
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130362e302f32342d3234203d3e2039323531.roa
File: 3130332e3235332e3130362e302f32342d3234203d3e2039323531.roa (raw, json)
Hash identifier: 2oAylNBJ4zuj1Ef+Gz6gFAlUmkrG4+gv4KVtTeu2j88=
Subject key identifier: 01:E1:36:AC:F3:9E:40:23:7C:39:FC:3C:B7:AF:3D:AC:CE:1B:D2:88
Certificate issuer: /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial: 465F07151C68F7F0BDEF2BD295B8D631555661BD
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130362e302f32342d3234203d3e2039323531.roa
Signing time: Sun 03 May 2026 02:39:48 +0000
ROA not before: Sun 03 May 2026 02:34:48 +0000
ROA not after: Sun 02 May 2027 02:39:48 +0000
asID: 9251
IP address blocks: 103.253.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:5f:07:15:1c:68:f7:f0:bd:ef:2b:d2:95:b8:d6:31:55:56:61:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Validity
Not Before: May 3 02:34:48 2026 GMT
Not After : May 2 02:39:48 2027 GMT
Subject: CN=01E136ACF39E40237C39FC3CB7AF3DACCE1BD288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:d6:66:78:16:dc:5a:77:4d:1a:2c:58:e6:
97:de:73:65:98:23:af:7a:d2:9f:8a:e4:19:e8:80:
09:b5:65:25:d6:9e:e8:9f:a9:64:b4:bd:6a:3b:8f:
a8:b0:b8:bd:2d:f5:b3:3c:10:c9:b0:17:20:10:b8:
8b:74:e9:49:9b:36:63:6e:f6:49:37:e6:d6:4c:b9:
6a:4f:90:2a:b9:96:57:42:6f:7e:eb:36:40:5f:a0:
7e:31:a5:52:45:8c:cb:50:5f:fc:4c:9f:90:a2:cd:
3a:03:db:f9:6d:e6:c5:15:3c:a1:12:23:06:76:8e:
f8:c7:2c:b0:c7:9e:9c:41:8f:16:d3:88:cf:69:7a:
c4:81:4f:9f:1d:56:d9:e3:fd:22:13:57:67:b1:b1:
91:2a:61:04:03:a6:ac:69:d4:4e:61:6d:d2:91:bf:
9c:19:fe:ce:e6:f7:9e:8f:29:97:30:d4:21:b9:08:
45:77:05:76:d8:49:16:a4:89:e8:50:05:0d:0b:c3:
d3:18:99:7c:fe:c2:37:7b:93:fa:77:b8:f3:c6:86:
51:54:d9:34:3d:7e:ca:ee:f5:03:45:2f:1b:6b:f0:
a4:f3:17:7d:d3:72:2a:7d:76:e2:92:99:c0:fc:47:
ab:33:10:6c:9a:8f:6a:db:3a:20:a1:bf:ce:c3:9f:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E1:36:AC:F3:9E:40:23:7C:39:FC:3C:B7:AF:3D:AC:CE:1B:D2:88
X509v3 Authority Key Identifier:
keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130362e302f32342d3234203d3e2039323531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.253.106.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9e:aa:17:eb:1f:74:94:38:b5:ab:35:cd:50:08:e7:c1:b0:
e8:c5:96:0c:4c:b1:c6:23:e8:51:65:b0:f2:16:37:9e:64:aa:
a4:59:4b:26:a2:35:07:8a:c4:23:a0:94:aa:5d:84:e6:6f:66:
b5:22:a1:9d:88:4d:e6:21:6f:df:fb:05:56:01:14:87:2e:67:
85:27:cd:04:6e:1d:13:d3:9d:1e:55:87:9f:a6:94:10:74:89:
94:c3:76:83:9d:de:f9:cc:5b:fe:03:0c:1a:31:51:ff:d3:f6:
4c:eb:7e:7b:19:57:61:06:04:ac:25:eb:32:50:c4:64:99:0a:
34:3c:b6:b1:2f:7d:da:f3:51:c9:5a:5d:2b:58:50:d8:d5:d8:
90:83:f9:ee:05:43:87:13:14:08:6e:be:61:e5:f9:e9:78:52:
da:5f:0e:a2:f9:d6:ae:3c:1a:a2:43:9c:8d:8b:55:77:cd:a0:
7b:92:8f:81:5c:8f:86:75:6f:35:0c:24:98:e5:44:74:38:56:
c0:93:eb:0e:c8:ad:46:e3:81:46:bb:14:5c:43:71:63:01:f0:
86:26:56:80:50:64:b2:ef:e7:b2:eb:1c:ed:4e:1b:04:94:ad:
f2:7c:41:0d:84:5d:95:b0:8b:7e:ee:7a:82:ff:cd:8b:1a:36:
df:5f:5b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:08 2026 by rpki-client