
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa
File: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier: Y8970f4i5rHjVl4BWleFzqBrlQQgV35ntejpqxdnCiA=
Subject key identifier: E6:29:A8:EC:31:3A:2C:FC:65:A0:B9:34:20:72:11:6D:83:B2:5D:4D
Certificate issuer: /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial: 13EF73F455748481C3906E60AC5ED08B2723DAA9
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa
Signing time: Sun 03 May 2026 02:41:05 +0000
ROA not before: Sun 03 May 2026 02:36:05 +0000
ROA not after: Sun 02 May 2027 02:41:05 +0000
asID: 38515
IP address blocks: 103.107.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ef:73:f4:55:74:84:81:c3:90:6e:60:ac:5e:d0:8b:27:23:da:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
Validity
Not Before: May 3 02:36:05 2026 GMT
Not After : May 2 02:41:05 2027 GMT
Subject: CN=E629A8EC313A2CFC65A0B9342072116D83B25D4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8b:66:33:7e:70:23:61:fc:73:e1:85:70:15:
01:fb:b2:be:88:2f:4c:35:04:0b:b6:42:80:be:15:
5a:27:e5:84:64:01:9e:af:f6:05:c5:6b:4b:31:20:
86:58:e7:c9:8d:ee:c3:53:f7:13:0e:19:26:58:bb:
c8:6a:03:e4:fc:77:8b:71:22:c1:47:78:77:20:f2:
95:c5:7a:56:b3:81:ef:8e:62:fa:db:e0:9b:ea:8f:
67:1a:12:7a:53:7b:50:0b:58:0c:7b:9a:23:2d:57:
56:0b:40:0e:9c:da:25:6b:14:02:cf:d6:52:01:9b:
8c:e3:fc:bf:c8:7c:c5:7a:07:ff:45:df:39:44:53:
f1:4e:0d:49:ff:c4:0d:03:91:81:57:a8:d9:80:4d:
16:78:a3:41:3e:c2:e0:8c:03:14:4c:db:f9:77:0c:
24:36:bf:40:2b:e9:72:5a:4d:d7:68:14:47:34:3f:
54:a6:c3:81:dc:2c:25:88:03:5e:78:42:3e:7c:b7:
a7:bb:0e:05:e6:36:dc:2c:17:81:9b:e6:b1:5f:f8:
cc:b1:de:71:8f:b5:9f:c4:f7:42:ac:2a:fa:37:47:
15:4f:b8:d6:34:60:f7:b8:ef:ec:c5:f4:52:52:7b:
46:e9:aa:3e:e6:7c:3f:d2:67:f9:85:de:d1:b5:89:
7b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:29:A8:EC:31:3A:2C:FC:65:A0:B9:34:20:72:11:6D:83:B2:5D:4D
X509v3 Authority Key Identifier:
keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.249.0/24
Signature Algorithm: sha256WithRSAEncryption
40:7a:7c:68:16:ea:01:65:0c:71:23:f7:13:09:58:0d:70:ca:
8e:56:f1:28:12:38:e8:d8:a7:1d:03:41:0b:9c:b7:22:ca:5c:
7a:bb:91:41:f7:b1:e9:62:4d:0e:c3:e3:85:f5:de:b5:9c:8f:
f9:75:76:09:80:28:ff:fd:30:36:77:13:9f:0a:29:d9:4f:ab:
90:33:08:47:66:b7:fc:cd:4a:c1:ac:f8:fa:60:dc:9b:d0:cf:
d4:e7:7f:a8:46:75:74:02:cc:a8:ce:9c:b2:81:32:08:3e:5b:
15:9c:c9:ff:cd:9d:3f:ad:7b:a5:98:e9:14:ad:53:7d:ea:ba:
aa:e0:35:b8:48:78:4d:5c:32:99:a5:e2:42:a8:58:cd:f1:a8:
89:c5:b1:77:7f:fc:91:02:08:7b:9d:62:cf:55:e2:31:6c:30:
a2:74:56:e7:32:54:ff:1a:3c:a7:1a:8e:8f:32:38:22:1f:41:
68:b8:ca:4d:57:8e:af:17:3d:79:72:aa:82:78:5f:e6:94:cc:
92:fc:69:42:c3:01:11:1f:c3:b2:55:9b:29:4e:43:f7:39:d5:
d3:7a:49:94:40:e1:ec:20:a4:ab:eb:ad:28:06:37:a2:1a:33:
16:7a:06:c4:2e:17:41:41:49:7b:01:16:c2:62:95:35:1a:38:
b6:b8:9b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:19 2026 by rpki-client