
$ rpki-client -vvf rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33342e302f32342d3234203d3e203234353334.roa
File: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier: LJE6Lm2wcgVrtTY0Ks0jc21WxZvYCmedmEwmMCEDJGg=
Subject key identifier: 2A:E0:BA:D5:9D:5C:7C:C3:0A:ED:D3:17:34:86:B1:83:57:41:3E:3B
Certificate issuer: /CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E
Certificate serial: 2B6C04361E26E16A33D66B586E60E03C9D94B799
Authority key identifier: 87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33342e302f32342d3234203d3e203234353334.roa
Signing time: Sun 03 May 2026 02:38:49 +0000
ROA not before: Sun 03 May 2026 02:33:49 +0000
ROA not after: Sun 02 May 2027 02:38:49 +0000
asID: 24534
IP address blocks: 103.149.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl
rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6c:04:36:1e:26:e1:6a:33:d6:6b:58:6e:60:e0:3c:9d:94:b7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E
Validity
Not Before: May 3 02:33:49 2026 GMT
Not After : May 2 02:38:49 2027 GMT
Subject: CN=2AE0BAD59D5C7CC30AEDD3173486B18357413E3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:d5:85:0c:ef:7f:b3:65:8f:38:9f:87:a6:
e9:56:7a:04:06:f2:24:86:58:c2:f1:61:87:66:1d:
c4:6a:27:39:bd:7e:76:5f:68:3a:bb:ba:88:df:8c:
c6:de:02:b3:8e:a2:34:45:2c:9b:51:3a:3f:b5:3c:
3d:d9:08:0f:de:b1:63:16:06:66:a7:5d:7e:e5:97:
04:5c:f1:57:8d:35:c8:7a:17:54:29:7d:29:a2:44:
a9:85:58:00:b6:b4:e6:fa:1d:cd:ff:a1:8d:8d:0c:
a7:8d:96:1a:88:63:1f:e9:db:94:af:3f:b3:9e:69:
0f:cf:5e:9e:e2:c1:dd:d0:6e:cf:13:35:b7:8e:24:
e4:d4:a3:93:ef:d5:8d:6a:40:7a:56:b9:f3:c0:26:
77:d2:6d:5b:09:d4:e3:0c:10:f1:b4:b6:e0:69:a3:
66:95:6b:68:f7:f0:32:f4:f8:7a:b8:69:42:6f:31:
b3:52:b7:89:d7:55:19:34:42:79:2c:dd:8d:9b:eb:
59:a2:b7:11:d7:8c:ab:f1:0f:5d:c5:d6:96:37:95:
11:eb:2a:2e:78:e7:07:a5:88:d2:fa:46:bf:0b:8b:
6e:59:9a:c9:96:24:dd:94:ca:b6:0c:d2:4a:37:3c:
0a:ac:6e:9e:73:c2:92:ec:83:3e:0c:ec:02:5a:e9:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E0:BA:D5:9D:5C:7C:C3:0A:ED:D3:17:34:86:B1:83:57:41:3E:3B
X509v3 Authority Key Identifier:
keyid:87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33342e302f32342d3234203d3e203234353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e4:2f:70:ae:47:ef:5c:17:f8:c7:68:5b:7f:92:93:47:14:
80:fd:a1:44:b8:ac:68:65:0f:a2:f4:28:67:c7:20:06:b8:a9:
c8:df:bd:c8:7f:d2:7d:b4:3e:0e:60:de:78:ea:78:a0:e6:74:
da:2e:aa:e3:cd:5d:40:d1:d6:08:d7:69:02:dc:97:57:c6:37:
08:eb:36:66:90:70:38:16:85:91:ed:86:ca:6f:ef:e2:7d:72:
a1:f0:3e:56:a9:e7:c5:f5:90:f5:85:c1:f6:5c:af:28:99:07:
01:70:fc:19:e4:9c:f6:2c:cb:17:f3:87:96:69:fa:24:67:df:
d4:53:9a:b7:82:5f:e7:db:f7:d5:c7:73:0a:3f:e5:3c:90:15:
d3:0a:08:bf:f0:73:8f:4d:87:cd:1e:89:89:9c:bd:bd:eb:dc:
5e:86:39:51:9f:d8:30:d7:47:48:88:56:06:be:df:50:15:32:
0a:35:e1:b4:22:25:07:77:9d:d2:96:05:b8:d1:da:1a:6d:1b:
57:fd:96:32:cf:71:b0:04:36:83:c8:4a:93:01:10:b9:05:94:
3d:0e:f6:e5:84:5a:2e:ed:bb:f0:89:63:eb:0a:58:17:5b:40:
ef:23:83:55:74:95:ba:71:8d:3c:db:65:86:7e:52:d2:64:c4:
43:d4:b5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:35 2026 by rpki-client