b:01:a3:70:9a:11:65:0c:9f:07:72:
d6:60:3d:77:cd:98:61:05:60:5f:14:99:4a:61:fd:43:28:cb:
5f:cb:a5:44:ca:65:98:ba:15:ad:81:ce:95:e6:68:c2:29:74:
00:9a:05:c3:ec:ef:31:2e:95:d6:66:2e:3c:7d:1d:0c:aa:3e:
65:13:7e:cf:db:e1:89:25:dc:3e:21:0d:14:93:19:a8:9d:91:
26:31:72:49:66:4f:c2:c1:b8:f0:44:d8:80:50:1e:5c:94:58:
cd:a5:d4:74:69:eb:4e:22:a0:a2:b4:12:8f:d8:14:23:bf:29:
7e:0f:c6:08:97:6e:a4:cb:25:41:84:37:85:7f:50:eb:64:4e:
08:b4:fc:6c:fa:72:14:42:60:54:b4:cc:32:57:d0:33:3e:d7:
28:80:80:59:9c:3b:af:94:ff:f4:db:75:67:3d:03:ef:c4:c8:
0d:35:2f:ce:88:19:1d:05:cd:02:ef:4a:fc:b3:8b:a7:6e:a7:
a1:8f:8a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:45 2026 by rpki-client