
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa
File: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier: TciBEZIFdVzpbJynXTJH57aL9koCtK5qOiPHCneTWcU=
Subject key identifier: B4:AE:5A:51:BC:D6:EE:AB:5D:9A:AB:C2:8A:D2:D9:BE:C2:7E:7E:38
Certificate issuer: /CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF
Certificate serial: 22106A8D4AE6AF42EB0A057EBFD3F452540EE3EE
Authority key identifier: CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa
Signing time: Sun 03 May 2026 02:28:09 +0000
ROA not before: Sun 03 May 2026 02:23:09 +0000
ROA not after: Sun 02 May 2027 02:28:09 +0000
asID: 154410
IP address blocks: 103.164.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl
rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:10:6a:8d:4a:e6:af:42:eb:0a:05:7e:bf:d3:f4:52:54:0e:e3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF
Validity
Not Before: May 3 02:23:09 2026 GMT
Not After : May 2 02:28:09 2027 GMT
Subject: CN=B4AE5A51BCD6EEAB5D9AABC28AD2D9BEC27E7E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:92:5a:6f:78:62:20:7f:93:78:5a:47:24:
10:5d:12:a6:84:dc:75:dd:3d:1d:6d:38:11:2d:6e:
42:27:c7:92:c8:39:e6:36:0f:05:5f:0c:1b:c7:61:
9b:07:45:15:73:3f:af:f1:01:23:d3:3d:6c:6e:c1:
ca:d4:e9:00:b6:4e:7a:bc:14:a4:43:47:09:7b:f0:
c1:1a:2a:61:38:f0:52:d5:0d:23:8b:f1:1b:69:e7:
66:c8:70:fe:84:f8:00:b0:5e:93:f9:0d:2d:65:ce:
a6:bd:28:41:59:50:84:ae:57:cf:21:a4:77:0c:a0:
e5:5d:65:18:ba:48:71:d4:c5:44:2a:86:7a:92:4a:
89:de:cf:19:32:2c:15:14:36:93:f3:59:11:f5:fd:
bd:33:e1:fc:1d:c2:a0:97:42:eb:e0:91:e1:1a:6c:
32:89:9a:98:14:3c:79:29:28:87:a4:b9:77:6e:b4:
c5:b8:78:00:26:79:b0:a2:28:41:2c:b1:1a:93:29:
04:4d:8a:6d:dd:c0:a9:5b:11:e1:2b:33:3a:b3:52:
b4:c5:2a:11:e9:5b:ba:2d:3e:f9:8d:95:a3:46:a1:
37:27:a1:e6:73:d1:59:53:3b:fc:15:fa:eb:1d:2b:
7d:68:48:da:54:8d:ac:f9:5f:c7:7d:76:18:2c:be:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AE:5A:51:BC:D6:EE:AB:5D:9A:AB:C2:8A:D2:D9:BE:C2:7E:7E:38
X509v3 Authority Key Identifier:
keyid:CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.69.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3d:76:ea:a0:fc:4d:fe:71:f7:8f:d7:58:60:35:b7:02:55:
5c:61:fd:92:6b:c5:fe:11:ef:56:68:f9:d8:08:25:1a:d8:e2:
5a:c0:8f:e5:4a:77:b6:79:71:35:3c:f2:17:e3:c1:4b:38:29:
10:4f:4b:56:90:18:19:c1:a2:f8:80:26:30:a4:a5:f2:0a:a9:
c1:c2:40:56:93:a4:fe:2f:04:d0:59:eb:eb:00:09:d7:78:9c:
7d:ce:b5:13:91:12:4b:14:7f:fb:ee:c6:ce:08:77:e4:6f:f9:
df:b3:21:4e:5e:c8:47:82:e5:2c:61:63:94:31:3e:dc:c2:7a:
8b:98:a0:07:6c:47:bf:4d:28:ad:cb:bb:e9:fe:b2:19:01:02:
6b:fb:7d:4e:c3:ac:d9:33:2e:51:34:29:6b:d6:fe:ae:05:80:
0a:d9:50:38:e6:77:a3:bc:9b:c1:28:d0:70:c5:86:28:3e:d2:
2c:f6:56:cb:fb:e1:b8:48:e0:b3:ca:aa:98:b2:61:b3:a7:29:
46:bf:fd:25:ba:68:9c:e8:30:92:73:33:d3:4c:1d:ae:2b:a9:
bc:2b:e8:7a:6d:75:d2:6d:00:e3:98:35:f3:ad:c6:33:09:5f:
fb:60:8c:03:4a:a8:d9:f5:b5:71:5b:d9:61:05:e2:17:c3:b3:
d7:27:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:00:58 2026 by rpki-client