
$ rpki-client -vvf rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/3130332e3134372e37342e302f32332d3234203d3e203137373639.roa
File: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (raw, json)
Hash identifier: fGKw2WFahFPpQMw21POO2xmihiDm+uI9kc4e8STtyBE=
Subject key identifier: 38:F1:4C:F7:13:52:E5:86:EE:03:2E:C3:BE:85:7D:0C:80:80:20:63
Certificate issuer: /CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC
Certificate serial: 13099614139770A2D95864296D07A04FFCC57524
Authority key identifier: 8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/3130332e3134372e37342e302f32332d3234203d3e203137373639.roa
Signing time: Sun 03 May 2026 02:20:55 +0000
ROA not before: Sun 03 May 2026 02:15:55 +0000
ROA not after: Sun 02 May 2027 02:20:55 +0000
asID: 17769
IP address blocks: 103.147.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl
rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:09:96:14:13:97:70:a2:d9:58:64:29:6d:07:a0:4f:fc:c5:75:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC
Validity
Not Before: May 3 02:15:55 2026 GMT
Not After : May 2 02:20:55 2027 GMT
Subject: CN=38F14CF71352E586EE032EC3BE857D0C80802063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:e5:e6:7f:91:4f:c9:9a:fb:ef:cb:88:eb:
66:f0:c6:d4:0f:f0:5a:de:4a:12:c1:2a:1b:61:08:
0a:5f:35:9e:a2:5d:9c:49:21:6d:14:60:42:b0:7e:
6f:c2:25:a8:ee:07:9a:c8:c0:ca:8a:6b:00:5e:64:
43:d4:c5:36:3c:92:1e:50:eb:27:f9:d1:ec:a4:f9:
52:aa:5d:80:85:d0:c2:55:cf:c8:62:44:22:e0:72:
c9:fc:ef:c9:04:b6:33:0d:78:a0:e9:30:92:01:7d:
bd:5f:f7:fb:1a:00:b7:7b:81:fb:8d:cb:cc:81:7f:
82:cc:b5:74:88:86:bf:20:99:85:78:9c:51:32:65:
fd:40:02:1f:ab:47:bd:ca:82:f3:63:f5:9f:c2:db:
f8:dd:38:38:e3:92:a4:08:f8:6e:30:29:f7:79:2a:
8a:e4:d7:3c:20:26:00:1f:69:41:3d:83:02:5d:17:
c7:40:8a:f7:b7:02:ef:f9:7d:1e:d3:84:20:42:b0:
ec:ba:02:9a:2f:26:5d:af:69:41:bf:d1:3c:31:68:
35:fd:ce:79:4b:ba:71:6a:4c:9b:a8:ec:04:73:48:
c7:b8:c5:8a:2e:03:5e:c9:72:68:ad:3b:3c:20:d9:
17:e7:d0:b5:ac:f7:70:77:48:73:3b:46:82:65:f8:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F1:4C:F7:13:52:E5:86:EE:03:2E:C3:BE:85:7D:0C:80:80:20:63
X509v3 Authority Key Identifier:
keyid:8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/3130332e3134372e37342e302f32332d3234203d3e203137373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.74.0/23
Signature Algorithm: sha256WithRSAEncryption
de:c4:42:20:18:68:9f:e2:af:1d:59:fa:9d:82:e0:62:c9:ef:
37:68:01:cc:ce:11:07:04:53:c2:a0:a8:8d:4d:44:04:19:2e:
d4:35:10:95:67:3b:84:93:88:f3:2a:fc:84:08:e4:ae:ac:e6:
0e:c7:39:78:a5:11:dc:6a:bf:da:98:38:7e:89:81:ef:3b:50:
f7:9f:74:7d:5f:0e:a4:9a:13:50:41:ba:3d:37:a4:6e:7f:27:
32:ef:a6:8f:e7:55:99:66:7f:c7:19:62:69:42:26:66:85:c9:
68:d6:56:2f:1d:ae:e8:54:95:9f:43:64:1f:73:33:df:04:01:
2b:3f:3e:d2:d8:a6:dd:2d:e2:7d:1f:ff:7e:7d:35:a1:3c:52:
ec:46:fe:2a:90:00:3a:96:7a:a3:e4:f6:85:52:2f:b1:b6:b8:
df:63:1c:7e:db:ad:75:ac:e6:ff:82:7f:b5:e0:4d:35:f6:4e:
d1:e0:a9:cb:21:72:e7:0a:65:fc:4b:d3:83:b3:fc:f4:c7:ad:
9d:4e:75:c5:3f:c9:82:9b:0a:87:d9:28:ec:60:1b:3b:db:6f:
78:a0:28:e6:54:28:5a:f1:86:2d:0a:8d:c3:6d:fc:b0:b3:cd:
31:73:99:34:ef:b8:55:57:c5:af:73:9f:9f:cc:83:e4:4d:ed:
d9:cf:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:16:40 2026 by rpki-client