
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa
File: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (raw, json)
Hash identifier: EJ6cvXJ/T86AFVCQoEqikidmMKscKfWsdPHD8vPB1Oc=
Subject key identifier: 5A:B5:F8:92:78:2F:F4:8E:10:70:9C:9F:BB:A8:A7:69:42:F7:CE:C7
Certificate issuer: /CN=14384A77FC1E03BABAA8DB6E95F979B08D16DAB9
Certificate serial: 29203D3C914D2186DE44C51F79BC40EE5FD8B875
Authority key identifier: 14:38:4A:77:FC:1E:03:BA:BA:A8:DB:6E:95:F9:79:B0:8D:16:DA:B9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa
Signing time: Sun 03 May 2026 02:30:26 +0000
ROA not before: Sun 03 May 2026 02:25:26 +0000
ROA not after: Sun 02 May 2027 02:30:26 +0000
asID: 136836
IP address blocks: 103.100.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl
rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:20:3d:3c:91:4d:21:86:de:44:c5:1f:79:bc:40:ee:5f:d8:b8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14384A77FC1E03BABAA8DB6E95F979B08D16DAB9
Validity
Not Before: May 3 02:25:26 2026 GMT
Not After : May 2 02:30:26 2027 GMT
Subject: CN=5AB5F892782FF48E10709C9FBBA8A76942F7CEC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:2f:ac:de:92:79:00:83:f3:63:92:00:d4:
59:d9:5c:7c:a6:48:c6:de:41:97:46:39:72:d3:b8:
fa:75:79:82:bf:52:6c:48:4d:09:6b:d7:17:b9:f5:
f8:10:c5:91:dc:39:d1:bd:1f:0c:f5:49:02:e7:29:
d9:49:ae:15:09:ec:5b:15:d0:46:f3:26:af:8a:7c:
9e:8b:43:a6:96:78:3e:39:60:0c:ea:59:85:0b:ab:
2a:a0:1e:67:aa:98:55:f5:c9:15:45:9d:4f:cb:db:
9a:c9:ba:b6:22:16:57:53:28:c2:3d:6f:93:07:9f:
dc:d2:9d:1f:fe:2f:a8:e9:57:fd:3f:28:7e:b7:d0:
df:d8:1c:68:bf:46:7e:7b:9a:53:77:ab:93:f8:d9:
f9:2c:11:9d:f7:92:8e:1e:6a:9a:71:cf:3c:d6:d3:
93:12:b2:56:7d:de:5a:8c:ae:9b:c0:41:84:43:e2:
b8:c2:8f:8e:ae:ad:cf:dd:b9:b0:c7:0e:27:93:80:
75:bb:34:95:b2:7e:6a:b6:7f:66:57:18:36:ea:de:
c3:a5:4f:04:2b:c9:3a:4f:10:9e:3c:c6:76:ac:23:
c3:f0:82:ee:31:91:16:73:60:db:84:d1:4e:71:7e:
47:79:3d:48:7d:2c:e7:e3:50:92:3c:3f:f3:b7:db:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:F8:92:78:2F:F4:8E:10:70:9C:9F:BB:A8:A7:69:42:F7:CE:C7
X509v3 Authority Key Identifier:
keyid:14:38:4A:77:FC:1E:03:BA:BA:A8:DB:6E:95:F9:79:B0:8D:16:DA:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.85.0/24
Signature Algorithm: sha256WithRSAEncryption
84:15:51:a6:24:f4:57:cb:22:ca:d0:4a:2a:0e:c2:c6:be:c1:
bb:0b:61:ef:8d:b4:5a:14:25:cc:03:ff:46:14:fe:0b:1c:89:
43:d0:98:2a:67:af:80:a9:11:3b:ac:56:6f:72:da:00:1f:8f:
b9:03:97:58:22:8a:9e:f3:5b:da:f2:8a:64:ec:c3:35:13:82:
ba:f1:f7:5f:68:d9:84:5a:37:29:8e:03:cb:12:32:7b:d2:7a:
bd:2e:87:ba:0a:95:ef:46:38:ae:1d:c1:b3:92:7a:45:29:ea:
af:18:fe:ec:d0:7c:6f:79:0c:ab:37:30:ce:b5:db:90:f1:aa:
65:3f:d3:ec:47:73:65:07:7f:bc:c3:7a:fb:a8:f0:ff:78:fd:
14:09:1e:f4:4e:e3:7a:bd:85:8e:07:8e:eb:57:32:f0:44:1b:
36:3c:05:b0:59:5e:c2:db:de:16:58:3d:27:69:82:ba:9d:33:
5d:fe:25:8b:e0:21:23:c9:1a:e6:17:9d:9b:f7:6e:d1:57:a9:
5d:34:e6:56:93:df:ee:c5:68:70:de:75:7d:42:7a:69:f9:12:
4c:12:34:92:4e:17:9f:34:f6:b1:32:fd:ef:de:dd:7e:fd:a8:
cb:4d:6e:b1:e4:bd:c3:c1:d4:a5:53:60:6b:85:c5:36:58:ef:
e6:cb:7f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:44 2026 by rpki-client