
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa
File: 3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa (raw, json)
Hash identifier: /vvzo2s8vyegzc8avpsATW+wv8ripOvn0xDZkpDyRyo=
Subject key identifier: 0B:F8:60:B0:2C:78:24:F3:29:0A:64:6A:8B:32:D6:F6:CF:CD:A7:AF
Certificate issuer: /CN=330092B238160780852731102A871D6304465F70
Certificate serial: 721CBE447DA8B0455C64B7CEA2E181BC08D43D52
Authority key identifier: 33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa
Signing time: Sun 03 May 2026 02:28:24 +0000
ROA not before: Sun 03 May 2026 02:23:24 +0000
ROA not after: Sun 02 May 2027 02:28:24 +0000
asID: 141056
IP address blocks: 103.155.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl
rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1c:be:44:7d:a8:b0:45:5c:64:b7:ce:a2:e1:81:bc:08:d4:3d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330092B238160780852731102A871D6304465F70
Validity
Not Before: May 3 02:23:24 2026 GMT
Not After : May 2 02:28:24 2027 GMT
Subject: CN=0BF860B02C7824F3290A646A8B32D6F6CFCDA7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:0e:4b:07:f8:be:c7:e6:aa:04:06:26:77:
52:be:75:b3:03:4a:bd:04:dc:72:6a:7d:d7:1f:72:
9a:42:9a:5e:72:23:b0:5f:c1:40:04:1e:04:03:25:
f4:94:b9:3a:18:fb:52:84:d6:2b:a9:5b:e3:a5:e3:
02:6e:d4:01:34:25:e0:6c:1b:be:71:49:16:a8:aa:
b2:b9:88:3f:56:ea:4a:b8:6e:50:db:a0:e0:28:a6:
68:23:8a:fe:71:46:ab:aa:6c:58:2f:17:95:93:b4:
e9:d1:de:0c:81:64:a6:74:25:95:d3:e1:88:01:11:
3e:bb:65:3c:b0:8d:0d:c6:85:1a:7e:60:94:27:04:
10:3d:75:2b:d5:11:2f:85:c5:c1:b1:30:18:51:17:
0e:d1:4e:5b:12:7e:f2:ae:15:ee:1a:e2:01:a7:0e:
3d:1c:c7:96:5e:89:8d:26:9a:ca:d4:10:32:de:69:
e5:e3:f6:da:54:88:e3:dc:50:3a:d0:86:82:eb:0b:
db:b3:03:3e:37:f2:28:ff:cb:ea:86:0b:a6:41:42:
31:02:1c:c3:14:80:e2:bb:12:96:b9:d0:99:04:1c:
76:d9:4f:54:db:b3:9c:d7:8b:73:a8:8e:58:58:86:
9b:e4:5e:1c:13:84:84:35:4f:26:48:b1:c3:e4:77:
3e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F8:60:B0:2C:78:24:F3:29:0A:64:6A:8B:32:D6:F6:CF:CD:A7:AF
X509v3 Authority Key Identifier:
keyid:33:00:92:B2:38:16:07:80:85:27:31:10:2A:87:1D:63:04:46:5F:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/330092B238160780852731102A871D6304465F70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330092B238160780852731102A871D6304465F70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.116.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:c7:96:10:37:55:e0:49:21:d5:b7:0f:ae:3b:ba:fc:ae:23:
fd:ee:d8:4d:56:70:a0:2c:39:d6:59:32:2b:f1:f9:32:88:c7:
96:e7:d1:bd:39:e5:50:d8:b0:bf:ed:d0:2f:c3:87:cb:68:fe:
3b:62:02:c0:3e:89:26:e7:6f:ae:84:92:95:31:2b:f6:06:a4:
56:f4:21:b7:b0:cc:68:d0:a7:4f:71:01:6d:66:55:8c:b6:30:
d5:db:c9:7e:c1:80:5f:25:06:e8:c9:1f:aa:73:7f:e2:af:c9:
eb:fb:b1:9c:3e:bf:be:48:5f:d1:b7:3c:6e:cf:5e:fb:27:a1:
27:38:fc:80:2b:fa:fc:cf:a9:0a:1d:78:e9:46:75:be:9c:fa:
bd:e3:61:ff:a6:67:48:db:e4:e6:ca:18:5f:12:e0:46:d0:9a:
1e:40:77:84:56:37:f9:9d:e4:e2:9f:2a:a9:27:e1:ef:46:75:
dd:b2:56:4f:9b:ec:2f:20:5a:74:58:71:0a:48:27:b8:fc:75:
43:9d:f1:ff:9b:96:35:75:ac:dd:31:85:0a:f4:d0:61:bd:95:
63:9e:84:60:58:bd:38:c2:71:d4:6e:e4:b4:cd:5f:02:87:07:
8a:84:8f:54:48:33:b8:72:10:8e:18:d6:05:47:c6:f9:e9:e1:
74:0c:e8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:25:07 2026 by rpki-client