
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa
File: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (raw, json)
Hash identifier: 0nmqU55YZ3VtV1W8dEUj6+BAJuQ389WNc46VpzYQeA4=
Subject key identifier: DE:DD:6D:A6:DC:AA:E3:12:25:F2:E1:27:69:70:AC:7F:9C:B5:7F:F7
Certificate issuer: /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Certificate serial: 61E99FD38BE9CA5CCB48A9FAA5A45BECCF2C4F1D
Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa
Signing time: Sun 03 May 2026 02:35:20 +0000
ROA not before: Sun 03 May 2026 02:30:20 +0000
ROA not after: Sun 02 May 2027 02:35:20 +0000
asID: 138866
IP address blocks: 103.140.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e9:9f:d3:8b:e9:ca:5c:cb:48:a9:fa:a5:a4:5b:ec:cf:2c:4f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Validity
Not Before: May 3 02:30:20 2026 GMT
Not After : May 2 02:35:20 2027 GMT
Subject: CN=DEDD6DA6DCAAE31225F2E1276970AC7F9CB57FF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:a7:6a:ea:cd:89:3c:99:dc:7a:f6:2c:8c:
e3:4b:3f:fa:97:65:cd:4c:f7:c5:16:02:8e:9a:58:
2c:04:a0:74:cd:20:bb:e7:de:c0:57:0b:32:cb:df:
12:51:65:be:de:94:0c:b6:b4:32:05:02:cf:78:6c:
b4:23:e6:8e:c8:49:ef:51:0f:64:5b:13:55:b5:f5:
20:fb:4e:49:5f:49:87:34:7d:b5:03:d1:cb:91:73:
b0:9f:2d:6c:51:ce:08:91:23:c3:5b:29:cb:f5:ad:
69:5d:6f:2f:22:26:12:b8:bd:1a:97:19:2d:89:fc:
77:74:40:0c:68:3d:95:ef:52:5a:80:1f:73:2f:3a:
2c:47:d3:c9:b3:d3:72:cc:88:6c:2b:6a:99:aa:45:
f9:3b:30:dc:83:5b:3b:bd:17:00:16:f9:52:82:78:
32:36:db:aa:7c:55:0a:02:50:21:7e:46:87:65:c0:
c9:52:a4:38:e6:8e:ad:0d:b6:af:b1:c2:37:69:67:
b0:c9:b2:7b:84:be:b0:0d:e3:5d:b1:69:5e:42:b7:
e7:f7:e8:c4:86:e6:3f:dd:9f:e2:58:14:50:00:c1:
7e:ea:d7:09:23:db:1c:55:1b:bb:e1:2d:fb:19:c3:
d5:b6:46:81:62:95:86:5e:ad:50:86:ca:91:cf:0d:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DD:6D:A6:DC:AA:E3:12:25:F2:E1:27:69:70:AC:7F:9C:B5:7F:F7
X509v3 Authority Key Identifier:
keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.130.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:16:0b:17:ab:f4:12:6b:17:1a:a9:24:c0:69:7c:dd:f1:86:
73:33:e7:10:3e:61:95:c8:7b:01:a4:d5:77:87:fc:ac:36:33:
ee:6c:f8:68:53:4c:f2:10:54:75:a3:70:06:27:24:84:7d:4b:
0c:1c:d5:15:7e:05:8b:26:2d:ba:4c:00:84:1c:e2:2e:d7:b4:
8f:3d:88:11:e2:cf:a5:12:ac:75:0a:0f:fb:e3:d9:6b:ad:d4:
e6:d8:10:96:ee:ff:75:13:8d:29:8d:df:c1:b5:b2:51:0a:80:
d7:e1:c8:12:7c:52:f6:7f:74:d2:d3:06:dc:cd:b5:6c:3f:aa:
12:4d:06:1d:ec:8a:fd:0f:82:9c:fc:a9:e1:9f:59:c9:3f:6b:
a0:dd:44:4a:13:da:96:a1:2f:5b:9f:7d:24:7c:33:e8:e7:f6:
d1:af:96:5e:14:e7:d7:33:51:a7:b8:72:51:c5:28:f8:ea:ae:
10:53:be:73:2a:e7:0e:87:fd:4a:1c:10:cd:dc:4f:2d:12:ca:
3c:98:e6:3b:17:0b:25:2c:19:6f:69:30:2d:9f:77:98:ee:79:
a1:23:b7:63:40:e1:a2:dc:48:bc:6a:ac:ef:0e:1e:f3:9a:75:
d1:98:fe:35:1b:f5:b8:64:60:f4:2e:e4:d4:ab:96:61:4e:da:
e3:f5:fa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:42 2026 by rpki-client