
$ rpki-client -vvf rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa
File: 3130332e33302e302e302f32322d3234203d3e20313331373738.roa (raw, json)
Hash identifier: MWGMyGsif1qG/JrFen/swi1iMUWK7kAxIalVFfa1ZhI=
Subject key identifier: 3B:3E:70:CD:C3:8B:1B:B3:0D:55:16:F3:6D:96:98:C9:0C:E8:FD:FA
Certificate issuer: /CN=03B83E011591057E9C55D430A83D331349B52D74
Certificate serial: 5FEFEA03154D3F4132D1912FE3E63354092493CD
Authority key identifier: 03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa
Signing time: Sun 03 May 2026 02:40:16 +0000
ROA not before: Sun 03 May 2026 02:35:16 +0000
ROA not after: Sun 02 May 2027 02:40:16 +0000
asID: 131778
IP address blocks: 103.30.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.crl
rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ef:ea:03:15:4d:3f:41:32:d1:91:2f:e3:e6:33:54:09:24:93:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03B83E011591057E9C55D430A83D331349B52D74
Validity
Not Before: May 3 02:35:16 2026 GMT
Not After : May 2 02:40:16 2027 GMT
Subject: CN=3B3E70CDC38B1BB30D5516F36D9698C90CE8FDFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:be:63:bb:35:1e:99:b6:2f:03:50:48:75:
02:f3:56:40:5c:0d:2f:d1:f8:98:e6:9e:ff:5c:c0:
23:b3:37:31:77:85:29:73:17:9b:22:79:eb:62:d1:
9a:c8:a3:c5:65:8e:0a:30:6e:b9:af:4a:e3:ea:6c:
cb:31:a4:e4:c3:20:33:b6:02:0b:49:99:89:cf:8b:
97:54:f3:9b:2b:ae:2a:85:05:c8:67:99:e4:f2:f9:
22:81:80:d1:46:21:b8:b6:71:06:5f:52:13:ba:a4:
45:fd:42:58:45:4c:d3:e9:eb:67:c3:fb:a7:39:69:
9b:af:82:15:9e:cd:4d:5e:c6:25:d0:8d:88:a7:5e:
f2:21:e0:99:41:d1:e4:cf:55:c7:bf:c8:ba:0b:1b:
b8:0b:da:1e:93:68:32:ab:53:41:dc:ad:9d:71:13:
12:fd:80:7f:1d:36:28:a3:e2:9c:c3:99:4f:2c:14:
cf:02:f8:58:46:c1:26:39:6c:c3:11:cf:0d:37:a1:
4a:4c:04:d9:65:ab:ab:4b:5f:14:10:f6:e9:c3:a8:
ef:5c:6b:5f:fe:05:18:c9:1b:a9:b6:ce:92:da:6b:
6d:b6:e6:30:7c:8c:a2:67:fe:f5:f6:6b:c4:d8:ca:
e6:de:b3:a4:9a:b2:9f:96:f8:09:2e:dc:02:01:f7:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3E:70:CD:C3:8B:1B:B3:0D:55:16:F3:6D:96:98:C9:0C:E8:FD:FA
X509v3 Authority Key Identifier:
keyid:03:B8:3E:01:15:91:05:7E:9C:55:D4:30:A8:3D:33:13:49:B5:2D:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/03B83E011591057E9C55D430A83D331349B52D74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B83E011591057E9C55D430A83D331349B52D74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.30.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:9a:7b:5e:33:a1:58:81:03:01:4c:6d:a3:70:89:36:23:bc:
ba:b8:c1:3e:b8:32:62:44:ca:05:1f:bb:39:c8:70:a1:7b:4d:
86:67:d7:7b:ab:12:57:a2:77:82:2b:ba:82:85:2e:9f:5b:f9:
03:e5:6c:cb:28:05:31:3c:38:f0:1a:b0:f4:a9:1b:ef:b3:a6:
77:7a:ee:5e:51:19:0d:8f:7d:6a:03:63:7d:d2:ad:a5:38:1e:
f0:6d:bc:6f:7c:f3:96:3e:bc:7d:fc:aa:ce:98:8b:04:eb:2c:
43:53:28:5f:2e:1e:f5:3c:b5:bc:bf:67:74:25:7b:c7:7f:b0:
bb:e4:9c:56:65:46:48:e2:5e:fe:7a:1a:ea:36:fd:29:6c:c6:
3e:ec:2e:51:9d:0c:27:58:a4:fb:02:e9:40:40:ca:3e:47:2e:
de:55:54:cd:cb:ff:78:7b:35:e8:b4:4e:86:55:95:18:49:12:
28:f7:82:54:1a:a5:28:49:88:1e:ad:fe:83:23:1d:72:b1:be:
0c:40:ba:08:54:67:62:a8:b1:8e:4e:07:cd:fd:74:26:57:3b:
0a:0d:c2:a3:5d:4a:28:c6:d4:a4:0c:6b:a1:55:15:6e:44:31:
98:83:fc:8a:6d:8c:a8:9a:2e:c4:b5:0b:87:66:c6:80:6f:ba:
e1:6e:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:10 2026 by rpki-client