
$ rpki-client -vvf rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa
File: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (raw, json)
Hash identifier: IZSn7ER9gKZENb7Yh0xyvq6Sz0bKmm3RwSLw7ctssto=
Subject key identifier: 15:C6:94:22:55:85:48:43:1B:5E:81:51:6F:52:0A:17:43:0B:3C:D8
Certificate issuer: /CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0
Certificate serial: 3823388F8CC7E8CBF4BB5402038A70EEEA00CCF3
Authority key identifier: C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa
Signing time: Sun 03 May 2026 02:43:37 +0000
ROA not before: Sun 03 May 2026 02:38:37 +0000
ROA not after: Sun 02 May 2027 02:43:37 +0000
asID: 149934
IP address blocks: 103.191.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl
rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:23:38:8f:8c:c7:e8:cb:f4:bb:54:02:03:8a:70:ee:ea:00:cc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0
Validity
Not Before: May 3 02:38:37 2026 GMT
Not After : May 2 02:43:37 2027 GMT
Subject: CN=15C69422558548431B5E81516F520A17430B3CD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:99:70:77:69:d7:17:e2:6d:3a:db:ed:8d:53:
98:e6:07:c3:bb:df:d3:19:7d:77:f8:dd:c7:8f:6a:
8d:3e:bc:22:c3:c4:14:89:28:ad:c5:b4:63:07:0b:
14:29:8a:1c:45:0a:07:f1:54:c7:7b:52:b8:06:1d:
e0:5b:30:71:33:b1:51:46:5b:47:d4:4e:b9:bf:eb:
c7:a1:d4:00:ed:2d:f7:fb:73:80:6d:d6:9a:62:d6:
0c:33:32:13:fa:45:66:cc:42:a3:a7:79:fe:08:be:
58:f7:ff:8c:f8:f5:96:c5:58:36:32:a0:fa:b7:40:
f3:45:dc:f6:f4:ae:96:c0:5d:93:32:f3:49:38:3d:
67:fc:94:0b:f2:39:f6:bf:95:19:7e:a5:cf:bd:02:
4b:41:16:3d:8b:cf:a4:c5:10:5f:cf:7a:4a:e9:a5:
2f:c2:79:8d:26:29:68:9a:6c:a0:38:6f:87:bf:8a:
9b:98:fd:ab:22:49:ad:d1:5f:9c:93:fe:44:6b:62:
ef:35:e3:76:d1:23:8d:3a:8e:f3:b5:41:ff:6c:19:
7c:42:0d:79:16:18:c3:74:2a:c5:d4:b8:65:23:94:
7c:ba:11:72:5e:e7:12:20:2f:d7:b5:c0:f3:6c:0a:
80:df:ff:17:f9:19:20:ea:e8:40:a0:56:47:d5:98:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C6:94:22:55:85:48:43:1B:5E:81:51:6F:52:0A:17:43:0B:3C:D8
X509v3 Authority Key Identifier:
keyid:C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.197.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9c:bf:b9:86:20:94:2e:50:5a:68:a9:c3:5d:ab:c4:7a:3b:
fc:d9:98:cd:ea:6c:13:be:fe:ad:a2:0a:b0:f1:e0:a5:f0:fb:
0b:36:29:18:a9:b6:5e:01:ac:ef:46:7d:5c:70:01:b0:58:a9:
ab:b2:a0:01:55:e5:f2:8d:e8:61:31:14:0d:67:48:ef:f9:2e:
89:e8:96:45:7e:0d:66:de:5d:5c:f2:3b:6a:28:57:b1:67:10:
2a:5e:ed:17:6f:3e:5e:c5:85:de:10:e0:8c:12:8a:dc:8c:80:
f6:09:9d:f9:7c:e0:fc:13:36:14:b1:1e:53:0b:58:cd:8b:a5:
63:0e:1d:b7:cd:ab:80:ec:93:11:38:b9:68:b6:e1:6f:40:a6:
e0:a5:de:da:e6:c1:f7:f0:e4:ad:ba:62:51:71:2b:48:4c:20:
36:10:40:06:e5:14:08:55:1b:2a:d0:ad:ea:ca:77:78:fe:93:
bc:23:f0:ce:b2:7b:0f:a8:01:15:f8:b4:5e:b7:c9:cf:75:01:
59:e0:0a:1a:95:c8:95:38:7a:5e:00:a5:b5:11:1d:5b:4b:7e:
6d:f7:43:76:b7:62:57:ab:32:09:03:f1:db:c9:8f:72:2f:a4:
3e:84:ba:8e:aa:3a:4c:49:1c:9c:f9:c7:a0:59:52:30:e5:df:
52:67:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:55 2026 by rpki-client