
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa
File: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (raw, json)
Hash identifier: XHc5XJ3BNfkaI/lsgwiIo3VZ/lOhS7oABSPc/TOM6ZY=
Subject key identifier: E1:BD:95:58:B2:1E:04:A2:ED:33:AD:3D:96:11:BA:94:15:A3:93:65
Certificate issuer: /CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Certificate serial: 7E8C6BF46F60B798DA16C1399FEFEF6F3AAE71DF
Authority key identifier: 9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa
Signing time: Sun 03 May 2026 02:42:39 +0000
ROA not before: Sun 03 May 2026 02:37:39 +0000
ROA not after: Sun 02 May 2027 02:42:39 +0000
asID: 140407
IP address blocks: 103.122.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8c:6b:f4:6f:60:b7:98:da:16:c1:39:9f:ef:ef:6f:3a:ae:71:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Validity
Not Before: May 3 02:37:39 2026 GMT
Not After : May 2 02:42:39 2027 GMT
Subject: CN=E1BD9558B21E04A2ED33AD3D9611BA9415A39365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:46:6d:fd:41:97:58:a9:09:20:e8:af:32:
13:86:10:38:a9:e1:1a:c9:7d:6c:11:21:14:58:2d:
1b:1b:f8:78:99:f2:33:7b:35:b5:40:a1:59:86:f6:
c3:4f:45:b8:93:0d:65:86:b1:52:b2:c3:c6:e5:f5:
12:74:84:36:e6:d2:bd:10:c5:d8:bf:35:7b:e2:2b:
3a:81:f7:52:3f:ed:0a:0f:e0:72:cb:f8:57:9a:41:
c6:74:1f:28:35:e1:03:7e:d5:6b:e8:98:46:f5:0d:
0f:75:50:e1:37:b6:cf:47:84:a5:66:1d:93:f3:a2:
54:27:6e:76:a1:88:29:e7:61:2d:c1:6c:b5:fd:8b:
a6:71:2b:69:27:ab:24:ba:de:04:31:84:ee:df:e1:
b9:bf:be:bc:9d:c4:0b:58:8c:9c:96:28:ab:b9:df:
e8:dd:de:22:1c:18:63:8a:fe:bc:4f:ac:81:05:a1:
fc:1d:fb:2d:35:43:bb:2f:3f:72:f9:06:d0:ed:fa:
11:b3:9d:0f:a2:f9:f7:c5:08:52:7f:76:3c:b4:52:
c6:b4:a2:74:23:0f:d3:23:59:fc:61:61:74:9a:34:
27:de:39:0c:a6:88:0d:37:1f:0d:1d:e6:3c:8d:15:
5e:8b:f5:2e:13:e7:6e:af:cd:80:24:06:5b:67:ea:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BD:95:58:B2:1E:04:A2:ED:33:AD:3D:96:11:BA:94:15:A3:93:65
X509v3 Authority Key Identifier:
keyid:9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.155.0/24
Signature Algorithm: sha256WithRSAEncryption
05:52:26:fe:2e:f7:e0:22:96:03:cf:ab:60:b3:53:40:b8:c4:
c9:a1:05:15:34:5d:d5:a7:53:68:8d:8c:d7:e4:49:e8:76:b8:
49:67:80:72:de:95:bd:d8:04:63:cd:6f:d1:ba:00:d2:00:46:
18:56:39:f2:84:9f:d5:93:55:aa:8d:42:4d:29:17:6d:69:39:
30:37:03:fb:71:ec:b5:5e:91:54:41:6a:a0:33:95:74:09:84:
f8:5e:16:1a:e2:67:cf:6a:db:66:89:56:9a:41:69:ba:0b:01:
a3:a6:91:12:ed:e7:3f:ae:e2:dd:df:e1:0f:11:16:e0:b2:3c:
73:39:ad:4c:89:bc:97:08:4f:a4:7d:2f:fe:e9:6f:fa:d0:3c:
5a:b4:12:5a:02:4e:a7:84:3f:c3:a2:d6:b6:8a:8c:8d:0d:41:
f8:a4:7b:f9:d0:e7:3e:ca:a3:d9:fc:1c:7b:c1:4c:50:2a:35:
5c:60:70:89:50:99:65:b0:63:70:e1:72:53:bc:1f:e4:84:e4:
cb:cc:bf:86:4f:3f:59:47:7a:20:40:3c:dd:4d:a3:65:da:38:
6d:75:62:39:05:c5:7b:8e:ad:84:fd:7a:a2:15:24:42:24:7e:
9f:0b:a4:05:9b:da:3a:3d:14:8b:26:6d:7a:91:7f:d9:cc:6e:
98:37:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:40 2026 by rpki-client