
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa
File: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (raw, json)
Hash identifier: 92ZQT4r/M03zq1NAav7PDjyanG9ZRWjnE3cnJHsI4AU=
Subject key identifier: D5:1D:B8:86:11:9F:CF:23:C3:7C:0B:54:8C:20:DC:0A:ED:30:73:2A
Certificate issuer: /CN=FC1A394AF4972652D1A91AA14711525172E42585
Certificate serial: 44EA8958B1F65EF4996930F4CF54B27C753A1BA3
Authority key identifier: FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa
Signing time: Sun 03 May 2026 02:41:13 +0000
ROA not before: Sun 03 May 2026 02:36:13 +0000
ROA not after: Sun 02 May 2027 02:41:13 +0000
asID: 147105
IP address blocks: 103.174.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl
rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ea:89:58:b1:f6:5e:f4:99:69:30:f4:cf:54:b2:7c:75:3a:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC1A394AF4972652D1A91AA14711525172E42585
Validity
Not Before: May 3 02:36:13 2026 GMT
Not After : May 2 02:41:13 2027 GMT
Subject: CN=D51DB886119FCF23C37C0B548C20DC0AED30732A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:82:7e:d3:68:fe:2c:69:28:d8:c4:03:f5:fe:
57:eb:ab:76:72:42:b9:00:19:1d:5c:9d:eb:54:24:
40:56:89:fb:2d:21:7d:71:8e:ce:7d:00:de:56:e6:
d2:d7:82:a1:77:7c:27:87:93:6a:58:3f:70:9d:4e:
dd:a2:fa:64:69:7d:22:31:4b:50:20:7e:b1:45:55:
ab:d1:e1:b7:83:c3:37:12:1f:d5:8a:a2:1d:ff:b7:
75:8e:42:a1:3b:48:84:40:cc:62:bd:3b:ee:81:3b:
b6:4e:21:b7:eb:d3:c5:64:9d:44:89:57:10:15:25:
b6:4e:9c:a7:a9:3d:78:fe:1c:13:53:e0:dd:46:91:
b9:10:60:0b:64:46:6a:c5:67:e7:c4:48:84:3f:e6:
b4:37:e2:1b:a0:bc:8b:e7:cb:aa:53:6f:5a:e8:fe:
c2:ac:26:2d:4f:96:5b:ce:29:ff:40:eb:69:ac:cd:
51:f1:5a:cc:a9:99:05:79:0e:1c:e7:3d:4b:41:cd:
be:43:b5:6f:44:d1:d2:61:91:89:2b:ad:ae:69:cb:
59:46:f3:6e:0c:f4:9d:fb:93:f0:68:ca:0b:e1:96:
d1:28:65:cd:33:02:98:43:26:45:94:58:b0:7b:3a:
2c:29:61:1b:2a:51:08:8d:d3:fb:2d:1c:a1:fc:9b:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1D:B8:86:11:9F:CF:23:C3:7C:0B:54:8C:20:DC:0A:ED:30:73:2A
X509v3 Authority Key Identifier:
keyid:FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.232.0/23
Signature Algorithm: sha256WithRSAEncryption
56:2f:a4:5d:ae:b3:fe:29:83:52:64:0c:ae:07:80:b4:cd:7c:
87:4c:24:7f:48:ab:2e:bf:54:f2:ba:2e:f0:85:21:a6:77:e2:
06:f4:ed:61:85:b8:d0:55:6b:12:57:6a:d7:3a:67:50:07:3c:
8a:69:f8:81:61:b1:b7:c6:89:a0:ca:54:99:86:51:06:e5:0e:
5b:2c:8e:a8:d3:a0:73:f6:5f:65:7a:da:1c:85:09:9a:b0:fc:
ff:2a:0b:82:cb:98:b8:73:63:f0:e3:31:70:12:7c:86:e0:21:
3d:d9:32:50:6a:e9:79:63:d2:3f:df:93:3a:7d:0d:80:0a:52:
e1:6d:dd:e0:f3:ef:b2:89:ce:a8:7f:b2:b6:07:4c:45:fa:a1:
35:97:5e:3e:e8:81:d9:4e:b5:3a:05:a4:a4:c3:2c:80:de:16:
01:3c:9f:5b:72:92:72:79:86:3c:9a:5e:96:cb:a9:dd:ba:a9:
b7:09:f7:22:c9:3f:fe:a0:27:43:7d:05:4e:93:22:86:08:ce:
88:84:0b:98:3a:3d:42:c5:ec:a1:26:2e:1f:63:37:55:41:f8:
08:d4:e5:41:21:99:0c:da:cf:66:37:a9:1d:55:94:9a:9d:ec:
ba:cb:7d:97:a6:b4:dd:8c:d2:6c:77:f4:a5:1f:8d:b2:95:0a:
f8:27:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:37 2026 by rpki-client