
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa
File: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (raw, json)
Hash identifier: rPP6V0AAbWQPb0tykKnGuJ9vTxTL/c/Ko2tg0hbJTrk=
Subject key identifier: DC:B0:BE:3D:95:46:33:FC:54:50:0F:90:0F:21:73:AF:DA:46:73:1D
Certificate issuer: /CN=369A5CE4785D27442508404CAC16E70E3DFBCE22
Certificate serial: 75F84779C03FF63644A1FAE668759E7CDD7B312A
Authority key identifier: 36:9A:5C:E4:78:5D:27:44:25:08:40:4C:AC:16:E7:0E:3D:FB:CE:22
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa
Signing time: Sun 03 May 2026 02:20:34 +0000
ROA not before: Sun 03 May 2026 02:15:34 +0000
ROA not after: Sun 02 May 2027 02:20:34 +0000
asID: 138072
IP address blocks: 103.123.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.crl
rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f8:47:79:c0:3f:f6:36:44:a1:fa:e6:68:75:9e:7c:dd:7b:31:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369A5CE4785D27442508404CAC16E70E3DFBCE22
Validity
Not Before: May 3 02:15:34 2026 GMT
Not After : May 2 02:20:34 2027 GMT
Subject: CN=DCB0BE3D954633FC54500F900F2173AFDA46731D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:85:24:8a:92:8b:91:58:8c:84:d5:d7:a1:
ea:71:eb:c0:36:43:bf:9c:c6:46:0b:8d:7c:e2:7c:
be:25:2f:b0:85:24:9e:ab:0b:3e:95:c2:01:c9:03:
a8:b4:0e:78:c6:8c:6d:59:ee:91:ec:48:27:22:c3:
b7:1a:2b:3f:11:4b:12:83:37:52:53:ab:95:96:63:
8f:db:47:c2:fd:9c:51:7e:18:62:09:f8:68:04:31:
48:e9:ea:ed:af:71:82:a8:af:8f:97:9e:c6:09:c4:
e7:7c:e3:ff:1a:fc:67:e7:f0:0b:15:04:d1:b4:c3:
f4:3e:73:7a:2f:17:e0:ae:b3:54:d1:a0:bd:a1:20:
04:8f:a6:01:38:fe:b8:08:c8:86:a8:62:cd:fd:f8:
15:f4:67:91:94:03:6d:f5:8a:7f:12:3d:29:e9:07:
57:6d:09:ee:15:c8:bf:cc:bf:c3:78:21:c4:bc:55:
55:9c:8d:75:fb:53:25:d4:1c:a0:d9:dd:a3:92:40:
b7:80:86:fa:a6:d8:c3:4a:29:0c:e5:96:75:38:db:
0d:10:93:7c:92:4f:a7:9f:01:6e:f7:f8:1b:27:57:
32:2c:10:64:a0:70:13:34:64:25:b2:08:14:fa:74:
30:e4:76:f8:cc:59:fb:90:9f:65:29:13:f1:11:53:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B0:BE:3D:95:46:33:FC:54:50:0F:90:0F:21:73:AF:DA:46:73:1D
X509v3 Authority Key Identifier:
keyid:36:9A:5C:E4:78:5D:27:44:25:08:40:4C:AC:16:E7:0E:3D:FB:CE:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.120.0/24
Signature Algorithm: sha256WithRSAEncryption
60:aa:01:da:9e:b8:87:05:33:e4:69:78:7e:a2:29:9a:76:13:
b1:f9:7a:02:d4:e6:0c:9a:8c:30:30:16:d1:b1:30:e9:9d:d8:
bd:bb:fd:9f:f8:f8:c2:99:cf:90:4c:53:14:36:7a:29:e8:be:
b4:bc:eb:29:5c:73:ef:c0:8f:dc:70:20:3d:3c:24:0b:f5:48:
84:2d:4e:8b:f6:1e:7c:01:06:32:7f:e8:33:5c:9b:c5:db:73:
de:d3:67:a6:67:dd:32:d9:82:14:5a:15:a2:58:14:af:21:66:
c2:7e:97:91:8c:da:1b:4d:54:57:ca:9e:81:ae:bf:7b:8b:30:
18:fc:2b:e1:86:6f:62:47:a5:aa:65:f0:2f:54:98:6e:71:e8:
28:cf:c1:03:0b:8a:1e:60:ae:c7:0e:e7:3f:3e:d5:31:23:7e:
74:c2:25:c4:4f:e4:62:ad:63:3a:6f:a7:b6:69:03:61:8e:69:
7f:df:b4:81:92:ee:f8:85:78:2d:a4:8c:76:ec:a4:84:17:51:
22:ce:86:92:60:01:7e:10:e2:61:69:4a:41:f8:92:73:f9:dd:
52:03:0e:60:93:f3:ba:40:7d:6e:db:21:2f:f1:96:c9:64:40:
ae:a0:f2:80:79:bd:0b:f2:54:36:2a:91:9e:b1:f9:54:fc:0f:
34:ff:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:46:15 2026 by rpki-client