
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/3130332e32302e38352e302f32342d3234203d3e20313530323337.roa
File: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (raw, json)
Hash identifier: MEpg6TQLHOe6wNvKYskGTniS7fA9et24LWdfA9YCFzI=
Subject key identifier: EB:BD:BB:B1:AC:AB:51:D3:97:D7:20:FC:D8:9B:38:C8:8A:6B:DF:66
Certificate issuer: /CN=99C1A17781B55BFD6418159CE683ACEFEFF42976
Certificate serial: 284F967806772F51B3BFD98CEA7C8FCEE185668F
Authority key identifier: 99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/3130332e32302e38352e302f32342d3234203d3e20313530323337.roa
Signing time: Sun 03 May 2026 02:28:08 +0000
ROA not before: Sun 03 May 2026 02:23:08 +0000
ROA not after: Sun 02 May 2027 02:28:08 +0000
asID: 150237
IP address blocks: 103.20.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl
rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4f:96:78:06:77:2f:51:b3:bf:d9:8c:ea:7c:8f:ce:e1:85:66:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99C1A17781B55BFD6418159CE683ACEFEFF42976
Validity
Not Before: May 3 02:23:08 2026 GMT
Not After : May 2 02:28:08 2027 GMT
Subject: CN=EBBDBBB1ACAB51D397D720FCD89B38C88A6BDF66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:f0:f9:ee:6d:b8:87:9f:f8:6e:54:79:27:
18:2a:41:28:f7:d7:dc:9e:e7:62:6a:ea:55:10:c0:
34:5f:99:2f:96:c0:7e:07:4f:46:08:61:d6:d8:be:
7f:00:79:61:5b:ff:8e:62:f3:c1:fd:c5:7b:fc:46:
66:e5:53:96:c2:c9:5f:f7:41:66:de:7e:35:93:76:
61:a4:e6:24:4b:86:fb:5b:d4:a1:57:a4:72:d3:7f:
c1:e5:99:d1:6b:14:98:d9:3d:71:2e:bd:02:30:84:
2f:83:ec:eb:96:1c:13:30:1b:74:c1:bb:b6:6b:b2:
82:7e:1b:a5:bc:c2:b9:bb:49:62:3b:80:4a:ad:e0:
51:ae:14:55:ce:62:a9:06:4a:dc:b7:ff:a5:0b:31:
a0:c8:06:68:bd:0a:a7:8e:d0:95:ec:f1:9a:b8:c8:
e4:3d:10:0b:c3:d9:4f:e7:ed:53:e0:89:60:42:9d:
3a:36:b6:ce:0b:25:7f:2f:4c:85:bc:51:56:5c:c6:
13:7f:45:87:31:02:74:29:84:df:f6:f4:1d:64:ea:
92:66:09:76:97:0c:4f:27:cf:79:54:79:fd:3e:be:
09:fe:5d:ee:0e:dd:bd:e7:00:36:bc:3b:88:9b:f6:
21:aa:77:c5:4a:af:ba:95:7d:5d:47:02:c8:2e:de:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:BB:B1:AC:AB:51:D3:97:D7:20:FC:D8:9B:38:C8:8A:6B:DF:66
X509v3 Authority Key Identifier:
keyid:99:C1:A1:77:81:B5:5B:FD:64:18:15:9C:E6:83:AC:EF:EF:F4:29:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/99C1A17781B55BFD6418159CE683ACEFEFF42976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99C1A17781B55BFD6418159CE683ACEFEFF42976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/3130332e32302e38352e302f32342d3234203d3e20313530323337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:8f:e2:2a:c9:59:6a:b1:f3:d6:bf:c5:84:c6:f5:17:5f:bb:
58:b0:c3:97:06:5a:81:3f:3e:19:99:3a:b7:6e:b0:b1:5e:d5:
cb:d8:d1:1d:7e:fc:44:c5:3f:99:4f:0e:11:25:4a:63:68:20:
e4:6d:69:c1:98:d5:99:0a:a1:66:ec:5e:0e:79:b3:ff:4d:77:
70:85:cb:86:6b:54:e5:7c:b2:18:c5:59:33:cf:e7:c1:e5:04:
88:2f:a4:0a:40:6e:55:89:68:2a:f0:83:d8:32:8b:84:67:b6:
97:c6:be:47:b9:c3:f1:f8:49:fd:59:3f:70:85:b5:ec:9c:50:
8b:8e:c0:a8:af:5c:fe:76:b3:0a:fd:10:d7:13:6d:91:bb:f1:
29:41:14:99:4e:5d:89:54:c3:e3:8b:6c:16:62:10:e6:7f:7d:
8d:00:92:5f:2e:5c:30:6d:a9:7c:8f:51:df:1a:cf:13:7b:0a:
ae:c0:46:06:9e:75:f5:1a:34:f4:47:c3:ca:63:9a:18:62:a9:
60:15:fd:2e:e1:ce:85:72:f8:09:71:3d:c1:7b:59:c9:9d:2a:
1c:3d:c4:86:9e:f5:70:54:60:11:7f:5d:5b:1c:04:b6:97:f3:
0a:d2:ac:d7:b2:32:62:ae:86:72:63:45:f3:5d:99:50:ed:fa:
61:b2:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:41 2026 by rpki-client