
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa
File: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (raw, json)
Hash identifier: Cl+3Yo+bu8lAW/IU+MoES7T3F7PhgakZcVRu4FSP59E=
Subject key identifier: 2C:2C:19:D7:01:7B:01:58:54:21:F7:70:82:04:34:D1:82:B8:13:0B
Certificate issuer: /CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C
Certificate serial: 40EAA860502FEC7E8E02F958AC4B1233B11DE695
Authority key identifier: B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa
Signing time: Sun 03 May 2026 02:29:41 +0000
ROA not before: Sun 03 May 2026 02:24:41 +0000
ROA not after: Sun 02 May 2027 02:29:41 +0000
asID: 137289
IP address blocks: 103.51.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl
rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ea:a8:60:50:2f:ec:7e:8e:02:f9:58:ac:4b:12:33:b1:1d:e6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C
Validity
Not Before: May 3 02:24:41 2026 GMT
Not After : May 2 02:29:41 2027 GMT
Subject: CN=2C2C19D7017B01585421F770820434D182B8130B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:ac:e4:46:4a:23:30:e4:a3:e8:7d:7f:b6:
9b:11:d8:cc:03:69:21:13:dc:c8:77:87:b1:73:08:
17:c8:76:e2:f6:74:23:58:c2:97:6a:39:13:45:0c:
9d:c8:34:cd:85:de:2a:6e:71:34:fd:13:64:c6:c2:
a8:a7:e0:81:0b:79:95:5a:27:45:81:5e:da:5f:4e:
b4:2d:92:48:d3:ac:bf:7d:1b:d3:d7:87:65:12:1e:
15:89:88:31:54:54:84:56:5f:d4:3c:a6:a3:34:b6:
0f:e6:81:02:2c:be:8b:29:13:10:2c:3d:f3:89:19:
9f:c3:6c:ee:7f:31:71:2d:b3:ab:dc:96:a0:5e:2d:
7e:c3:b1:fb:72:2b:17:90:58:49:1c:99:2d:2c:59:
05:12:53:df:4c:03:fd:6c:d2:dc:f1:6e:32:7e:95:
88:4e:bb:89:a7:af:57:c6:e8:18:3f:82:ed:de:46:
91:87:d0:d0:33:fb:29:56:94:fa:6d:aa:a5:bc:6e:
e0:91:8b:b6:e2:98:2b:20:a7:56:3a:d0:69:7a:38:
51:35:a6:2d:9b:c8:7b:23:a2:07:89:b6:61:80:e7:
2b:2c:ba:4d:c9:3d:2a:1f:a8:fe:14:fc:de:81:3c:
58:a2:4e:b2:23:b8:75:09:4a:92:e4:29:46:94:7d:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2C:19:D7:01:7B:01:58:54:21:F7:70:82:04:34:D1:82:B8:13:0B
X509v3 Authority Key Identifier:
keyid:B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.51.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9c:00:c0:88:38:1f:c9:c3:52:00:1b:72:9e:5b:4c:01:b0:
81:76:2a:c0:6b:cf:50:bc:dc:17:64:3e:52:56:f4:f1:8c:62:
c1:1c:c8:85:53:5d:e9:e8:91:5e:03:9b:9e:ca:04:9c:77:fd:
81:ff:f0:bb:2d:31:a0:c2:15:fe:71:e4:c5:95:fb:d7:02:6d:
c4:1b:c7:0a:d2:de:5b:3a:4c:d0:26:ee:d3:3e:de:e1:66:fb:
e7:7d:78:67:1b:ec:23:95:ba:2e:58:09:88:f5:2f:3a:78:83:
ba:ed:c0:0e:02:d0:c8:ac:6f:b9:6f:a1:dd:40:fc:f0:78:c3:
31:0c:19:40:52:c6:4f:c0:19:22:34:bd:4e:53:c2:42:fe:41:
da:85:d8:35:67:d6:3c:03:d0:e9:56:5c:a5:35:a5:b8:91:0d:
08:51:2a:87:b3:b4:9f:6b:bc:87:f8:67:04:9c:ea:9c:20:85:
ca:f6:32:b0:bc:8a:aa:15:4c:af:2d:52:7b:bd:b8:d6:94:55:
83:99:75:84:26:2c:d1:c6:26:29:18:16:25:f8:e6:e3:4b:fc:
f6:a2:d6:da:8f:cb:3f:63:95:d9:63:84:c8:b0:2c:10:71:ca:
8e:43:5e:a8:9a:fc:47:f1:51:5c:7a:44:0c:64:95:9a:97:70:
70:ea:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:57:49 2026 by rpki-client