
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa
File: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (raw, json)
Hash identifier: nH3r82YwlmcelOXc3c6hCqTAafYwlMIm171yaloUlQU=
Subject key identifier: 02:FE:5F:49:12:1F:37:04:0F:E6:AC:09:38:21:E8:42:74:D9:13:3C
Certificate issuer: /CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B
Certificate serial: 225786AAC944AD358C6E503A7F6D9C374069C483
Authority key identifier: 71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa
Signing time: Sun 03 May 2026 02:21:50 +0000
ROA not before: Sun 03 May 2026 02:16:50 +0000
ROA not after: Sun 02 May 2027 02:21:50 +0000
asID: 139421
IP address blocks: 103.144.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl
rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:57:86:aa:c9:44:ad:35:8c:6e:50:3a:7f:6d:9c:37:40:69:c4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B
Validity
Not Before: May 3 02:16:50 2026 GMT
Not After : May 2 02:21:50 2027 GMT
Subject: CN=02FE5F49121F37040FE6AC093821E84274D9133C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:c8:82:bb:3c:b7:24:f5:94:53:e3:9f:02:
4e:f6:ab:68:ce:73:76:f9:a7:91:f8:a5:1c:4a:cc:
11:24:53:d5:f2:22:b8:96:07:6c:bf:ea:a4:39:04:
4a:1a:69:f0:99:47:9f:56:03:1d:a1:e2:d2:56:15:
31:ca:1a:db:0e:69:cd:6b:78:0c:8b:4e:80:5e:a2:
3a:f5:5a:65:ae:cf:56:d6:16:53:1d:5e:c3:ca:2e:
84:53:7d:ff:cb:ee:bf:95:77:06:21:79:05:ff:1f:
d9:83:51:4b:92:3e:0c:9c:24:d9:4e:58:e3:5d:d9:
07:d4:14:c3:82:53:dd:8e:22:d8:76:84:eb:39:7f:
34:64:8b:d2:a8:6a:c9:bb:dd:ad:56:14:59:ae:c3:
3b:7c:0c:dc:a3:e4:97:da:0c:35:89:67:2c:2c:26:
b6:b2:ce:cb:c1:e3:27:20:2b:60:9f:bb:33:54:46:
35:be:61:f3:95:f7:e7:4b:bb:e2:78:c8:04:34:4c:
7f:bb:87:8a:33:32:91:8d:5f:bb:7d:28:16:92:95:
74:93:2a:ce:a8:ab:3f:76:e4:2e:12:24:de:07:59:
ac:2e:1e:14:fd:50:2a:ab:c4:f9:38:f0:11:21:c9:
85:70:b6:a0:7c:76:59:00:d7:66:82:0e:bd:75:bc:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:5F:49:12:1F:37:04:0F:E6:AC:09:38:21:E8:42:74:D9:13:3C
X509v3 Authority Key Identifier:
keyid:71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.102.0/24
Signature Algorithm: sha256WithRSAEncryption
54:74:d0:4d:89:cd:20:c6:2b:1c:e3:7f:ef:48:1a:a9:d6:d9:
00:b1:f6:8e:41:43:9f:3f:92:f9:4e:51:5c:bb:79:f2:a1:2e:
ba:f3:2f:98:88:3b:c8:55:6d:92:5f:8e:d0:d4:c6:a7:26:97:
53:b6:fb:70:7e:7f:37:14:7c:93:7f:35:4f:ee:b8:42:cd:ad:
33:1b:be:12:be:dc:e1:57:73:bc:2c:98:94:21:4f:04:0d:d2:
4e:06:be:6d:e9:09:60:2b:a3:a3:cd:bf:22:04:44:ef:73:8c:
25:fc:8e:3a:9d:84:52:12:b1:bd:4c:52:98:f0:96:1b:8a:5b:
77:86:a5:7a:ab:5f:38:dc:e3:f5:40:0a:76:25:0a:65:58:db:
42:6d:d9:e2:05:f6:af:ef:b8:af:47:6f:b4:e1:27:e9:e5:2a:
77:d5:1a:d0:ff:80:e7:98:4b:71:b0:36:86:12:d7:46:7a:fe:
2f:4b:12:47:4f:95:8e:0e:7d:dd:af:fb:a2:0a:f6:ed:1f:da:
87:36:ef:d2:8e:92:92:33:c3:47:9d:3b:6e:0d:ce:7c:0a:8a:
9f:be:28:54:9a:c0:b6:6a:a6:14:dd:1c:7d:c1:86:3e:1b:88:
22:6f:53:67:4a:d6:a0:75:35:ff:1a:71:8a:e8:a5:14:66:87:
45:ca:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:22 2026 by rpki-client