
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa
File: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (raw, json)
Hash identifier: SLlp2TgUJDxKzIChZFNu8nUMQolYFP9BFrEaRb9z5dQ=
Subject key identifier: 05:29:17:72:06:50:75:CE:05:BD:69:A4:9A:D0:63:27:7F:88:B2:E1
Certificate issuer: /CN=6392804C8E02387641837CC130058F05667A805F
Certificate serial: 5BDB6FD9EF33AB00EDD3F759E075F78120F0BE0B
Authority key identifier: 63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa
Signing time: Sun 03 May 2026 02:43:47 +0000
ROA not before: Sun 03 May 2026 02:38:47 +0000
ROA not after: Sun 02 May 2027 02:43:47 +0000
asID: 138062
IP address blocks: 103.129.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl
rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:db:6f:d9:ef:33:ab:00:ed:d3:f7:59:e0:75:f7:81:20:f0:be:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6392804C8E02387641837CC130058F05667A805F
Validity
Not Before: May 3 02:38:47 2026 GMT
Not After : May 2 02:43:47 2027 GMT
Subject: CN=05291772065075CE05BD69A49AD063277F88B2E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:9f:22:8d:ff:7c:44:12:dd:d3:7d:2c:ac:
5d:aa:bf:6d:99:c4:d0:6e:b5:c6:de:7c:24:ad:fc:
89:2b:91:dc:bd:18:e9:2b:90:c8:f2:5e:a6:52:f7:
fa:38:86:46:52:6c:c4:83:3e:0f:28:36:19:7b:dd:
09:b5:f1:1b:d1:c9:26:38:ad:cc:b5:81:ad:a4:eb:
ef:b6:eb:5e:fa:43:cf:23:14:48:91:b8:d1:84:6d:
8e:d0:29:cc:04:97:bf:29:f0:92:c2:cf:76:34:91:
42:9a:3a:72:2d:df:d7:51:a6:9f:8e:2d:25:1b:cd:
5c:30:a5:dd:16:2c:11:87:c1:c2:a6:39:1c:94:88:
96:7a:79:01:92:48:0f:56:4b:f7:1a:a2:80:3c:0c:
81:95:29:0d:7c:74:61:18:e0:58:5e:9e:3a:17:f6:
01:5f:87:56:74:a5:9e:b8:3b:45:92:54:07:8c:38:
cb:bd:1e:a3:1b:29:5e:a1:9e:bf:43:7d:1e:ea:44:
df:84:5b:f0:f9:97:6c:cf:e8:32:c7:ff:c9:fb:08:
43:60:29:8d:87:7f:ac:76:b1:d4:27:b1:90:85:ec:
8b:99:59:06:1c:79:cb:4a:07:48:fe:fd:a6:19:eb:
37:57:6e:b8:a4:b0:b9:63:1a:ca:8c:b0:81:00:89:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:29:17:72:06:50:75:CE:05:BD:69:A4:9A:D0:63:27:7F:88:B2:E1
X509v3 Authority Key Identifier:
keyid:63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.129.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:65:51:97:17:2f:f1:ae:66:a8:1e:ce:e8:b6:94:86:88:e0:
3b:79:89:ad:40:05:36:3e:8a:af:4c:52:b1:b6:23:2e:fe:7e:
8c:4c:21:e8:f5:78:4d:6b:9c:82:4d:62:6a:f6:b0:43:c7:94:
71:2f:db:f0:b4:eb:a3:34:39:c9:0d:be:c7:ba:ab:55:58:36:
5a:54:b7:ae:f8:6d:bb:32:fe:8f:9e:9c:ea:88:e8:54:54:21:
58:49:18:01:0b:55:42:12:0d:b5:33:28:13:7d:07:08:9d:3a:
d6:f9:09:2f:b2:a5:ea:a7:65:69:55:f5:d2:9e:30:84:27:d2:
7b:69:cd:0a:5d:fc:e1:13:e8:7d:10:7e:df:0b:86:c5:d9:c8:
94:14:bb:96:12:d3:32:5f:38:82:d1:13:93:8d:a8:47:61:ed:
cb:ea:51:f6:0a:e3:4d:bf:98:d4:94:f6:8d:74:a7:c4:03:37:
23:11:4d:45:fc:a8:92:73:b6:98:87:92:a6:24:65:31:74:26:
fb:21:6d:e5:81:45:c2:08:bb:10:6d:61:39:57:65:43:0d:4c:
58:53:21:3f:cb:04:ce:6a:95:60:bf:db:f9:f0:d4:51:49:7e:
7a:f6:3a:d5:88:fd:24:46:6d:3c:cc:1e:0a:f4:65:61:a1:8d:
ee:76:22:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:53 2026 by rpki-client