
$ rpki-client -vvf rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa
File: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (raw, json)
Hash identifier: yCX5+Dxju6djsJMnbOlkqP9bGOuuQKBHDP9eW/sQSSc=
Subject key identifier: 5C:86:02:1D:F5:FE:AE:0E:99:B9:50:63:63:33:28:37:B2:09:ED:ED
Certificate issuer: /CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579
Certificate serial: 3F773F64742000980B57CFC012C6AA4648659B7A
Authority key identifier: EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa
Signing time: Sun 03 May 2026 02:28:52 +0000
ROA not before: Sun 03 May 2026 02:23:52 +0000
ROA not after: Sun 02 May 2027 02:28:52 +0000
asID: 133349
IP address blocks: 103.230.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl
rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:77:3f:64:74:20:00:98:0b:57:cf:c0:12:c6:aa:46:48:65:9b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579
Validity
Not Before: May 3 02:23:52 2026 GMT
Not After : May 2 02:28:52 2027 GMT
Subject: CN=5C86021DF5FEAE0E99B9506363332837B209EDED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:8a:de:c4:c0:f0:4b:fb:a6:19:1b:36:c2:
e5:de:39:65:75:90:2c:76:0e:4d:96:28:68:90:fe:
bf:e9:32:5c:7f:3a:9b:0b:f6:c3:84:97:fa:2c:95:
ee:a9:76:56:a9:72:36:ed:3e:65:e6:87:b2:8c:52:
30:df:ce:0f:c7:f6:3f:13:67:b4:49:4d:32:f8:53:
ed:67:f6:03:6a:f0:63:c2:43:0e:b4:6e:4f:61:93:
cd:ee:e5:44:75:43:36:4c:81:46:46:40:b1:77:f2:
56:55:ba:58:1f:b5:05:53:1f:9c:d4:3b:d6:79:c1:
70:ef:9c:12:66:64:9d:77:82:34:4d:d8:25:89:ee:
df:8b:88:16:72:96:01:f6:de:a0:8a:dc:ad:23:8d:
5d:44:2c:30:e8:b7:7a:2a:db:33:85:ed:99:ae:a8:
69:3c:4d:15:ba:8a:9c:2d:71:51:2a:14:0a:fd:96:
0c:61:94:8d:fc:bd:89:be:30:55:d4:85:ae:3c:c4:
67:86:88:53:b5:9c:c9:84:18:25:1e:7b:26:bd:6b:
2a:ad:f2:3c:ad:72:0e:f5:6c:b2:4e:c8:99:29:68:
82:88:38:2a:29:af:c2:45:db:5c:53:28:6e:fa:84:
76:ae:76:20:25:19:97:8c:4a:6e:af:56:b7:91:a5:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:86:02:1D:F5:FE:AE:0E:99:B9:50:63:63:33:28:37:B2:09:ED:ED
X509v3 Authority Key Identifier:
keyid:EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.188.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:a5:e4:c4:d1:7c:ae:e4:fb:53:4f:c0:ea:35:5f:9c:32:13:
f0:61:8f:8f:cb:66:0c:3a:8a:1c:88:69:6b:3e:8a:60:a0:53:
98:4b:38:43:f0:23:cc:1e:ea:ba:be:08:36:55:93:9e:63:26:
ba:0c:d6:6f:d5:c8:0a:aa:c0:af:e4:e5:4a:8c:b5:52:3f:ea:
ac:f5:ae:f7:68:0e:c6:f3:1c:f3:15:19:28:be:62:7e:24:06:
12:8a:95:11:a9:56:54:97:fd:dd:f2:58:f0:28:ef:2f:89:78:
ed:95:6b:83:ac:f8:66:41:37:40:11:4d:7c:28:ba:58:6c:bc:
66:fc:e5:c5:9f:04:a2:fb:b2:93:d7:ce:30:1a:e0:c0:61:cb:
2f:7f:38:22:85:5a:6d:98:6f:f3:0e:88:73:ff:95:69:5c:02:
40:a9:07:ac:20:62:89:cf:a9:1a:bc:72:64:f3:44:fe:20:37:
74:79:cc:e2:ba:e9:e6:51:42:57:df:62:eb:ff:89:8b:02:d8:
ca:83:7b:4e:10:90:4d:36:50:1e:69:d3:d6:ee:f8:d1:de:6d:
8c:89:ff:17:43:f1:f7:89:f6:1c:ea:a3:0f:24:9d:64:5f:e2:
4d:fc:b9:03:82:85:98:e2:7a:53:ce:96:07:f8:f3:ef:fd:48:
1a:a0:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:34:16 2026 by rpki-client