
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: Zi1JkNnukyu3fNkoRJBRJ20pTF29kglTiRqMT61/Kuc=
Subject key identifier: 07:03:72:EA:1E:F3:80:AD:CB:FD:0C:79:B0:6E:52:D1:8F:77:C6:30
Certificate issuer: /CN=CFAB76BA352A38D20728AC2158C798F4B46EB514
Certificate serial: 57ADC85AE416C50D3D8EA9A44E3AE6A12CFBDA41
Authority key identifier: CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa
Signing time: Sun 03 May 2026 02:43:42 +0000
ROA not before: Sun 03 May 2026 02:38:42 +0000
ROA not after: Sun 02 May 2027 02:43:42 +0000
asID: 135478
IP address blocks: 103.129.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl
rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ad:c8:5a:e4:16:c5:0d:3d:8e:a9:a4:4e:3a:e6:a1:2c:fb:da:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFAB76BA352A38D20728AC2158C798F4B46EB514
Validity
Not Before: May 3 02:38:42 2026 GMT
Not After : May 2 02:43:42 2027 GMT
Subject: CN=070372EA1EF380ADCBFD0C79B06E52D18F77C630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:41:de:42:a4:57:f2:04:a9:67:17:22:4b:59:
f3:d7:49:2c:b6:96:1c:43:09:f8:28:63:6f:3e:61:
cf:e4:67:08:a7:24:4b:59:39:c8:35:2b:4f:6b:4f:
6a:83:26:95:77:43:9f:ce:c6:bd:bc:f0:3e:6c:33:
f8:45:8d:d7:33:af:8b:ab:33:c4:01:72:eb:82:f7:
16:fe:82:92:cb:18:93:e0:fb:e5:88:e7:fd:cd:7b:
e0:88:6e:c3:dd:e7:77:c7:c1:b7:2b:3a:69:3e:53:
e2:75:63:fc:53:19:dc:6b:51:81:b9:e3:1a:ad:1b:
c3:c4:c5:e9:ee:3f:cd:e5:d6:a4:42:be:e3:cc:68:
39:cb:8f:04:4c:f2:26:4b:83:62:76:ad:66:ce:a4:
be:db:2c:f7:de:f9:38:f9:8a:de:f6:5e:db:92:32:
41:3b:80:98:52:fd:df:1f:e6:7f:cc:9b:52:39:bd:
9f:25:fc:29:9f:65:4a:cc:d4:03:f1:50:cd:6d:ea:
5e:db:2c:f7:8a:19:5d:d3:68:7b:6f:70:67:35:8b:
75:b7:65:d5:43:ef:a6:6d:f4:b7:33:6a:0a:f2:01:
cc:4d:24:d3:1f:b4:f9:8a:c3:61:fb:fa:17:28:0a:
fa:73:ed:c1:d5:f3:6a:ff:f4:2b:03:19:ad:6d:6e:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:03:72:EA:1E:F3:80:AD:CB:FD:0C:79:B0:6E:52:D1:8F:77:C6:30
X509v3 Authority Key Identifier:
keyid:CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.129.20.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:e2:3e:08:c9:9d:02:d8:a6:6d:71:f7:f1:55:e0:8d:ad:11:
5e:57:02:69:7a:81:10:97:da:6b:ce:4d:c7:2f:6e:20:db:92:
c1:39:65:64:7e:64:9e:e3:2c:d0:75:2f:e1:69:6f:eb:95:8e:
2e:80:8b:13:53:be:e6:31:98:17:7b:ab:46:9d:b5:3b:8b:3b:
05:8c:c3:eb:2f:76:6a:da:62:62:fe:09:5e:39:67:fa:cd:45:
9b:b4:2c:24:57:47:7b:94:0a:d1:34:8b:44:60:9e:f0:cb:1f:
f9:f7:b5:cb:4d:91:7c:ec:f3:a5:2d:1c:8b:8e:d6:ae:de:ed:
56:b4:a9:15:12:a7:e8:4e:d1:88:51:db:1d:b2:c6:e0:b9:ce:
12:bd:78:33:bf:2d:35:3d:62:37:a8:ae:44:9f:49:40:ba:ec:
59:87:50:97:44:09:50:c2:4d:c1:e6:29:c0:d7:a5:7e:50:08:
ca:10:b4:5b:83:3d:75:1c:e4:bd:47:44:90:4b:3d:10:ab:4c:
b7:96:00:52:2a:b5:66:2b:5b:87:96:60:43:e5:14:27:ca:15:
e2:9a:98:03:c9:6e:f0:80:03:d2:58:92:c7:51:22:ca:f0:de:
38:ad:3e:1d:dc:3b:cb:e9:ec:a8:6a:87:76:25:64:57:f4:41:
2a:4c:aa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:50 2026 by rpki-client