
$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34362e302f32342d3234203d3e203233363739.roa
File: 3130332e33312e34362e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: OWYiObJaqc/Z3EdwxKTbcXYbKygqdFCjSyxXYt1wd18=
Subject key identifier: F4:C2:E2:97:1B:7F:E0:EB:28:46:20:47:A1:82:D0:B0:54:F6:97:BD
Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial: 24743D02D7836B5D3BC874931D96D02422A99F6A
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34362e302f32342d3234203d3e203233363739.roa
Signing time: Sun 03 May 2026 02:18:43 +0000
ROA not before: Sun 03 May 2026 02:13:43 +0000
ROA not after: Sun 02 May 2027 02:18:43 +0000
asID: 23679
IP address blocks: 103.31.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:74:3d:02:d7:83:6b:5d:3b:c8:74:93:1d:96:d0:24:22:a9:9f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Validity
Not Before: May 3 02:13:43 2026 GMT
Not After : May 2 02:18:43 2027 GMT
Subject: CN=F4C2E2971B7FE0EB28462047A182D0B054F697BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b4:ac:88:e4:4e:74:30:51:7c:06:1d:48:02:
bb:9a:19:70:b9:f8:7a:ba:33:62:76:33:76:f4:85:
4a:5e:0c:51:e9:7e:9a:79:18:ab:59:72:34:fa:60:
e2:10:11:5b:ec:55:68:9b:fd:1a:9e:f3:f9:ab:b1:
02:b7:ad:c7:e8:b8:5c:92:34:31:cb:bd:fb:51:28:
2e:31:1c:91:75:61:4b:96:5c:e1:1b:4f:88:5b:54:
8c:f0:1e:1a:b5:8d:5d:b8:53:cb:ad:a4:5b:63:50:
b7:53:79:d6:15:0a:e5:07:7d:3f:8e:8f:d2:54:db:
a0:0d:ec:c7:85:74:d7:82:26:d2:0e:7c:70:c2:06:
25:a7:8d:14:9c:51:62:00:88:8d:c2:23:21:84:7c:
4a:5a:04:be:af:2f:7e:ec:13:b4:4c:62:85:74:91:
01:8d:95:21:0c:76:9d:af:59:b0:b9:56:24:8c:97:
ab:3a:d0:bb:e9:54:8b:52:2a:f6:5a:29:7c:d9:84:
dd:7e:50:ab:d5:c5:70:ed:12:20:fd:37:09:c9:3c:
26:03:15:78:f7:ce:f3:c2:41:64:01:0d:d9:07:9d:
7d:48:e1:67:42:65:8e:24:da:d4:15:93:9c:45:29:
44:48:b3:4d:ef:4a:53:22:4f:66:d0:a5:10:2c:cf:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C2:E2:97:1B:7F:E0:EB:28:46:20:47:A1:82:D0:B0:54:F6:97:BD
X509v3 Authority Key Identifier:
keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34362e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.46.0/24
Signature Algorithm: sha256WithRSAEncryption
62:df:5c:5a:fc:1c:a4:01:1b:bd:4b:88:f1:c0:c2:53:fd:3e:
24:55:e6:f9:58:19:2a:b9:d6:51:76:5c:75:dc:3a:fc:f4:ce:
8f:bd:5a:3a:dd:d7:9d:0b:37:5c:48:76:a5:d0:31:0c:c3:b1:
ed:4f:e9:4d:13:aa:57:74:56:d4:84:fc:d4:59:62:0f:76:f7:
41:8d:30:5f:75:2c:0c:f1:28:0b:6e:a3:65:25:5c:a9:31:d2:
b1:56:56:fc:ac:8d:8a:7f:0f:92:fb:fb:34:a6:17:1e:f8:90:
6b:7a:1d:b3:0e:75:5c:dd:89:f7:6f:e0:1f:f7:d9:e9:d7:62:
41:af:b9:1c:e5:6e:96:6f:20:c4:e9:83:eb:9d:63:a6:df:6a:
97:b4:31:93:b8:c1:a7:f0:4a:92:29:a0:e6:80:c1:3c:12:3b:
a5:22:f8:af:27:93:45:b3:2a:58:41:a9:04:91:6f:b2:d2:bf:
cf:53:06:06:35:10:6e:6b:2c:26:fc:99:79:ff:58:8d:e3:c3:
aa:c9:b2:a5:3d:1e:fc:09:dc:ce:0c:bd:86:34:89:d8:ae:42:
02:24:e9:af:5f:9a:55:3e:e1:a6:50:a4:25:41:c8:e2:63:16:
6b:f4:df:32:3f:54:34:17:14:78:6c:a7:31:b5:15:69:7b:0f:
81:ce:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:55 2026 by rpki-client