
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa
File: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (raw, json)
Hash identifier: 6Blg52P9e/HwBiYQRbP9wbb5pGbKe2j4KTH7g3oz4ZI=
Subject key identifier: 61:A0:32:1A:1F:55:52:8A:E3:B2:A9:19:EC:97:B8:F1:EF:42:5B:49
Certificate issuer: /CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505
Certificate serial: 4300DE2CFB59B17CF3FE2D947933E9D498D981A2
Authority key identifier: CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa
Signing time: Sun 03 May 2026 02:26:50 +0000
ROA not before: Sun 03 May 2026 02:21:50 +0000
ROA not after: Sun 02 May 2027 02:26:50 +0000
asID: 131769
IP address blocks: 103.177.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl
rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:00:de:2c:fb:59:b1:7c:f3:fe:2d:94:79:33:e9:d4:98:d9:81:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505
Validity
Not Before: May 3 02:21:50 2026 GMT
Not After : May 2 02:26:50 2027 GMT
Subject: CN=61A0321A1F55528AE3B2A919EC97B8F1EF425B49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:e1:66:10:fd:5d:76:00:b0:6d:ae:c0:d1:
c4:b4:c2:b9:b0:46:ca:05:b2:29:60:97:3d:35:2e:
15:b3:11:96:7e:14:45:65:9f:ca:02:4d:53:10:a8:
50:20:d8:09:96:8c:7f:bc:fb:c4:24:29:16:7a:ba:
04:94:7c:b9:a5:9b:65:d2:c6:48:a2:07:23:4a:79:
4b:c7:ce:1d:81:16:92:4c:0f:e1:b9:b2:08:f6:e7:
c7:0e:2a:70:e7:6f:0b:1f:73:48:b8:b9:1f:f1:f5:
b6:5a:6a:5f:e3:fb:c3:64:b0:cb:42:1a:38:68:3d:
2d:72:c8:04:2f:3f:82:d4:1c:73:4d:fa:db:76:55:
d9:aa:1e:73:78:d4:9b:3f:b2:95:5f:24:79:82:06:
88:d1:c2:fc:fa:d2:41:d7:42:22:dd:36:c1:46:d3:
76:75:2b:e9:6e:36:db:08:ee:f3:f4:91:b0:a5:a6:
cc:f1:b1:30:5d:d0:5d:e2:cb:20:25:5d:bd:8a:38:
31:79:52:a9:04:5e:33:f7:a1:9c:7c:6b:d8:bb:a8:
59:c9:81:bf:df:a7:ef:ea:43:36:db:65:a6:82:2b:
0c:56:9e:67:a2:49:4f:0d:d1:bc:9a:d7:79:de:9e:
9b:d4:db:10:e0:c6:5f:68:95:8c:bb:0f:00:3f:38:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A0:32:1A:1F:55:52:8A:E3:B2:A9:19:EC:97:B8:F1:EF:42:5B:49
X509v3 Authority Key Identifier:
keyid:CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.219.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:04:12:0b:5a:71:1f:36:cc:70:c8:87:57:95:f2:10:44:c8:
c9:cb:1b:6f:23:ad:7a:0b:13:3a:3d:8f:30:9f:bc:21:21:f6:
dc:c2:f0:ee:3d:62:89:00:e1:a5:c5:5d:3e:ad:e5:51:7b:94:
ce:f9:c0:32:d6:84:7f:aa:9e:f9:a5:14:d3:e9:fe:84:07:cd:
db:0c:c3:99:8e:d1:7e:3b:cb:13:7a:db:5d:13:ed:c3:17:3f:
eb:aa:0f:d3:15:f1:79:19:71:58:ea:9d:42:9b:e0:c5:62:95:
b8:a8:09:1c:56:1c:0d:55:7d:cc:54:f8:e8:2f:9e:55:9c:62:
59:77:ea:34:59:32:61:a6:d7:f7:d4:23:07:86:10:0d:f1:0b:
31:1e:91:35:6c:02:5d:61:49:c7:61:10:1b:5b:12:67:9a:7f:
41:7b:e8:f1:94:70:4b:8c:be:be:23:90:49:2b:70:cf:42:27:
da:e0:cc:5b:09:fb:12:b9:e9:ba:cb:4b:1c:13:9a:34:29:bf:
8e:75:bb:51:75:2e:a8:47:3b:88:70:c2:0b:3b:98:f1:33:44:
7b:05:7a:49:e9:74:d3:53:b7:93:43:11:c5:64:05:fb:8c:62:
8c:a8:85:f6:f8:fa:5d:b7:a0:c7:c1:9f:55:78:96:70:c2:51:
59:04:35:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:03:37 2026 by rpki-client