
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa
File: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (raw, json)
Hash identifier: iWp9zL2tSRzcXXiV+WVgdnT86pBdN5E8UOgytY/+pL4=
Subject key identifier: F0:C8:77:65:2E:D1:44:25:A5:51:19:1C:AA:25:97:26:A2:D1:D7:C9
Certificate issuer: /CN=16FC1DF2D807E338985DE30932EA34E250228796
Certificate serial: 4E594AD2661F73E83AEC12F04AAD9D80C2A001CA
Authority key identifier: 16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa
Signing time: Sun 03 May 2026 02:28:33 +0000
ROA not before: Sun 03 May 2026 02:23:33 +0000
ROA not after: Sun 02 May 2027 02:28:33 +0000
asID: 137378
IP address blocks: 103.119.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl
rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:59:4a:d2:66:1f:73:e8:3a:ec:12:f0:4a:ad:9d:80:c2:a0:01:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16FC1DF2D807E338985DE30932EA34E250228796
Validity
Not Before: May 3 02:23:33 2026 GMT
Not After : May 2 02:28:33 2027 GMT
Subject: CN=F0C877652ED14425A551191CAA259726A2D1D7C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f2:45:7d:1e:4b:6d:7a:6d:cb:4b:56:eb:47:
01:86:2b:23:6c:2b:5c:41:2a:52:10:cb:fd:4d:99:
5e:23:af:35:6e:16:a3:84:ca:48:91:dc:5e:6f:3e:
0b:a7:f0:f8:39:06:75:ea:f9:0d:f9:18:24:9d:44:
be:d4:b0:28:b6:f4:a1:1e:e9:23:3e:0a:d8:96:d5:
a8:c7:92:c0:3c:f7:eb:a7:48:a2:b1:d3:c0:6d:8e:
f5:82:9a:b9:fd:92:f9:fb:cf:2c:3a:56:42:56:67:
bf:b4:f4:3c:2b:ab:b2:b9:64:9e:01:4a:1a:51:e0:
46:b5:8f:00:50:64:4e:eb:cc:a9:bd:f5:fc:1a:32:
f4:58:e5:b0:95:cd:11:98:cd:c7:49:0a:9c:3d:e3:
63:ad:fa:89:02:5c:8d:04:28:39:eb:e1:56:24:2a:
6f:f5:d5:ed:ac:ec:b6:0a:09:35:f1:89:e8:2a:46:
85:fe:96:a2:73:f4:5a:6b:0b:bf:5b:7b:6e:77:4f:
37:03:0d:a1:04:23:20:50:cd:89:67:ae:40:2c:ab:
d4:fd:3a:77:2e:8b:01:ac:a7:08:1b:3b:7d:ea:92:
64:72:95:2c:fe:5c:ae:25:9f:da:f7:b2:b1:15:56:
9b:af:2b:8f:7c:aa:65:47:6b:ac:7d:23:1c:e3:b3:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C8:77:65:2E:D1:44:25:A5:51:19:1C:AA:25:97:26:A2:D1:D7:C9
X509v3 Authority Key Identifier:
keyid:16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.119.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7e:1e:04:c4:4b:33:b5:dc:cb:d4:f9:eb:a1:03:bd:94:e6:
6a:0e:98:2a:d8:88:2c:b0:6a:51:69:a6:ef:e9:c4:d4:ea:ca:
fa:8f:90:69:2a:e1:20:7f:1f:82:ea:3e:15:e4:4e:1e:fc:32:
9e:cf:50:18:1f:17:ee:8c:a1:b0:83:3d:e9:4b:a5:f0:08:94:
b9:e1:a9:00:ee:e3:ad:61:de:67:86:6e:4e:68:c0:67:c6:c5:
df:33:4f:55:7f:2b:f3:0b:66:36:79:ca:41:db:d9:b5:e0:1a:
4a:d7:ae:2c:5e:dc:bf:7d:97:c7:51:ab:aa:d8:c1:61:db:92:
95:a1:7d:14:9d:b9:a2:6f:da:36:b3:79:b4:3f:8a:3e:82:3f:
ad:10:fb:f5:29:0c:79:22:b7:ee:36:3f:7a:77:fd:4e:6d:fe:
85:81:9c:ab:bd:78:7a:8f:be:1d:26:92:ed:ff:c3:86:e3:f6:
72:d9:42:cc:ab:58:4c:39:cb:b3:60:08:e0:18:9d:1f:da:3a:
78:76:1b:38:3a:59:2d:0d:df:3d:b6:54:30:7f:6d:3d:ff:cd:
72:af:85:e6:36:a3:20:01:e7:c8:3b:b8:53:1c:4e:12:f5:e8:
88:dc:2f:e5:f4:b3:92:c3:4d:eb:84:ce:75:f0:80:36:a4:00:
ee:1f:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:50 2026 by rpki-client