
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa
File: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (raw, json)
Hash identifier: baidtJB1I5sZbU9lybxXsdsHbmGXConPY+qLEFZYE2g=
Subject key identifier: 7A:E2:DF:12:A7:42:64:D5:D4:1B:1B:62:EC:43:59:A1:DF:D8:23:DB
Certificate issuer: /CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8
Certificate serial: 06694131FC0D09F37986768B01F31EE4C42B3DDB
Authority key identifier: 9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa
Signing time: Sun 03 May 2026 02:28:37 +0000
ROA not before: Sun 03 May 2026 02:23:37 +0000
ROA not after: Sun 02 May 2027 02:28:37 +0000
asID: 141615
IP address blocks: 103.161.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl
rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:69:41:31:fc:0d:09:f3:79:86:76:8b:01:f3:1e:e4:c4:2b:3d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8
Validity
Not Before: May 3 02:23:37 2026 GMT
Not After : May 2 02:28:37 2027 GMT
Subject: CN=7AE2DF12A74264D5D41B1B62EC4359A1DFD823DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:ba:58:0b:ef:ae:ce:16:0d:fa:1e:19:90:
3f:88:ed:82:4f:c2:d4:d5:00:0d:98:5f:71:ab:d9:
7b:48:c2:77:f9:c0:d0:e8:e5:97:ca:98:40:ce:60:
1d:78:b9:c4:2f:6d:1c:ed:00:29:b7:9d:1a:7e:f3:
c1:4e:48:c5:6b:87:91:35:f0:04:b6:eb:d7:3a:fd:
54:44:c9:20:8e:8b:1d:d7:bf:2f:6b:f8:25:f0:4c:
42:93:7a:e2:07:eb:8b:53:39:af:35:73:1c:fc:ad:
66:b7:2b:5d:da:b8:89:8d:09:cd:bd:0b:76:80:7b:
ab:23:a5:ae:cd:78:23:a7:1b:f2:73:ce:b3:e6:0d:
dd:17:7d:1c:0e:e4:62:f0:34:bd:72:ff:59:2d:ff:
7d:0c:87:a9:84:b6:54:a2:a4:e2:45:4c:45:a9:83:
71:43:f3:c4:19:1b:91:af:87:a4:2d:9f:22:40:dc:
47:06:eb:62:12:6e:9d:f9:8b:22:24:43:7a:f7:34:
98:b4:39:c1:df:d5:24:4c:bf:8f:2e:c4:a1:5e:32:
2c:10:bf:48:f4:fe:29:86:ec:e1:0f:ae:06:10:06:
cd:03:66:f2:e6:6b:0c:67:05:97:0b:1a:0c:02:0c:
2c:6a:df:15:a7:30:15:50:2c:6a:6d:58:d0:2f:5b:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:DF:12:A7:42:64:D5:D4:1B:1B:62:EC:43:59:A1:DF:D8:23:DB
X509v3 Authority Key Identifier:
keyid:9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d1:a2:bf:05:cf:16:61:c4:c6:a3:cf:74:c9:8b:ac:cc:67:
a7:07:b8:5e:7c:41:06:fb:10:18:5a:c7:89:f6:aa:fe:9e:c9:
62:cd:a0:ad:6e:60:42:b1:aa:84:e3:44:4b:95:25:7f:62:93:
2e:88:95:93:0d:55:f7:a7:42:2a:e2:14:7f:b4:24:04:b9:20:
2b:06:09:50:98:71:9b:52:97:e7:0d:f5:83:da:34:75:cd:f6:
73:90:57:0f:05:cc:a2:95:76:d4:da:6e:4a:a6:23:14:40:1c:
f2:78:0d:25:0c:9c:08:57:bd:51:a6:af:ea:ff:4e:f9:e2:93:
15:33:b2:85:3b:8d:28:67:7f:b7:c1:23:ef:ec:7f:07:d2:7a:
84:79:63:6f:e3:22:c7:7a:79:8c:22:bb:63:26:99:46:97:90:
93:57:15:1c:95:69:e5:f3:cc:d5:7e:d5:44:a3:7e:b8:ed:d9:
b5:a2:2f:8b:31:d6:4b:25:5a:c8:f1:8e:24:4b:03:b0:10:ce:
75:28:61:9d:75:66:45:fa:d9:36:ac:70:8b:18:be:2b:ee:6c:
db:db:8f:48:d6:a0:91:98:81:a8:b2:10:bd:14:80:9e:da:61:
a5:a1:42:7d:31:3e:b5:c4:a7:6a:a4:b7:55:3d:8b:e9:e5:bf:
32:d7:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:58 2026 by rpki-client