
$ rpki-client -vvf rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa
File: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (raw, json)
Hash identifier: AWLeqSIPPGZYHKfAsY5sORe/thUthJhR3mD21mk84m8=
Subject key identifier: 8A:B0:C3:58:FB:5C:92:90:DB:6A:79:3C:8E:2B:29:D6:19:23:73:E5
Certificate issuer: /CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
Certificate serial: 5F203B6C484FD3B8A0E6ADFEECCCCE5FAA2409EA
Authority key identifier: 74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa
Signing time: Sun 03 May 2026 02:20:06 +0000
ROA not before: Sun 03 May 2026 02:15:06 +0000
ROA not after: Sun 02 May 2027 02:20:06 +0000
asID: 131111
IP address blocks: 103.54.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl
rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:20:3b:6c:48:4f:d3:b8:a0:e6:ad:fe:ec:cc:ce:5f:aa:24:09:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
Validity
Not Before: May 3 02:15:06 2026 GMT
Not After : May 2 02:20:06 2027 GMT
Subject: CN=8AB0C358FB5C9290DB6A793C8E2B29D6192373E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:22:ed:a1:be:d4:cb:2e:01:f9:1c:3e:85:
43:e3:89:19:b5:28:e1:4b:8e:8d:eb:36:d4:a5:10:
81:e9:4d:a2:bb:d2:b8:76:12:f6:31:eb:c5:a1:73:
c8:90:d1:74:ee:da:cc:a4:73:7c:f1:17:60:bc:00:
2d:3c:d6:3e:ca:28:f6:6b:15:ab:78:dc:51:bd:12:
99:bd:7c:62:60:ff:49:3b:65:6d:e5:23:f3:fa:c0:
d9:98:98:06:fc:33:6d:47:e3:84:c9:31:0a:60:e0:
22:9b:2e:0c:3c:72:d9:30:73:d3:d2:d0:1e:24:38:
46:83:4d:66:57:e5:7c:fa:32:af:79:79:88:30:32:
5a:34:5c:21:dc:64:2d:d4:49:b7:41:db:95:34:52:
4c:a0:6e:58:15:c5:2e:ab:e9:89:64:99:8b:7e:86:
1a:6c:8d:55:01:f1:7b:ab:19:5e:58:ca:b3:8a:79:
4f:04:86:6b:85:fa:d9:4d:fa:47:cf:5c:85:51:e9:
25:45:0a:9b:7b:5f:61:0b:78:67:71:58:fb:8e:b9:
80:1b:bc:5a:29:82:c5:aa:93:ca:f7:2e:52:aa:88:
49:bd:11:b7:c4:8b:64:1e:1d:97:d3:ba:c0:4d:13:
12:71:a4:bf:f0:52:50:a6:a3:8f:c0:44:33:fa:ce:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B0:C3:58:FB:5C:92:90:DB:6A:79:3C:8E:2B:29:D6:19:23:73:E5
X509v3 Authority Key Identifier:
keyid:74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.216.0/22
Signature Algorithm: sha256WithRSAEncryption
91:2a:13:04:44:e8:0a:a7:8b:a2:db:85:e3:23:a3:cb:8a:9f:
13:e5:8b:96:b5:34:5c:89:af:6d:ce:87:f3:c1:25:78:3b:d9:
f4:04:d4:35:d4:bb:65:6e:4d:54:3b:a0:ee:82:fd:9c:10:72:
d4:97:e0:3e:45:e9:98:5f:e6:c1:e9:4d:de:f9:b9:5a:b0:1a:
92:5d:c0:27:d4:08:98:1e:ce:7b:f4:7a:3a:2b:32:57:22:b4:
02:83:73:84:8a:ed:76:25:34:c1:cc:2c:51:f4:c9:6c:11:6b:
0b:c9:8c:8d:36:5e:bb:04:fe:ee:af:13:6a:e9:63:ca:15:06:
28:af:1c:67:f5:ef:7d:18:b0:53:bc:74:e1:54:f5:92:b0:41:
d4:4a:58:48:13:bc:55:b6:9b:af:4c:88:53:92:eb:a9:18:1d:
d7:89:df:1d:63:74:76:22:f1:22:8d:ed:de:af:05:b1:e5:72:
7d:84:e3:5d:53:7e:e0:04:0d:09:0b:28:8d:e4:e1:94:34:db:
1b:9b:fb:22:80:2c:e5:01:c6:5f:d5:ce:e5:10:38:17:6b:0d:
c6:39:47:97:bb:da:87:54:18:c3:15:8c:cd:c2:80:f4:3d:dc:
b1:df:1d:59:92:f4:b2:ec:86:35:0c:2d:34:4d:24:1c:67:f2:
cc:c9:f8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:54:52 2026 by rpki-client