
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa
File: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (raw, json)
Hash identifier: A3dxGP2PxS97Lp2Vu736TLE9a7nlQtJcScv1U2W/tIo=
Subject key identifier: C0:CC:13:6E:14:AB:5E:9A:7C:D1:42:15:5B:69:95:A2:D9:D3:21:B8
Certificate issuer: /CN=37B043860635643A07D4415D3C8C4959A51F0B69
Certificate serial: 66085411D672FE113D571D726DA7E48F43D61DDB
Authority key identifier: 37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa
Signing time: Sun 03 May 2026 02:22:28 +0000
ROA not before: Sun 03 May 2026 02:17:28 +0000
ROA not after: Sun 02 May 2027 02:22:28 +0000
asID: 142332
IP address blocks: 103.169.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl
rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:08:54:11:d6:72:fe:11:3d:57:1d:72:6d:a7:e4:8f:43:d6:1d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37B043860635643A07D4415D3C8C4959A51F0B69
Validity
Not Before: May 3 02:17:28 2026 GMT
Not After : May 2 02:22:28 2027 GMT
Subject: CN=C0CC136E14AB5E9A7CD142155B6995A2D9D321B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:3e:aa:1e:f0:fc:c1:0f:23:3a:34:8d:b2:
71:78:c1:ef:93:73:30:0d:02:ce:aa:82:fa:95:28:
a7:42:25:e8:0b:62:53:c2:9a:35:10:22:77:f5:85:
21:f9:f8:0f:d8:3e:97:5d:f8:72:ab:9c:b4:a2:c3:
44:a3:a0:2b:4c:9b:1e:1a:f3:68:2f:5f:e1:a7:f4:
20:5c:dd:69:25:ab:1c:0f:92:e6:0c:71:ee:f5:06:
09:e1:02:63:c5:6f:81:f8:55:dd:a8:f4:9f:be:30:
f2:26:18:ce:0c:cd:c5:1f:42:28:5b:73:05:65:10:
eb:08:43:30:34:14:34:37:a6:a8:d9:a3:f6:c8:b8:
b7:d5:88:32:2d:6d:e5:ca:35:87:c4:f2:2d:98:f3:
dd:e2:15:c7:44:e8:24:8a:a0:57:fc:d8:94:47:ff:
dc:9d:bc:75:a0:8a:88:3a:64:0e:a6:2c:14:94:db:
c7:7e:e7:57:7b:ea:b4:0b:0e:63:a6:dc:ef:65:80:
4b:5a:14:48:e1:d0:ef:de:e9:3f:fe:aa:14:2b:4b:
1f:02:b6:99:bb:3c:8f:27:e7:a7:a6:46:77:94:19:
08:07:96:44:02:9c:f0:d2:3e:bc:19:e9:66:e8:9a:
0f:86:5b:62:9c:73:47:c6:87:16:38:23:45:11:1e:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CC:13:6E:14:AB:5E:9A:7C:D1:42:15:5B:69:95:A2:D9:D3:21:B8
X509v3 Authority Key Identifier:
keyid:37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.41.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:87:ee:b6:43:49:f2:83:d6:c0:b1:fe:1b:d5:1b:4c:fc:c2:
92:88:9e:82:91:9f:3c:08:14:c6:28:16:63:e8:d4:1c:2c:16:
6e:df:5b:6d:42:5a:b7:21:9f:23:be:65:5d:f8:ec:d6:4f:85:
77:c1:3a:ba:e1:a0:41:39:02:ce:5f:79:03:74:e3:6d:57:68:
cb:70:81:1f:83:67:42:4b:2e:a3:72:b4:28:85:ef:e2:57:78:
e6:9b:e5:51:42:68:75:48:48:77:82:60:2a:1a:eb:42:c1:bd:
a3:b7:44:7b:67:b9:43:60:46:03:27:02:a3:85:b4:24:0d:0f:
c5:41:85:75:51:8e:62:4f:d4:36:dc:c6:dc:08:25:81:42:24:
35:9b:ce:83:b9:50:53:29:68:9e:6a:d2:91:94:7e:fd:84:1b:
89:94:cd:4d:59:b4:7e:7e:ff:a5:fc:ab:a2:46:88:a3:78:3a:
c0:f5:24:c4:ae:ac:af:7c:74:32:5c:41:92:aa:f0:62:ac:ef:
8b:53:36:49:a2:2d:4a:74:43:3e:ea:75:41:40:7a:eb:1f:39:
11:8b:20:82:30:7e:9a:b7:6a:0a:3b:46:a2:cd:0f:5b:60:8f:
be:72:a4:34:a3:a1:0b:5d:62:46:6e:d7:53:2e:fd:b9:f7:b1:
38:03:ef:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:08:31 2026 by rpki-client