
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa
File: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (raw, json)
Hash identifier: CzpBmVwagEtnKqxKjT1pUSrqGuU3xrwBdruiL5NCJ14=
Subject key identifier: 85:96:3C:A7:3E:58:98:70:30:D9:60:F8:3C:AD:7A:9C:75:54:46:CD
Certificate issuer: /CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Certificate serial: 6B3CBDA7E38C2396D8AB72B254D2B4FC526E63A9
Authority key identifier: 10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa
Signing time: Sun 03 May 2026 02:15:42 +0000
ROA not before: Sun 03 May 2026 02:10:42 +0000
ROA not after: Sun 02 May 2027 02:15:42 +0000
asID: 149344
IP address blocks: 103.176.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3c:bd:a7:e3:8c:23:96:d8:ab:72:b2:54:d2:b4:fc:52:6e:63:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Validity
Not Before: May 3 02:10:42 2026 GMT
Not After : May 2 02:15:42 2027 GMT
Subject: CN=85963CA73E58987030D960F83CAD7A9C755446CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:57:1a:a4:df:38:cb:54:46:b4:d5:e3:d5:
a9:ee:1a:fc:75:58:de:6b:c8:3c:f0:69:b4:0e:7e:
b8:b9:1f:0e:c7:d7:38:69:57:6d:57:d9:ae:05:41:
0a:da:00:61:1b:f4:5a:83:5e:b1:4f:59:e7:e7:42:
a6:88:3d:6c:70:68:90:72:5f:ed:9d:35:26:6f:0c:
d1:a2:a5:5b:1d:79:2c:3c:0e:2a:80:ff:f4:10:c7:
39:77:e9:18:53:70:cc:4b:51:6b:48:7b:be:c9:5c:
aa:41:92:a9:bd:ea:f0:de:fa:4e:e2:93:81:52:8d:
7e:fb:1f:19:c1:7f:78:a5:c9:3d:89:97:71:60:b1:
22:d2:a7:66:3e:b2:86:3c:33:ea:cc:62:2b:17:c1:
dc:7e:c0:6e:47:73:5b:16:27:4e:a3:6f:c4:e2:6d:
a9:0f:3d:ed:12:b7:c3:2a:0c:65:c3:71:d9:3c:f1:
68:80:e4:32:00:b5:28:3b:a3:c0:0b:68:45:94:45:
b7:77:f7:cc:f1:05:4e:95:d3:a8:c0:54:2a:7f:5a:
16:1f:7d:bb:be:de:b1:1e:1a:4f:d3:8e:ba:d4:ce:
3e:fd:ed:32:3d:6a:e9:cc:17:77:3d:37:37:ee:bc:
8e:0b:ef:1b:1d:07:7a:9e:9e:19:83:97:d4:2c:8e:
37:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:96:3C:A7:3E:58:98:70:30:D9:60:F8:3C:AD:7A:9C:75:54:46:CD
X509v3 Authority Key Identifier:
keyid:10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.98.0/24
Signature Algorithm: sha256WithRSAEncryption
78:55:a4:27:aa:55:d1:0a:53:d8:fe:2f:95:4f:64:44:40:49:
01:e9:87:68:db:4d:4f:4e:9d:91:c1:e0:fd:25:82:21:33:02:
b0:8c:bd:b7:e8:ac:d5:b4:9d:86:d7:e1:2d:f0:df:fa:df:59:
d8:8a:12:d1:d3:68:58:8f:79:c2:56:8b:5c:eb:00:68:2c:d1:
37:e7:67:79:c4:7b:8e:0c:d9:cb:3e:b3:f0:1a:12:72:71:75:
8a:ad:d3:60:88:61:bd:e2:af:c6:5b:5a:e3:31:2b:16:89:87:
39:8b:07:bb:20:7c:ab:a5:6f:51:43:af:16:54:e3:de:ee:e8:
03:3d:f0:f3:52:72:3f:ae:78:3c:49:23:14:62:b0:5d:f9:91:
11:29:7c:dc:f7:c2:18:cc:56:b8:f6:23:6c:56:4a:50:98:a5:
09:67:f6:e8:3a:f6:ab:56:2d:4d:52:ba:f6:d1:3d:80:49:7b:
b2:a2:37:6b:72:c0:f3:68:86:c7:c8:e6:be:4d:db:3e:b5:71:
4c:18:af:d8:36:37:bc:77:50:53:a7:cb:a8:82:33:d0:79:41:
b0:c4:1b:4d:01:f7:06:e5:48:04:a4:bf:e1:b0:78:97:62:30:
af:df:5a:dc:95:bb:68:b1:cb:f0:9d:c6:6f:cf:a3:08:cf:c5:
ef:b7:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:24 2026 by rpki-client