
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e372e3137362e302f32342d3234203d3e20313336303830.roa
File: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (raw, json)
Hash identifier: j+ssfk4JgFO6Pb/CGHEOZfos8czQhoSwZB6YERcUzUI=
Subject key identifier: 0F:52:A6:EC:5E:1D:84:CE:8D:81:41:A2:C1:57:8E:2F:2B:FC:C2:AA
Certificate issuer: /CN=14649B106FA0C411D7FCD73A4B0147226E8A8454
Certificate serial: 77A6CEAC5D36559165F1E3432B939B709B78CB75
Authority key identifier: 14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e372e3137362e302f32342d3234203d3e20313336303830.roa
Signing time: Sun 03 May 2026 02:31:58 +0000
ROA not before: Sun 03 May 2026 02:26:58 +0000
ROA not after: Sun 02 May 2027 02:31:58 +0000
asID: 136080
IP address blocks: 103.7.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl
rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a6:ce:ac:5d:36:55:91:65:f1:e3:43:2b:93:9b:70:9b:78:cb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14649B106FA0C411D7FCD73A4B0147226E8A8454
Validity
Not Before: May 3 02:26:58 2026 GMT
Not After : May 2 02:31:58 2027 GMT
Subject: CN=0F52A6EC5E1D84CE8D8141A2C1578E2F2BFCC2AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:12:6c:7b:93:c5:62:61:57:47:b0:3c:22:
42:10:10:5b:10:8d:03:32:9d:e6:48:16:aa:41:2e:
64:c0:84:cf:05:55:12:47:89:90:df:8b:e4:95:93:
ce:a0:d6:dd:c9:eb:6a:13:f4:c8:0b:49:0f:8e:f8:
65:c0:1f:26:fd:b6:b0:5a:1f:f0:2d:f4:c8:0f:d5:
23:7a:83:f9:9a:3b:63:27:3e:5c:67:fe:cf:9c:c5:
e6:25:b7:2a:40:f8:31:d9:9d:08:e8:01:a0:45:46:
b7:95:cd:fd:60:64:3c:f8:6d:a1:56:50:37:b5:b2:
e4:ca:30:84:71:b3:14:bc:c8:a9:61:b3:a6:b4:91:
f5:63:90:b9:68:74:ee:5a:bd:bc:f0:12:1d:b5:7f:
da:40:95:2d:f7:38:1f:a0:9f:27:b6:00:98:07:7e:
88:bc:2d:5e:ad:e3:8d:d5:39:4d:9c:d4:da:b2:51:
10:f2:f1:23:13:0e:c2:88:2c:7c:18:b1:7b:25:4c:
28:2e:41:e8:c4:2d:96:e7:da:58:97:58:58:22:f7:
cd:d3:18:e3:ee:ad:51:18:69:c7:ed:7f:e9:0c:62:
a0:8e:d7:78:17:dd:9c:c4:9f:15:77:40:19:db:49:
f8:ba:c6:35:07:c2:6c:7a:70:6a:f3:30:e0:08:b5:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:52:A6:EC:5E:1D:84:CE:8D:81:41:A2:C1:57:8E:2F:2B:FC:C2:AA
X509v3 Authority Key Identifier:
keyid:14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e372e3137362e302f32342d3234203d3e20313336303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.176.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a6:15:a9:94:b6:c3:03:c4:3d:87:d6:be:08:46:56:1b:14:
f5:d0:02:e0:a1:aa:be:ed:13:d3:3c:f4:60:d2:aa:57:76:81:
f7:62:c5:43:b7:25:fd:75:4f:a8:23:b9:c4:7d:a8:d0:b1:9d:
c8:f3:da:bb:1d:14:b5:33:a1:85:11:ce:bb:f7:35:e4:a1:1d:
c4:a2:3e:1e:0a:94:be:b3:af:6b:0c:b1:2d:95:b1:b0:05:29:
6f:1b:2d:03:98:97:91:78:8b:a2:2b:9e:2d:96:02:2e:c1:60:
ec:89:f0:bc:cc:69:76:59:73:cd:3b:90:0f:2c:92:56:99:3d:
cd:a9:aa:87:64:25:53:a6:2f:82:1a:96:ea:09:ca:7a:26:ee:
71:a0:58:d5:d4:f1:88:7e:c4:e5:02:7b:29:05:35:d6:41:71:
10:77:c6:24:eb:7b:c8:e7:5f:5e:2c:fe:31:84:4d:1e:48:39:
78:39:6b:7b:ff:66:c1:93:65:9b:1f:0e:92:df:41:cc:e5:71:
f4:90:2b:71:1d:97:42:8e:c9:fb:b5:81:a4:dd:f1:e3:ab:03:
bc:01:7d:2f:07:30:6d:9d:9b:d5:af:71:39:c6:e7:9e:9f:77:
4d:ad:a8:36:8b:42:c5:c4:4f:c4:da:3e:9b:83:07:73:c5:2d:
63:c2:25:b3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUd6bOrF02VZFl8eNDK5ObcJt4y3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ2NDlCMTA2RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2
RThBODQ1NDAeFw0yNjA1MDMwMjI2NThaFw0yNzA1MDIwMjMxNThaMDMxMTAvBgNV
BAMTKDBGNTJBNkVDNUUxRDg0Q0U4RDgxNDFBMkMxNTc4RTJGMkJGQ0MyQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjjhJse5PFYmFXR7A8IkIQEFsQ
jQMyneZIFqpBLmTAhM8FVRJHiZDfi+SVk86g1t3J62oT9MgLSQ+O+GXAHyb9trBa
H/At9MgP1SN6g/maO2MnPlxn/s+cxeYltypA+DHZnQjoAaBFRreVzf1gZDz4baFW
UDe1suTKMIRxsxS8yKlhs6a0kfVjkLlodO5avbzwEh21f9pAlS33OB+gnye2AJgH
foi8LV6t443VOU2c1NqyURDy8SMTDsKILHwYsXslTCguQejELZbn2liXWFgi983T
GOPurVEYacftf+kMYqCO13gX3ZzEnxV3QBnbSfi6xjUHwmx6cGrzMOAItY2JAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUD1Km7F4dhM6NgUGiwVeOLyv8wqowHwYDVR0j
BBgwFoAUFGSbEG+gxBHX/Nc6SwFHIm6KhFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGQxNzZkZGQtYTk4MC00M2Q2LTk0YTctOTVlZWRhNTM5NjY1LzAvMTQ2NDlCMTA2
RkEwQzQxMUQ3RkNENzNBNEIwMTQ3MjI2RThBODQ1NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNDY0OUIxMDZGQTBDNDExRDdGQ0Q3M0E0QjAxNDcyMjZFOEE4
NDU0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRkMTc2ZGRkLWE5ODAtNDNkNi05
NGE3LTk1ZWVkYTUzOTY2NS8wLzMxMzAzMzJlMzcyZTMxMzczNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcHsDANBgkqhkiG
9w0BAQsFAAOCAQEAkaYVqZS2wwPEPYfWvghGVhsU9dAC4KGqvu0T0zz0YNKqV3aB
92LFQ7cl/XVPqCO5xH2o0LGdyPPaux0UtTOhhRHOu/c15KEdxKI+HgqUvrOvawyx
LZWxsAUpbxstA5iXkXiLoiueLZYCLsFg7InwvMxpdllzzTuQDyySVpk9zamqh2Ql
U6YvghqW6gnKeibucaBY1dTxiH7E5QJ7KQU11kFxEHfGJOt7yOdfXiz+MYRNHkg5
eDlre/9mwZNlmx8Okt9BzOVx9JArcR2XQo7J+7WBpN3x46sDvAF9LwcwbZ2b1a9x
Ocbnnp93Ta2oNotCxcRPxNo+m4MHc8UtY8Ilsw==
-----END CERTIFICATE-----
Generated at Wed May 13 10:07:32 2026 by rpki-client