
$ rpki-client -vvf rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa
File: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (raw, json)
Hash identifier: nfQjjeUU0bmWsXIN6glyvpvB8OwmrnZCIcDr2PMemtI=
Subject key identifier: A2:03:46:8A:39:6A:39:09:57:D9:70:D0:AC:DA:EE:57:51:E9:30:BE
Certificate issuer: /CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37
Certificate serial: 6D882AAD0DF4C7474122F6B7B84BF3B8DEDDFF9D
Authority key identifier: 09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa
Signing time: Sun 03 May 2026 02:30:00 +0000
ROA not before: Sun 03 May 2026 02:25:00 +0000
ROA not after: Sun 02 May 2027 02:30:00 +0000
asID: 142351
IP address blocks: 103.169.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl
rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:88:2a:ad:0d:f4:c7:47:41:22:f6:b7:b8:4b:f3:b8:de:dd:ff:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37
Validity
Not Before: May 3 02:25:00 2026 GMT
Not After : May 2 02:30:00 2027 GMT
Subject: CN=A203468A396A390957D970D0ACDAEE5751E930BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:1b:f2:f0:f1:27:34:4c:b9:80:ff:ee:6b:
8c:76:ab:15:63:58:9d:5f:5c:ab:f5:00:0c:83:79:
b7:54:e2:f8:56:26:c1:f8:fc:28:fd:14:d3:02:78:
20:97:b9:dd:76:1d:7a:ac:2e:4c:08:ca:ae:9e:4d:
fc:10:ca:fe:31:d3:34:ef:b8:fb:78:7d:1d:e6:cb:
17:a0:d9:c8:e0:b9:f4:49:c3:d6:15:4d:6e:c1:8b:
98:a1:bb:b0:3d:73:e2:64:04:27:39:a7:68:01:5b:
d6:58:68:22:b2:5b:2d:16:f9:e9:4e:6b:5e:30:8b:
43:56:2e:fa:d2:0f:ba:4c:57:67:17:25:aa:7f:eb:
d0:dc:8b:e6:a7:5a:6c:aa:62:c1:95:32:bb:77:1c:
f4:2f:68:b8:6e:e6:df:be:b2:50:c4:f6:32:50:ab:
53:31:d2:49:07:fd:44:fa:07:91:3c:cf:fe:9b:8a:
7c:bc:cf:b9:f8:21:2b:3b:6d:77:fc:1b:10:cf:5f:
f5:c6:e2:cd:25:c6:42:b7:73:1e:01:f3:a5:16:c5:
3f:88:e5:e7:3d:cb:92:3d:4c:3f:cb:d9:6a:97:9f:
5f:74:4e:a6:a8:c8:89:bd:e0:f3:65:fa:37:86:e2:
88:7f:e7:54:62:fe:a8:f0:6d:fb:85:a7:ae:56:c8:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:46:8A:39:6A:39:09:57:D9:70:D0:AC:DA:EE:57:51:E9:30:BE
X509v3 Authority Key Identifier:
keyid:09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e5:7e:7b:a3:0d:65:89:cf:91:16:e0:d3:1b:b2:81:c4:2c:
e4:6b:e1:4e:4d:d0:94:d9:f6:0d:6c:1e:9b:50:48:75:dd:84:
f3:15:ab:c2:11:af:ff:d1:0b:4a:38:b6:64:04:64:04:a1:d2:
2a:f3:8f:00:fc:1b:c9:37:9d:6a:8b:b6:96:62:96:f9:bc:3b:
dd:7b:1c:87:75:e1:28:90:a0:2a:2a:64:49:26:df:bb:46:cd:
87:5e:28:9b:c7:8b:8e:5c:6e:c8:36:16:8d:12:47:6e:28:0b:
68:f0:09:5f:a7:a9:22:7e:c5:21:94:e2:9c:78:fc:5d:8a:ce:
3a:b5:5f:5c:f9:06:d4:c4:ba:32:e9:c2:09:09:a6:4c:24:4c:
d6:f0:44:ff:69:5a:d7:88:56:16:e9:75:7a:4e:31:56:5d:ad:
e8:e3:30:6b:8e:5e:1c:a4:c6:d9:66:eb:7d:3e:4e:fd:9f:44:
8b:f6:0e:df:92:e1:f1:22:9e:83:b7:28:bd:2d:90:d6:13:dc:
79:e6:28:ab:34:e2:7f:bf:af:f6:7f:79:8c:a4:a3:98:cf:79:
c4:09:bd:ae:b8:89:eb:26:e0:43:4d:19:3e:f4:e2:4f:88:58:
8c:64:a8:b1:7b:c8:4c:76:13:01:24:56:48:be:10:1e:5d:71:
94:89:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:34:31 2026 by rpki-client