
$ rpki-client -vvf rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa
File: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier: 0flsrdaSAjsWCJEWyeVcLLzCVtlFqOFqVNzD5e/gcuA=
Subject key identifier: 40:8C:CE:04:C3:5E:09:7D:7D:BA:ED:D2:38:5E:7C:7D:6D:D6:00:6A
Certificate issuer: /CN=8B43E14BD4588C4904A641356A5D07D628190CAB
Certificate serial: 5BD9162744E62DFF6F6D9B1FA9B6E7DD54D99EA8
Authority key identifier: 8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa
Signing time: Sun 03 May 2026 02:25:01 +0000
ROA not before: Sun 03 May 2026 02:20:01 +0000
ROA not after: Sun 02 May 2027 02:25:01 +0000
asID: 131111
IP address blocks: 103.174.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.crl
rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d9:16:27:44:e6:2d:ff:6f:6d:9b:1f:a9:b6:e7:dd:54:d9:9e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B43E14BD4588C4904A641356A5D07D628190CAB
Validity
Not Before: May 3 02:20:01 2026 GMT
Not After : May 2 02:25:01 2027 GMT
Subject: CN=408CCE04C35E097D7DBAEDD2385E7C7D6DD6006A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:d7:a2:a1:34:49:26:92:2f:e9:f5:a7:f5:
f2:04:9e:20:af:64:94:e8:e1:82:77:25:bc:e4:56:
12:cb:53:e2:a7:fe:b1:16:6b:fe:94:35:a9:96:00:
98:ed:6d:5d:36:7d:85:f9:d6:64:de:69:64:fb:4c:
11:5d:a7:9c:76:97:43:03:71:0c:76:c1:b6:70:74:
b1:06:e2:ee:75:d6:d6:ae:36:44:5a:6d:38:10:22:
82:69:e2:b8:81:7f:c0:87:2b:10:dd:be:e0:c0:d1:
99:dc:21:80:a4:e4:24:4f:0a:a0:48:08:50:fc:52:
d6:8f:e5:f3:fc:d2:d3:8a:c5:29:85:e2:4a:3a:b9:
fa:32:0d:c1:38:30:e9:0b:c1:ef:a2:c8:48:44:f9:
a0:42:22:71:42:7d:7b:d6:fc:56:ee:b7:ca:39:33:
ac:12:02:da:e7:e8:b2:c6:fb:57:4b:77:46:52:7b:
76:16:5b:ba:fc:b2:f1:eb:56:26:2c:3f:b7:a4:9c:
2b:61:9f:52:de:16:8a:7e:65:37:ed:2d:fa:d3:24:
a0:99:dd:62:f6:59:29:24:e8:b9:9e:fd:44:c7:6a:
af:55:58:f7:c7:6b:62:0b:1d:0e:26:f7:4d:c5:d7:
e6:69:8c:6f:15:8d:26:6f:57:a2:bd:8f:ea:3c:11:
7d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8C:CE:04:C3:5E:09:7D:7D:BA:ED:D2:38:5E:7C:7D:6D:D6:00:6A
X509v3 Authority Key Identifier:
keyid:8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.36.0/23
Signature Algorithm: sha256WithRSAEncryption
83:8d:56:e4:95:29:d5:24:cc:22:db:c4:d7:d0:e1:0a:b0:5b:
30:8d:af:1d:49:75:dc:05:8b:23:42:c7:14:5c:99:82:b6:33:
b5:de:45:ff:3f:e4:1f:9c:e8:49:db:a8:bf:a8:bf:74:dd:58:
1b:80:5b:49:e0:f3:ae:66:58:4d:4a:0b:ac:20:58:64:26:41:
12:17:f1:50:c0:4d:29:a8:2e:7c:27:bd:70:f0:88:7b:1e:5b:
18:c2:45:9a:62:07:8c:3a:28:ff:01:cb:ab:94:e8:79:67:ac:
67:fd:0b:41:63:5a:0a:ad:b6:a1:74:ce:d0:52:0b:c2:c8:a8:
93:16:0c:9f:4c:26:6e:20:74:2c:84:3b:19:02:38:95:f7:63:
70:76:3f:b9:c1:27:3b:ed:2d:6d:0a:80:a8:bf:2c:b1:a8:9b:
9d:d8:80:e9:23:11:24:46:72:a0:ae:c5:57:37:bf:78:f6:e0:
13:34:0d:8c:95:b3:67:c8:a8:f4:d9:dc:8b:01:89:dc:75:55:
d9:54:7f:ab:46:9d:94:1d:3e:50:74:d8:1b:26:73:d7:71:64:
55:53:8e:be:98:e2:14:74:25:af:53:eb:e1:48:a5:16:98:bd:
c2:e5:31:2b:f9:7c:58:4f:b2:10:0f:65:db:90:52:f3:5a:81:
5f:c0:10:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:49 2026 by rpki-client