
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa
File: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (raw, json)
Hash identifier: Y+vREFE/EG16t2/cwbDbHoF+QrWyIBN3buYGvhuls/U=
Subject key identifier: 2E:ED:26:76:6F:4E:B6:D2:02:A4:FF:13:AF:4E:96:AE:87:72:F0:1E
Certificate issuer: /CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88
Certificate serial: 348F16EC18E82AF56263550FF3999371227BC2B9
Authority key identifier: C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa
Signing time: Sun 03 May 2026 02:22:12 +0000
ROA not before: Sun 03 May 2026 02:17:12 +0000
ROA not after: Sun 02 May 2027 02:22:12 +0000
asID: 149688
IP address blocks: 103.185.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl
rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:8f:16:ec:18:e8:2a:f5:62:63:55:0f:f3:99:93:71:22:7b:c2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88
Validity
Not Before: May 3 02:17:12 2026 GMT
Not After : May 2 02:22:12 2027 GMT
Subject: CN=2EED26766F4EB6D202A4FF13AF4E96AE8772F01E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:f3:51:8c:63:8f:f6:c7:8a:fb:7a:af:67:
7a:bf:f0:fa:52:a4:1f:eb:f7:99:5a:92:b5:b3:8e:
5e:01:0d:c1:48:0f:19:20:11:18:2b:21:c1:7e:3d:
1d:9b:6c:a9:c0:05:a1:d2:b2:99:30:c8:d0:5c:97:
09:90:e8:1c:f7:4a:f5:5d:f7:e6:27:cf:55:e6:be:
db:8a:b0:73:b7:d8:d8:41:fb:57:0e:16:2a:28:0d:
a6:2b:92:f9:a1:1f:9b:25:f3:e8:39:a4:38:93:9a:
e0:88:39:87:ca:aa:17:9c:b8:e6:0c:f4:db:f0:4e:
81:67:d4:45:b0:77:8e:65:db:23:01:a2:95:6b:5d:
6e:63:ea:6b:fa:be:c2:9f:f5:26:6f:ed:31:c2:aa:
88:8f:21:7c:bb:7d:e9:e2:f1:7b:15:1d:3e:39:b0:
4a:60:f1:71:14:6f:a9:96:9e:2c:02:d6:05:9d:ec:
d5:5d:ca:a2:cf:91:7e:15:e6:c9:8d:7d:48:cb:8a:
db:f2:9f:0a:d0:62:14:23:39:bf:6c:59:6f:9a:c8:
22:0f:a1:22:95:e5:6b:a7:0b:39:42:85:6b:a5:17:
2b:e6:89:60:5d:ff:04:06:18:fe:6b:f1:06:7a:8f:
a6:1c:f9:1d:ac:eb:89:ff:57:92:41:28:ba:42:90:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:ED:26:76:6F:4E:B6:D2:02:A4:FF:13:AF:4E:96:AE:87:72:F0:1E
X509v3 Authority Key Identifier:
keyid:C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.254.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:09:2a:95:84:67:44:df:ce:6d:af:14:29:7f:ce:94:5f:64:
6f:db:96:92:40:f5:ff:50:dc:78:62:c3:a0:78:e4:5b:b5:9a:
ec:7d:43:ba:3e:c1:b2:7c:4d:09:20:b5:0d:6b:2e:d5:53:66:
3d:a8:7e:12:9c:62:e6:5d:44:03:d9:0e:74:c7:ca:20:c4:d5:
f6:09:0c:e8:16:d7:d5:f3:9e:f7:f0:3f:cc:89:f1:14:2c:7c:
a1:39:a3:a4:8e:b7:d1:c7:11:6b:52:c8:9d:a8:26:11:48:1a:
19:e9:88:d7:ad:c7:26:70:a0:2b:d2:1e:cd:73:bf:96:49:c5:
70:ec:96:db:05:a1:72:04:47:b1:93:0f:06:0a:cc:9e:ac:09:
08:99:6e:09:21:81:7c:3d:f1:27:d7:c6:44:28:37:bc:48:3f:
f4:70:52:fe:82:9b:d2:fb:0f:42:3b:8e:36:93:ce:4e:3d:e6:
ae:0b:6e:f0:b4:fc:c0:32:5b:d4:f5:43:78:49:8d:8e:a5:e4:
f4:0f:7f:f5:41:18:f0:2e:96:f5:ae:28:89:5f:db:c1:87:87:
d5:1a:1d:8d:6c:52:69:f1:d3:ea:48:93:74:41:1c:6b:f7:23:
73:29:2c:7d:a9:1a:1f:c0:f6:15:29:8b:63:2d:01:b3:a9:c4:
2c:a3:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:21:37 2026 by rpki-client