
$ rpki-client -vvf rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa
File: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (raw, json)
Hash identifier: u9JlmtwFnIY99dq5rQ8a+yuZuvWYaV5aieCQMyyf0yI=
Subject key identifier: FD:9F:E9:15:CC:42:C1:9E:07:E9:7B:C3:EE:17:E3:42:A9:1F:0A:29
Certificate issuer: /CN=E4E77812E2CFA75939A641BB7F633F97582E6792
Certificate serial: 29E2EACF333222148D7280F466C0F23CCB26185D
Authority key identifier: E4:E7:78:12:E2:CF:A7:59:39:A6:41:BB:7F:63:3F:97:58:2E:67:92
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4E77812E2CFA75939A641BB7F633F97582E6792.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa
Signing time: Sun 03 May 2026 02:19:53 +0000
ROA not before: Sun 03 May 2026 02:14:53 +0000
ROA not after: Sun 02 May 2027 02:19:53 +0000
asID: 131773
IP address blocks: 103.134.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.crl
rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4E77812E2CFA75939A641BB7F633F97582E6792.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e2:ea:cf:33:32:22:14:8d:72:80:f4:66:c0:f2:3c:cb:26:18:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4E77812E2CFA75939A641BB7F633F97582E6792
Validity
Not Before: May 3 02:14:53 2026 GMT
Not After : May 2 02:19:53 2027 GMT
Subject: CN=FD9FE915CC42C19E07E97BC3EE17E342A91F0A29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:31:ea:f2:a3:ed:3b:a8:60:24:0c:b6:bb:a8:
98:73:92:c3:1f:11:9d:f3:d3:ce:2b:1a:ca:33:49:
1e:15:81:a4:76:21:07:36:bc:a5:9c:59:c8:5f:1f:
75:d9:46:1f:f1:da:72:86:27:6c:1b:6c:22:cf:f3:
72:21:7c:35:05:38:ed:73:2b:96:b2:08:9d:72:b3:
98:9d:cf:4a:2a:93:da:36:83:95:02:6e:1c:5e:9a:
9a:9c:a3:24:d5:6d:fb:d9:72:54:e2:f5:a0:05:55:
57:12:65:18:ae:32:57:ad:18:19:a9:d3:3c:88:cf:
7e:b2:1f:01:76:69:01:93:cd:c5:f9:c1:70:7c:4d:
f7:44:ad:8f:ee:ff:f2:81:f9:be:d9:be:c6:d2:0b:
bc:db:ce:c2:bc:db:08:2f:e9:c3:f2:2d:d7:c2:32:
25:af:78:7c:16:e3:a2:a1:dc:16:b7:21:ae:6b:4c:
6d:b8:cb:46:65:c8:64:38:0a:50:f8:93:52:5b:00:
3e:94:d2:44:ad:38:0d:f6:83:ab:f7:64:96:66:9a:
92:41:57:31:33:bc:ce:b9:71:95:0c:aa:3a:83:e4:
7b:8c:6c:83:b3:5a:d3:9d:80:5f:89:10:10:59:72:
42:ac:5d:e6:8b:94:e9:e1:17:1d:ec:ad:af:fe:94:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9F:E9:15:CC:42:C1:9E:07:E9:7B:C3:EE:17:E3:42:A9:1F:0A:29
X509v3 Authority Key Identifier:
keyid:E4:E7:78:12:E2:CF:A7:59:39:A6:41:BB:7F:63:3F:97:58:2E:67:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/E4E77812E2CFA75939A641BB7F633F97582E6792.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4E77812E2CFA75939A641BB7F633F97582E6792.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.246.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f2:d9:d9:ec:8b:7b:75:a5:67:19:3b:9a:8b:3f:fe:8f:5c:
5c:b6:dd:4a:cb:7c:a9:d0:4a:09:31:3a:38:ed:11:3d:2d:f9:
5c:0b:f9:0d:09:d8:35:83:9b:7d:53:9b:92:4f:b6:e7:75:94:
2d:0f:da:6f:ae:24:ca:4d:b0:67:0f:ae:b1:51:62:79:72:85:
0a:0a:8e:3c:ea:f1:41:ad:6b:59:4b:72:43:3a:26:f9:9e:26:
bc:a0:68:93:a3:df:94:d3:e4:17:83:ef:89:65:df:a4:0a:4d:
87:22:79:6f:e8:4d:f0:b1:69:1c:4c:e7:79:8f:19:45:96:c0:
39:d3:e2:28:21:76:79:77:3f:bc:29:26:ab:f7:38:b1:f9:5c:
b4:f2:a5:bc:bb:1e:7f:e9:02:e2:f6:3d:45:16:13:3d:19:d9:
d9:b5:66:5b:64:83:fe:64:42:bc:c7:a7:ef:81:20:a0:f5:45:
ed:a4:7f:61:83:7a:02:82:55:51:d9:cb:56:e6:e5:2a:40:6d:
0c:3c:3a:90:ce:2f:3c:f1:e5:be:18:17:11:a2:43:7a:58:1d:
e9:57:2a:32:a7:ee:6d:92:fa:c0:69:30:d9:93:f1:1d:9f:c4:
cb:10:ab:dd:9f:af:89:49:e1:fa:34:a3:5a:bf:b5:21:f0:99:
bf:2c:61:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:17 2026 by rpki-client