
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e362e33342e302f32342d3234203d3e20313332363334.roa
File: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (raw, json)
Hash identifier: s2Tpgag7FxdnRddbkWVhsKOC3K9zk4kizsUSEDbaWVQ=
Subject key identifier: F9:95:A9:E0:D1:BB:1E:C5:06:86:1D:AF:7F:6A:B6:B8:FC:E5:3A:BE
Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57
Certificate serial: 3C643A77EEF0DB5AC92B951CD16015A7B424D53A
Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e362e33342e302f32342d3234203d3e20313332363334.roa
Signing time: Sun 03 May 2026 02:19:22 +0000
ROA not before: Sun 03 May 2026 02:14:22 +0000
ROA not after: Sun 02 May 2027 02:19:22 +0000
asID: 132634
IP address blocks: 103.6.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:64:3a:77:ee:f0:db:5a:c9:2b:95:1c:d1:60:15:a7:b4:24:d5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57
Validity
Not Before: May 3 02:14:22 2026 GMT
Not After : May 2 02:19:22 2027 GMT
Subject: CN=F995A9E0D1BB1EC506861DAF7F6AB6B8FCE53ABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:97:99:4f:c6:c6:f1:5c:09:09:0c:c9:51:73:
ec:57:1e:56:73:42:cd:03:30:2c:a0:09:ff:3a:8b:
33:e7:29:99:16:74:cd:7a:54:70:07:8e:d3:0b:8c:
16:46:42:57:fb:32:0c:fc:b4:50:14:db:35:52:0f:
2f:15:b2:8f:77:e2:b3:17:2e:3f:67:4a:68:41:74:
6a:c2:e9:ce:d1:49:58:4d:6e:34:eb:58:5c:4b:ab:
e8:c0:d2:5b:e9:11:0a:29:16:27:5b:63:7c:f4:8f:
d8:f8:43:4f:83:15:63:2d:14:ca:89:56:4c:34:8b:
c0:d2:94:a0:97:ef:5f:2f:18:ce:75:49:27:11:65:
20:2e:7b:ef:5b:63:3e:de:8c:ba:f3:fa:32:cf:ad:
20:57:c0:8f:76:8f:dc:91:1c:45:c5:93:39:66:1f:
ac:28:71:32:33:09:ae:63:3d:56:e1:35:9a:44:ce:
7a:d9:b1:6c:81:a8:5f:ba:6b:73:0a:61:d8:7b:35:
31:72:71:de:a9:87:ec:10:55:0d:21:a5:ad:d3:25:
75:be:7a:47:a7:0a:db:4c:09:a3:e5:4e:8e:68:4c:
7d:29:53:5c:34:2c:37:4f:f4:53:7c:d7:47:ad:35:
fe:f1:88:fa:98:6a:fe:0a:75:06:b9:0b:62:94:d0:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:A9:E0:D1:BB:1E:C5:06:86:1D:AF:7F:6A:B6:B8:FC:E5:3A:BE
X509v3 Authority Key Identifier:
keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e362e33342e302f32342d3234203d3e20313332363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.6.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a1:ee:a1:97:7c:8c:eb:3c:60:d0:c9:ea:fb:ee:1b:39:4f:
09:b3:f4:77:ed:54:20:0f:3d:41:68:99:e1:3f:c0:c3:2f:bc:
b1:fc:e1:bd:4d:c2:31:2d:ce:3b:74:ff:e9:02:e9:4b:a6:86:
aa:5d:10:24:d9:ba:38:91:e3:af:d1:fd:a8:fc:be:c4:f6:48:
b1:d7:e3:d6:c1:3e:a3:cd:d3:8b:5f:12:18:01:75:6f:dd:9f:
66:65:59:e5:e5:9e:bf:65:56:81:b1:70:e7:56:93:89:0b:fa:
ae:c3:6e:89:4f:7f:64:58:5c:e8:95:a8:e1:f8:1e:c2:4d:fc:
10:6d:ef:db:26:ee:1c:0d:79:b4:31:2d:7c:51:8e:8a:83:cb:
ca:34:8e:ed:c5:61:65:04:cb:0a:7f:d2:31:08:e1:4b:f4:c1:
1e:5a:c1:d7:6d:75:e2:37:e3:1c:76:26:df:1f:49:47:d0:24:
a9:f8:70:f4:c6:08:0b:68:73:8d:eb:b3:88:9e:29:16:5c:0c:
04:11:4e:82:02:e3:81:a3:d4:72:4b:7b:28:12:3a:e3:6e:45:
f2:f3:58:44:e7:d5:3f:60:64:b7:c7:dd:3d:89:76:cb:50:d8:
b1:d7:62:2d:e7:6f:f5:2d:dd:b9:be:ad:d9:95:b0:3e:5b:fa:
03:b7:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:59 2026 by rpki-client