
$ rpki-client -vvf rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa
File: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (raw, json)
Hash identifier: SSEqRHV7zoEBGj203TATYpoeDOC/rqoDeoQ8cFsGA28=
Subject key identifier: 0E:8D:09:9D:C8:DF:59:F3:AF:CF:35:0E:1D:70:CF:8F:37:F7:18:7C
Certificate issuer: /CN=3FCCB124CE6330827269179656BC9A7F04BCACF3
Certificate serial: 78A8FBBC9546A61543078CDFC8195202E9A30877
Authority key identifier: 3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa
Signing time: Sun 03 May 2026 02:33:27 +0000
ROA not before: Sun 03 May 2026 02:28:27 +0000
ROA not after: Sun 02 May 2027 02:33:27 +0000
asID: 141126
IP address blocks: 103.158.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl
rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a8:fb:bc:95:46:a6:15:43:07:8c:df:c8:19:52:02:e9:a3:08:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FCCB124CE6330827269179656BC9A7F04BCACF3
Validity
Not Before: May 3 02:28:27 2026 GMT
Not After : May 2 02:33:27 2027 GMT
Subject: CN=0E8D099DC8DF59F3AFCF350E1D70CF8F37F7187C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:62:6a:60:4a:96:93:24:86:4c:c6:b2:4b:
ce:51:9f:9a:89:4f:6b:0e:c5:07:bd:92:72:c8:6b:
7d:bd:bd:ae:e3:61:bd:e7:2c:d2:92:50:a9:e9:03:
64:04:eb:43:3a:99:13:f6:dd:71:7b:56:e2:5c:98:
87:f8:cb:92:db:a6:94:51:f1:62:51:49:4b:c2:71:
df:2f:45:63:50:fb:b7:39:69:0a:db:6a:5f:27:69:
9d:19:b2:42:41:e1:c9:da:e9:b2:14:68:88:85:41:
96:7e:f6:5d:e3:8f:07:cb:d4:e2:c1:25:e2:7c:07:
c5:37:50:23:73:da:15:d0:f5:19:ba:cb:16:9f:f1:
93:1d:27:37:08:70:59:bd:92:69:e6:cc:5f:a8:35:
12:d8:b1:f1:46:2d:f2:00:68:7f:1e:33:4e:1f:7f:
42:1f:8b:38:56:37:9a:35:ab:b6:a8:09:55:ca:bd:
07:03:2d:89:a8:15:bd:8a:f3:a1:2b:7c:a9:87:6e:
32:03:80:05:f8:78:38:83:ac:34:29:95:ec:9d:6e:
d8:52:bc:98:f6:57:b4:54:9c:24:f0:74:fa:03:fb:
fa:cc:c8:97:0b:63:2c:01:8b:58:40:65:7c:f2:18:
fb:59:87:2d:de:c5:56:fd:cf:05:83:96:32:18:ce:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8D:09:9D:C8:DF:59:F3:AF:CF:35:0E:1D:70:CF:8F:37:F7:18:7C
X509v3 Authority Key Identifier:
keyid:3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.154.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:d6:79:e6:14:7e:4a:b0:04:c2:31:a4:4b:87:af:0f:4b:6b:
bb:f1:a0:1f:f6:b8:3f:34:bf:d1:f7:50:4b:da:d2:51:41:20:
59:5f:cf:44:43:de:aa:16:60:ec:64:ea:bd:2b:ec:52:1e:9c:
47:92:00:74:c9:5e:de:42:c2:92:88:62:ba:44:75:08:34:d1:
17:49:c6:0e:be:05:86:8e:13:2e:c9:ad:9e:cb:4e:08:5e:6b:
9a:24:3e:57:b2:0b:51:c8:c4:30:47:5e:4b:a3:f3:c1:3e:c7:
db:7d:00:cf:20:54:db:e8:b0:c2:42:c3:d6:8c:1e:e3:40:e5:
5f:df:33:e3:0b:a2:7d:15:50:e5:3a:cc:c8:d7:1b:06:3e:ea:
69:bd:c6:5f:fb:59:30:54:26:6d:f0:58:29:24:cb:b3:5a:b6:
81:b9:8d:7c:ba:b9:0f:dd:10:57:f7:0b:37:1b:80:d9:27:2b:
3a:b0:7d:49:62:ad:1f:86:ee:1f:6d:b1:3e:69:f5:df:19:e4:
f5:bd:67:21:ba:b5:e7:ff:ee:78:50:9a:dc:47:7b:73:8d:28:
84:95:a1:18:82:a8:19:a5:d2:5c:8e:ca:16:1f:95:51:9a:5b:
9c:fa:ce:29:c0:7a:a7:82:fe:87:91:5a:68:90:20:c8:b9:db:
ae:bf:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:59 2026 by rpki-client