
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa
File: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (raw, json)
Hash identifier: tjpf/AYVS8VtbIjx4X/JSsd7T5PpSDR5QfD/ek24bNQ=
Subject key identifier: E3:26:63:DB:47:98:C1:EA:28:B2:68:B0:D9:34:26:50:F1:2E:5B:8A
Certificate issuer: /CN=37B043860635643A07D4415D3C8C4959A51F0B69
Certificate serial: 4C3A8D9AFE0E66081610F6BB2F2DC2D811C9E4DF
Authority key identifier: 37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa
Signing time: Sun 03 May 2026 02:22:28 +0000
ROA not before: Sun 03 May 2026 02:17:28 +0000
ROA not after: Sun 02 May 2027 02:22:28 +0000
asID: 142332
IP address blocks: 103.169.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl
rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3a:8d:9a:fe:0e:66:08:16:10:f6:bb:2f:2d:c2:d8:11:c9:e4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37B043860635643A07D4415D3C8C4959A51F0B69
Validity
Not Before: May 3 02:17:28 2026 GMT
Not After : May 2 02:22:28 2027 GMT
Subject: CN=E32663DB4798C1EA28B268B0D9342650F12E5B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:94:60:e2:de:50:28:b7:f1:12:b6:6a:91:
bc:9d:22:15:c0:ed:1c:25:29:f2:21:ea:dc:91:f0:
13:41:36:30:e5:11:2b:d1:3f:9d:c1:39:d4:f7:8a:
27:95:ac:10:41:73:15:12:c3:21:69:2e:25:eb:2e:
c6:8c:60:77:9b:5a:61:d6:a0:6a:b1:62:90:58:27:
6b:28:7e:71:c9:87:29:7d:8e:6c:1d:10:02:95:2a:
12:a9:8e:97:c7:aa:4f:ac:d0:44:2b:62:c8:ce:0b:
d5:1e:15:0c:bc:e4:06:c9:43:2c:6f:8e:be:33:9b:
87:50:cb:87:03:ac:a5:17:5b:4b:95:0f:4f:b4:3e:
4d:33:f4:2d:6a:92:4f:e5:86:a0:72:6b:03:54:5c:
37:93:e1:7c:7d:1b:0a:45:72:14:42:5e:fa:20:bd:
a4:13:9b:4f:ce:ac:fd:db:3b:73:2d:df:97:bc:8f:
40:ff:3a:39:63:86:f1:db:dd:37:3f:24:f9:72:20:
ce:54:30:8f:31:47:38:52:45:0a:1a:e1:2f:81:a3:
99:2f:0f:d5:d0:f2:6a:92:17:a2:71:bc:d0:d6:ef:
06:be:bd:0f:2e:25:e5:ae:ba:4b:48:e9:f9:26:82:
73:5d:4e:b0:e7:89:9e:78:4b:dc:25:32:44:cb:29:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:63:DB:47:98:C1:EA:28:B2:68:B0:D9:34:26:50:F1:2E:5B:8A
X509v3 Authority Key Identifier:
keyid:37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.40.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:12:6e:a9:d0:f8:7f:81:57:a7:ff:d0:45:e8:e7:68:1c:52:
bc:db:5b:3c:35:1b:fb:af:39:ff:a7:b5:aa:2e:80:1a:f8:da:
63:93:b0:78:dc:39:63:e1:64:aa:76:bf:2f:c2:c2:34:b7:31:
15:1f:42:f5:88:20:84:fc:48:f6:bd:49:20:fc:83:c1:49:f4:
7c:75:a8:33:8e:90:7a:89:54:93:f7:bc:31:85:78:c1:9e:a7:
9c:ef:50:c0:f4:38:d7:3a:4c:f7:04:d6:5e:41:06:0a:53:12:
ce:41:c8:33:d9:3d:5b:5e:1f:c6:04:63:f2:4d:de:7a:76:97:
f1:cc:c0:4b:20:6c:18:65:59:a3:0d:21:02:01:de:f9:9e:f6:
9b:15:98:cd:f7:40:7c:0f:8f:42:17:33:f8:3d:b1:0f:a8:fc:
76:45:9d:b7:c9:2d:13:59:78:0f:6d:b4:bc:3e:6a:c8:7a:eb:
ec:0b:d3:d6:cc:80:80:d2:f9:8e:cd:5c:06:60:bf:d3:26:52:
66:68:1a:9c:f7:a0:1a:4a:c8:65:b3:23:54:a8:5b:87:30:ea:
24:f9:e2:92:8a:69:ad:1a:10:ec:ab:f5:d0:82:e7:d8:eb:72:
e8:6e:d5:64:9a:c9:32:01:98:74:e1:5c:4d:44:44:71:21:fc:
36:30:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:54 2026 by rpki-client