
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa
File: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (raw, json)
Hash identifier: pv5zffL4ZCBhJD+aFjjZDdz/CPK6N+eA7QhskPfJHEg=
Subject key identifier: 86:55:9B:FE:48:3D:80:0C:22:F2:3D:F9:E1:38:21:2E:38:21:6D:D5
Certificate issuer: /CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113
Certificate serial: 357894781D45927461B90B43619506F078932AE7
Authority key identifier: FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa
Signing time: Sun 03 May 2026 02:18:30 +0000
ROA not before: Sun 03 May 2026 02:13:30 +0000
ROA not after: Sun 02 May 2027 02:18:30 +0000
asID: 150968
IP address blocks: 103.123.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl
rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:78:94:78:1d:45:92:74:61:b9:0b:43:61:95:06:f0:78:93:2a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113
Validity
Not Before: May 3 02:13:30 2026 GMT
Not After : May 2 02:18:30 2027 GMT
Subject: CN=86559BFE483D800C22F23DF9E138212E38216DD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5e:1a:fb:3e:27:b1:d2:a8:52:c5:b5:ba:b8:
8c:5d:63:a0:19:4c:5f:7a:45:60:4a:4e:05:88:95:
4a:60:c1:66:3d:19:6a:ff:c2:f9:b6:25:c4:c5:66:
c7:e0:10:1f:9f:d5:ff:d5:ad:04:39:bf:58:fb:73:
1f:fd:c0:9e:35:f8:c3:63:46:1f:e6:8e:e5:da:c4:
1a:a4:30:3a:74:dc:2c:7b:53:49:f7:f2:ee:f2:40:
bc:ad:87:a8:ae:3a:1e:7e:b7:bd:2a:8d:ea:b9:e4:
8a:f2:86:6f:e7:5e:2d:46:66:35:d8:dc:d2:fd:d2:
d8:21:4f:0d:79:36:81:32:c8:d3:91:1a:ad:da:f2:
87:8f:0d:f6:1f:4c:e7:f3:bd:ff:ac:83:56:50:b9:
d1:71:03:a2:96:a9:a5:db:bb:81:6a:22:cf:68:f1:
a2:33:e6:08:05:80:f5:49:d8:ae:80:13:13:ad:62:
3e:d1:cb:01:bc:76:60:6c:20:74:ee:88:13:2c:a0:
81:ba:ab:f6:f1:41:19:15:9c:d6:c6:23:39:17:d8:
c3:36:a5:6e:ee:6b:8e:d6:43:fb:07:ea:ab:6c:6f:
81:1c:f9:55:1a:a6:14:48:dc:bc:5d:cc:15:d5:56:
1b:68:0f:ba:7c:26:93:90:bd:04:e0:dd:e4:6f:ef:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:9B:FE:48:3D:80:0C:22:F2:3D:F9:E1:38:21:2E:38:21:6D:D5
X509v3 Authority Key Identifier:
keyid:FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:7e:9e:46:9c:ff:11:0e:5b:2e:30:7e:38:85:d9:d1:02:a9:
9a:8f:73:5f:83:82:b9:ac:3a:89:51:a2:ea:27:ee:37:f6:f9:
c1:bc:ce:e1:59:e8:3f:f1:3b:d1:42:af:96:df:29:ab:62:9b:
bd:f6:ff:fc:65:00:72:f7:08:03:3c:32:31:17:50:1d:50:bc:
67:3e:ef:70:fb:98:87:a8:6f:b3:fe:a5:72:82:87:95:60:60:
22:a7:dc:5d:bc:bc:7d:af:ef:33:3c:95:8d:fb:8e:4c:4c:19:
f2:0d:01:dd:e5:aa:45:29:d4:5a:70:f6:d5:e3:86:b8:79:2b:
b4:d3:7b:5d:1e:42:cd:9c:9b:bf:25:dc:e8:52:2d:ec:e9:ed:
a0:33:c5:26:5f:f8:f1:4f:dd:26:23:12:48:de:bc:b1:0d:a2:
19:34:9e:fa:7b:88:39:6f:d9:85:cc:2a:f1:02:9b:5a:8f:46:
2f:87:ab:5d:77:18:03:e9:1f:09:d2:99:81:d0:c7:9c:f1:87:
ab:4c:40:2a:6e:c5:df:06:67:b2:98:0a:76:ac:d1:92:b5:b8:
23:6e:9b:79:75:b6:cd:37:b5:7b:c0:c3:38:03:d1:a8:4c:54:
1d:12:12:35:57:b1:82:22:81:07:c6:c4:2d:0e:a7:fc:85:b5:
88:3b:d3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:52 2026 by rpki-client