
$ rpki-client -vvf rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa
File: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (raw, json)
Hash identifier: ib7HPEQ/1sTUx6nXpMyLf2LdpmFve2tZtQrzXQVTi5I=
Subject key identifier: 5A:7D:A8:F8:6F:0C:6B:5E:83:43:7A:B5:4A:FE:5F:24:DB:CC:BE:A2
Certificate issuer: /CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714
Certificate serial: 7C0981A3A14D773C909B9B26F097885E6023A249
Authority key identifier: 2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa
Signing time: Sun 03 May 2026 02:19:27 +0000
ROA not before: Sun 03 May 2026 02:14:27 +0000
ROA not after: Sun 02 May 2027 02:19:27 +0000
asID: 149897
IP address blocks: 103.187.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl
rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:09:81:a3:a1:4d:77:3c:90:9b:9b:26:f0:97:88:5e:60:23:a2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714
Validity
Not Before: May 3 02:14:27 2026 GMT
Not After : May 2 02:19:27 2027 GMT
Subject: CN=5A7DA8F86F0C6B5E83437AB54AFE5F24DBCCBEA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:74:7c:79:c0:2a:f0:20:13:43:07:be:46:
2d:d2:d9:21:bb:4b:11:fe:5c:fa:d8:a1:a2:d7:6d:
ec:70:a0:34:10:ef:d9:b1:a3:fc:02:a2:3f:65:ca:
4c:f7:48:2f:97:77:7b:79:6c:67:98:b7:20:82:43:
9a:82:c9:a0:80:b7:8f:33:52:69:63:da:2a:99:44:
c5:5f:db:96:79:cc:3d:30:3e:94:bd:b6:65:b8:cb:
ed:24:2e:d4:99:de:7a:c0:0d:2d:51:6d:82:2a:4f:
2d:1f:57:c8:71:8e:23:13:c6:9f:b2:ea:29:52:90:
81:7e:c7:58:f6:73:12:9c:6a:5d:ce:0a:da:4f:09:
18:35:95:37:5d:43:c5:19:56:c0:de:2c:2a:fe:79:
f8:b6:cb:47:4b:22:b8:9e:46:19:f1:81:cb:f8:d2:
86:87:dc:fc:01:5d:24:43:e3:07:0b:78:ab:6c:2d:
f4:f0:5d:85:0c:71:7a:91:21:60:b9:e9:8a:06:bf:
57:7e:dd:cb:0c:92:1a:f8:64:af:40:77:d2:12:22:
db:f9:90:f9:17:09:a6:f7:90:4f:ab:17:c5:d8:64:
52:df:3e:ac:28:0b:e7:f3:ff:e3:76:9d:0c:fe:4e:
7d:83:e6:b6:6b:96:5e:10:84:bf:9c:48:80:89:35:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7D:A8:F8:6F:0C:6B:5E:83:43:7A:B5:4A:FE:5F:24:DB:CC:BE:A2
X509v3 Authority Key Identifier:
keyid:2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.164.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:41:9b:43:40:24:bc:3b:bd:45:2f:b0:bd:71:bb:0f:29:ff:
75:0c:9f:9e:81:bc:9c:a4:2d:71:c4:45:57:95:e1:44:fc:25:
02:80:f8:00:ca:90:6b:49:3f:fd:b6:a3:f8:04:ab:b7:87:70:
4a:8f:f3:b6:3f:12:60:36:20:4f:e5:17:4a:a3:e3:d2:b8:72:
64:92:11:f9:46:8a:74:66:13:7d:47:6c:25:4c:4c:33:3e:dd:
5f:6b:db:fd:99:3e:c7:3e:ef:e8:0b:c5:d4:9a:f1:a0:2a:7a:
c5:62:82:62:0c:9f:7e:34:78:e5:42:c7:75:b1:fd:dc:4b:0e:
0e:cb:bb:1c:87:8a:5a:f8:a3:d7:e3:57:38:bb:20:e3:a4:3c:
a3:1d:5c:fb:d8:78:2b:8b:7a:32:ed:ad:ca:82:00:4d:53:61:
18:39:38:87:04:69:5b:58:bc:c4:bc:4e:03:a4:f2:a6:0a:80:
db:96:15:00:cc:b1:ed:71:3a:43:dc:a4:e4:fa:8d:a2:76:36:
80:d9:ee:49:f8:12:48:f3:3d:9d:7c:7e:a5:71:35:48:a5:dc:
f3:8b:ce:dd:81:fd:f8:5b:3c:42:40:7a:a9:cd:fb:c9:79:27:
47:c1:4e:24:26:cc:98:6a:54:10:59:1b:ec:3e:1c:d5:3e:f6:
d6:e7:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:19 2026 by rpki-client