
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa
File: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (raw, json)
Hash identifier: DzuRo4UVpWSsuuvSZCPx+QPp1mXNSgbHMp2M3XRIA7s=
Subject key identifier: 68:F6:16:DE:91:6A:CA:EA:02:57:35:3B:47:7A:B8:E8:01:E4:5D:A6
Certificate issuer: /CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113
Certificate serial: 5E018C76830205CAF8EF70BFF9873D8C8DA1250B
Authority key identifier: FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa
Signing time: Sun 03 May 2026 02:18:29 +0000
ROA not before: Sun 03 May 2026 02:13:29 +0000
ROA not after: Sun 02 May 2027 02:18:29 +0000
asID: 150968
IP address blocks: 103.123.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl
rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:01:8c:76:83:02:05:ca:f8:ef:70:bf:f9:87:3d:8c:8d:a1:25:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113
Validity
Not Before: May 3 02:13:29 2026 GMT
Not After : May 2 02:18:29 2027 GMT
Subject: CN=68F616DE916ACAEA0257353B477AB8E801E45DA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:6c:d5:0b:90:fb:34:73:e9:75:82:76:23:
c0:39:46:cc:ad:a4:8a:57:4d:c0:61:92:d9:ef:e8:
42:1e:13:ba:86:25:8c:f0:f1:f2:db:50:9f:12:12:
ee:ca:82:a6:57:24:3b:fc:51:a4:44:c8:e1:9f:85:
a6:b9:84:18:53:2d:1d:1c:c4:fc:9f:e3:a4:0b:4b:
c2:84:9c:e8:36:43:28:a6:3f:10:9c:8a:97:58:0b:
98:64:ab:ed:b9:ee:eb:51:e8:54:f8:f9:5e:33:e4:
06:db:07:73:9f:92:09:14:35:cc:24:5b:52:fe:e7:
0d:4c:2a:7b:cd:ec:ad:ec:4f:6d:b4:24:27:bc:6c:
c5:79:de:68:44:4c:93:59:55:65:89:9a:2c:dc:3b:
e9:c5:d8:cc:ad:f5:f5:0a:c8:e1:64:74:d9:db:97:
45:07:b0:7c:25:26:e8:98:ab:21:10:26:88:a0:d0:
cd:d6:73:ad:20:96:2b:d7:6f:db:5f:ad:19:09:19:
ae:84:30:de:fc:ba:53:99:41:b4:72:36:76:60:24:
cf:98:a2:ab:56:b5:9d:52:cd:a5:6f:75:7e:69:57:
f7:0a:e9:f3:43:3a:4b:93:d8:63:a9:7c:86:62:51:
52:be:e0:a7:36:cd:36:02:f8:76:55:f0:e7:ba:6e:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F6:16:DE:91:6A:CA:EA:02:57:35:3B:47:7A:B8:E8:01:E4:5D:A6
X509v3 Authority Key Identifier:
keyid:FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.174.0/23
Signature Algorithm: sha256WithRSAEncryption
67:76:11:72:11:c9:6b:08:16:a6:2a:03:28:6d:10:8f:30:3f:
8d:0e:5b:91:1c:83:aa:b4:6c:27:f1:04:58:dc:a0:cf:73:c7:
34:a4:9c:f1:11:00:de:ab:18:d6:cf:10:98:b9:d1:f4:56:64:
5b:77:d3:79:53:ae:a5:90:e8:c4:f2:44:0d:af:78:08:9d:f3:
5c:d1:98:1b:0b:e4:85:bb:ee:f9:42:a5:f4:42:d4:d5:98:63:
a9:c5:52:c1:3e:03:1e:f6:81:2e:f8:a2:3b:e1:e1:86:7f:e7:
3f:0f:4f:fa:31:94:c7:86:10:52:75:fd:cd:8d:76:86:17:81:
33:e8:52:e8:cf:ba:4e:4f:1c:df:f0:a4:45:9a:86:fe:19:b3:
39:71:3c:90:97:ce:1a:bf:a5:6d:1a:31:53:33:80:f6:e0:68:
f1:5b:e7:79:b9:09:38:ae:5b:0f:6b:19:c0:c4:58:97:3a:40:
5a:e9:be:b3:3c:72:f6:b6:d7:b1:2b:4e:00:99:77:4c:f0:fb:
b4:26:2c:f4:c2:27:08:37:fd:9a:73:63:c6:96:20:e8:76:ec:
fb:a5:f7:f8:a7:4b:b1:75:07:99:a6:ef:f2:ec:2f:cb:94:fd:
da:09:80:9c:7c:f8:8a:6a:6b:b7:67:54:a4:bd:22:d0:44:7b:
bd:bb:cf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:48 2026 by rpki-client