
$ rpki-client -vvf rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa
File: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (raw, json)
Hash identifier: qgoD91gK7+McaB5oJcIqhycO0nQvgEjYPEclcWIzrPE=
Subject key identifier: 55:24:BD:FE:6C:33:3F:71:C0:46:2F:91:8B:F5:C0:74:B9:A9:0F:BC
Certificate issuer: /CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D
Certificate serial: 03F1DB8ADDFC0C70314CBE8AC13D01DFFC761C63
Authority key identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa
Signing time: Sun 03 May 2026 02:25:35 +0000
ROA not before: Sun 03 May 2026 02:20:35 +0000
ROA not after: Sun 02 May 2027 02:25:35 +0000
asID: 141639
IP address blocks: 103.162.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl
rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f1:db:8a:dd:fc:0c:70:31:4c:be:8a:c1:3d:01:df:fc:76:1c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D
Validity
Not Before: May 3 02:20:35 2026 GMT
Not After : May 2 02:25:35 2027 GMT
Subject: CN=5524BDFE6C333F71C0462F918BF5C074B9A90FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:42:6b:aa:28:02:36:4e:af:01:db:5d:7e:
06:5a:cf:7e:ef:9d:70:c9:10:99:bc:8c:3c:5c:2c:
ca:64:d9:17:88:39:b6:d9:11:2c:e8:db:32:bc:be:
c1:27:11:ec:9d:75:dd:70:69:16:df:53:e6:cb:a3:
02:5f:61:24:ef:9b:41:03:dc:83:8a:34:24:78:dc:
58:08:21:2f:af:ec:d8:8b:94:b3:57:d6:0d:fa:43:
3b:d6:58:ab:4c:d2:e7:fe:d3:20:84:8e:0d:db:08:
77:8b:51:20:bc:2b:9f:9c:91:c6:a1:6f:a6:c8:25:
9a:43:1b:76:9d:48:fe:87:e0:f6:c4:00:7f:8e:6e:
af:56:3b:f6:68:51:de:66:c3:27:3c:01:fe:94:8a:
c1:6e:1d:22:64:b1:f8:a0:bc:c3:74:e1:e8:41:bb:
09:83:45:19:6f:16:99:32:ee:0e:b2:5f:5e:f1:20:
1c:c5:55:06:5c:e2:01:b0:b5:cf:b9:95:eb:b6:e3:
83:46:2c:72:96:0b:b1:73:38:d1:5c:10:ff:64:88:
05:ae:08:5c:4b:54:e9:ec:f4:37:ea:51:ee:c0:f6:
6a:ca:d2:d6:a9:33:11:59:fe:c3:a0:46:e9:dd:3a:
e7:c1:e8:ab:fb:4a:fa:3f:91:d5:73:18:9c:79:2b:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:24:BD:FE:6C:33:3F:71:C0:46:2F:91:8B:F5:C0:74:B9:A9:0F:BC
X509v3 Authority Key Identifier:
keyid:CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.36.0/23
Signature Algorithm: sha256WithRSAEncryption
62:1e:e4:40:02:22:01:f4:8e:bb:fd:0f:9c:71:19:df:18:c9:
e9:c2:fb:9c:a3:b0:ea:51:13:09:a9:32:e0:92:ef:40:95:8d:
30:1e:cf:ba:70:fa:b1:b7:dc:c8:96:19:af:77:21:48:96:de:
78:6b:cb:12:c2:03:09:30:78:2e:d8:0a:78:4e:c8:d9:43:1f:
99:f3:f2:28:23:3f:8a:5f:27:ac:af:9b:8d:c3:cc:42:b6:48:
e4:74:c0:e6:4c:3b:fb:2c:9a:9e:3f:bb:44:15:4a:e4:ff:85:
32:73:dc:a8:4f:4c:e8:2b:3b:ae:8a:f8:e1:9b:f8:3c:8e:50:
a4:39:bb:f7:59:36:2e:61:e2:75:3b:d0:75:47:92:8e:e0:a1:
92:94:cd:1c:5e:28:c7:09:7b:32:a6:ca:69:2a:37:61:9f:62:
39:d8:9b:65:24:c7:b3:6b:6c:8d:f5:71:96:10:c0:87:28:d8:
93:81:e5:d6:12:dd:14:dc:eb:97:29:93:7c:5e:ab:68:9b:cc:
e3:71:55:cf:18:98:8b:82:00:20:4f:cc:a3:2f:95:70:08:fb:
00:d5:83:b1:e5:bd:95:ed:42:87:14:d9:f2:2a:58:98:f5:30:
16:25:3d:94:e6:71:1d:cd:f9:f4:94:4f:f4:59:e2:0f:9a:a2:
5f:e9:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:32 2026 by rpki-client