
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa
File: 3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (raw, json)
Hash identifier: 67tLYB0A33fJCbu/P8oKthW+WxAqMc2wdryTZw9cK1c=
Subject key identifier: AF:44:9C:4F:B6:43:85:70:37:58:FB:DC:52:C5:97:F3:0D:CC:F5:B6
Certificate issuer: /CN=7FAE1489FF53B0236543706FB85A70734890458C
Certificate serial: 4A70B3064CB761A9F6F73C8810C78117900191FD
Authority key identifier: 7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa
Signing time: Sun 03 May 2026 02:41:11 +0000
ROA not before: Sun 03 May 2026 02:36:11 +0000
ROA not after: Sun 02 May 2027 02:41:11 +0000
asID: 150934
IP address blocks: 103.109.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl
rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:70:b3:06:4c:b7:61:a9:f6:f7:3c:88:10:c7:81:17:90:01:91:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FAE1489FF53B0236543706FB85A70734890458C
Validity
Not Before: May 3 02:36:11 2026 GMT
Not After : May 2 02:41:11 2027 GMT
Subject: CN=AF449C4FB64385703758FBDC52C597F30DCCF5B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:52:33:fb:03:b4:d8:6e:1f:75:f6:4c:0a:
98:3e:44:86:91:77:42:b8:a2:4e:0d:cb:c2:b6:7f:
87:ef:b6:21:76:c1:49:3a:07:bc:c0:9a:65:01:c1:
08:10:14:03:fb:45:25:65:31:9c:cc:0d:71:be:3b:
d9:16:7e:be:63:45:1b:fe:65:ab:95:2c:ee:45:72:
25:62:7f:53:56:48:47:14:20:2c:d6:5e:74:12:d0:
1c:cd:a7:04:d5:3f:80:b7:5c:8a:05:5f:75:5e:da:
c1:0c:78:8b:8c:fc:03:2f:56:7d:0e:19:33:4e:35:
86:ce:5b:4e:32:17:20:0d:b3:2f:46:5a:86:a0:f3:
ce:88:4c:fc:76:66:99:93:79:86:2e:ee:d2:47:22:
23:07:26:99:eb:9b:d8:57:87:9b:d5:71:ae:f8:0c:
8c:d3:6d:1b:84:38:5c:63:b7:ab:fb:52:6c:b0:6a:
f0:e5:db:a2:50:ac:66:94:01:b1:6a:d1:bc:b9:a8:
28:f4:03:5a:02:68:30:05:3d:4f:fb:2b:67:48:52:
90:78:86:c9:27:75:b9:c2:64:c3:ba:6b:44:95:48:
4b:15:62:0f:59:17:09:86:bd:73:a6:32:83:ad:95:
d9:6a:c3:cb:66:23:00:e1:97:fe:19:07:6c:c5:17:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:9C:4F:B6:43:85:70:37:58:FB:DC:52:C5:97:F3:0D:CC:F5:B6
X509v3 Authority Key Identifier:
keyid:7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.109.204.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:57:84:ed:25:7b:a6:f0:ee:76:a9:8b:13:41:80:03:bf:46:
8e:90:67:6c:e8:a1:ef:f8:d0:04:56:ef:e9:b3:e2:60:27:ff:
37:a0:3d:39:e8:94:80:7e:dc:24:82:a9:b9:b3:3b:f4:2c:4b:
8e:4b:93:aa:52:6a:5d:3b:64:aa:95:06:6c:91:7f:a3:d0:2c:
1d:55:d8:a7:35:6d:d0:6a:05:7a:86:57:bc:e2:89:24:c5:c6:
8c:47:8a:6e:f0:2e:c4:6e:bd:d2:bc:2b:b0:49:76:cc:90:d3:
fa:e3:71:7e:70:94:3c:40:01:13:d3:bb:54:d1:af:e5:b2:eb:
7f:15:60:87:49:89:31:a0:74:8f:1e:2b:99:a9:4f:86:f0:b4:
b3:8b:ca:db:01:11:6b:d4:4c:73:ff:41:2e:a3:2b:f2:01:35:
f2:e7:f2:1b:9d:60:81:02:e1:7c:fe:f4:0d:e2:12:47:ae:35:
e5:12:b6:d9:36:7b:e7:fe:05:9c:29:c5:f5:78:bc:7f:d5:20:
36:eb:2c:03:a9:dd:3b:dd:f8:5c:7e:c0:f2:ec:eb:58:4a:6f:
23:d6:b4:da:85:60:4c:02:e2:36:01:23:59:21:58:12:6f:c7:
ef:1b:18:37:fe:40:cf:d2:52:dd:ed:b6:4f:93:05:7b:79:01:
2e:bc:48:21
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUSnCzBky3Yan29zyIEMeBF5ABkf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZBRTE0ODlGRjUzQjAyMzY1NDM3MDZGQjg1QTcwNzM0
ODkwNDU4QzAeFw0yNjA1MDMwMjM2MTFaFw0yNzA1MDIwMjQxMTFaMDMxMTAvBgNV
BAMTKEFGNDQ5QzRGQjY0Mzg1NzAzNzU4RkJEQzUyQzU5N0YzMERDQ0Y1QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmk1Iz+wO02G4fdfZMCpg+RIaR
d0K4ok4Ny8K2f4fvtiF2wUk6B7zAmmUBwQgQFAP7RSVlMZzMDXG+O9kWfr5jRRv+
ZauVLO5FciVif1NWSEcUICzWXnQS0BzNpwTVP4C3XIoFX3Ve2sEMeIuM/AMvVn0O
GTNONYbOW04yFyANsy9GWoag886ITPx2ZpmTeYYu7tJHIiMHJpnrm9hXh5vVca74
DIzTbRuEOFxjt6v7UmywavDl26JQrGaUAbFq0by5qCj0A1oCaDAFPU/7K2dIUpB4
hskndbnCZMO6a0SVSEsVYg9ZFwmGvXOmMoOtldlqw8tmIwDhl/4ZB2zFF6NhAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUr0ScT7ZDhXA3WPvcUsWX8w3M9bYwHwYDVR0j
BBgwFoAUf64Uif9TsCNlQ3BvuFpwc0iQRYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmM0ZTE2NjktNjhmNy00YTM5LWFjYzAtNTdjNzE4N2I2Y2I3LzAvN0ZBRTE0ODlG
RjUzQjAyMzY1NDM3MDZGQjg1QTcwNzM0ODkwNDU4Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83RkFFMTQ4OUZGNTNCMDIzNjU0MzcwNkZCODVBNzA3MzQ4OTA0
NThDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjNGUxNjY5LTY4ZjctNGEzOS1h
Y2MwLTU3YzcxODdiNmNiNy8wLzMxMzAzMzJlMzEzMDM5MmUzMjMwMzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzAzOTMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnbcwwDQYJ
KoZIhvcNAQELBQADggEBAF1XhO0le6bw7napixNBgAO/Ro6QZ2zooe/40ARW7+mz
4mAn/zegPTnolIB+3CSCqbmzO/QsS45Lk6pSal07ZKqVBmyRf6PQLB1V2Kc1bdBq
BXqGV7ziiSTFxoxHim7wLsRuvdK8K7BJdsyQ0/rjcX5wlDxAARPTu1TRr+Wy638V
YIdJiTGgdI8eK5mpT4bwtLOLytsBEWvUTHP/QS6jK/IBNfLn8hudYIEC4Xz+9A3i
EkeuNeUSttk2e+f+BZwpxfV4vH/VIDbrLAOp3Tvd+Fx+wPLs61hKbyPWtNqFYEwC
4jYBI1khWBJvx+8bGDf+QM/SUt3ttk+TBXt5AS68SCE=
-----END CERTIFICATE-----
Generated at Wed May 13 07:46:36 2026 by rpki-client