
$ rpki-client -vvf rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa
File: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (raw, json)
Hash identifier: 1g2WZIx9KqbiuQj/CWy92fVr9rJvVDZ62oh+oM6NT5Y=
Subject key identifier: 3B:11:FD:E9:96:87:BD:7C:9D:E9:98:7A:F7:A1:21:A2:F5:08:A4:85
Certificate issuer: /CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC
Certificate serial: 2C9377E6BDE834109E7110972CA0D2A36E56E928
Authority key identifier: A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa
Signing time: Sun 03 May 2026 02:29:31 +0000
ROA not before: Sun 03 May 2026 02:24:31 +0000
ROA not after: Sun 02 May 2027 02:29:31 +0000
asID: 133832
IP address blocks: 103.58.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl
rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:93:77:e6:bd:e8:34:10:9e:71:10:97:2c:a0:d2:a3:6e:56:e9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC
Validity
Not Before: May 3 02:24:31 2026 GMT
Not After : May 2 02:29:31 2027 GMT
Subject: CN=3B11FDE99687BD7C9DE9987AF7A121A2F508A485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:5b:15:34:75:54:6d:79:b3:ec:21:95:36:
c9:a5:c0:20:09:47:de:1c:aa:69:81:99:17:fa:b5:
69:62:f3:38:3d:9c:3c:85:10:3a:cd:e9:dc:29:7b:
7c:02:e4:cd:66:26:7a:0b:d1:fb:d3:6e:1a:ac:c1:
0e:c9:fd:73:4a:5e:4c:6c:98:2c:46:46:cb:08:03:
ce:32:af:8d:19:79:63:f6:37:70:ac:62:0b:9d:31:
a4:3b:21:e8:f1:f5:c2:33:79:e2:c0:b4:83:74:27:
9e:9a:fd:e9:f5:40:15:b7:0c:1b:cb:6f:e5:f9:a0:
fd:ff:72:6d:5a:37:f2:13:52:a7:5d:5e:f8:bc:fa:
0b:2a:3f:a9:6e:82:b9:47:71:12:86:cc:6a:c6:55:
0e:da:e5:ae:0f:b0:eb:1b:f3:c7:b9:75:89:f0:3d:
6b:04:f6:87:05:83:2e:12:9f:4d:6b:a9:4b:63:bc:
a2:de:f0:01:b8:25:24:7d:65:a2:4f:53:22:c3:3e:
00:da:d4:aa:8c:18:2d:56:ec:6b:68:ff:4b:4b:cb:
36:f6:c0:43:6b:1d:15:53:5c:fd:f5:30:04:0a:ba:
e2:cf:f2:fd:83:76:68:c2:5e:4a:38:b4:02:fd:c9:
f5:ff:53:5f:bd:0e:2a:bb:49:af:e8:9f:fa:d4:05:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:11:FD:E9:96:87:BD:7C:9D:E9:98:7A:F7:A1:21:A2:F5:08:A4:85
X509v3 Authority Key Identifier:
keyid:A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.111.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:dc:b8:33:ad:51:5a:44:fa:ce:81:10:72:5b:12:64:1f:90:
4e:cf:87:b6:51:4a:aa:a1:15:2a:91:9c:80:23:a9:d1:8e:ac:
4c:e6:ff:c1:f7:12:34:bb:4c:92:f0:02:2e:32:40:06:4b:69:
5a:b6:71:a2:97:78:6a:e6:3a:c2:b5:bb:5f:2e:84:44:9b:6f:
71:d9:d1:25:9c:3e:62:d4:d8:89:08:70:36:5f:0c:94:17:ab:
ce:77:2a:70:60:96:de:e2:7a:66:6a:e3:2b:e2:34:78:be:51:
bc:11:e4:b4:c1:3d:ce:5e:12:79:cb:26:d5:b1:19:c0:8b:f7:
83:87:9a:cc:08:ec:11:df:b8:eb:94:3e:14:a2:22:17:b8:fa:
a6:8f:22:1b:3a:39:38:61:63:7a:e8:f2:9b:dd:02:a9:1b:9a:
71:ff:8a:1a:e6:8e:c4:2e:dc:a3:39:a6:0a:63:6c:48:b8:f0:
37:04:bd:52:7f:1b:c5:28:18:68:99:70:8d:b2:1c:ab:29:70:
79:ca:f4:7b:50:2b:6f:9f:5d:34:a1:d7:91:4e:dd:5a:ad:76:
47:21:aa:64:a4:d9:f9:a5:d9:aa:29:9f:63:57:73:55:1d:0f:
d5:45:c7:ec:8d:50:d6:26:d0:fa:b3:9e:03:5f:d7:b4:d4:0f:
13:2e:59:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:30 2026 by rpki-client