
$ rpki-client -vvf rpki-rsync.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa
File: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (raw, json)
Hash identifier: ZIFYerloNI/Q4/PzBf1mGH2q9ZQ6Jf0HOPek6QdENB0=
Subject key identifier: 33:AC:E7:9D:C0:CF:1B:31:A1:53:64:CB:EC:13:C2:06:83:90:97:BD
Certificate issuer: /CN=82B92CF9AA7A2D709B2CAF4F99D63923D1C171AF
Certificate serial: 8210072A5715295335DFBC82E6C5624D158742
Authority key identifier: 82:B9:2C:F9:AA:7A:2D:70:9B:2C:AF:4F:99:D6:39:23:D1:C1:71:AF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B92CF9AA7A2D709B2CAF4F99D63923D1C171AF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa
Signing time: Sun 03 May 2026 02:44:17 +0000
ROA not before: Sun 03 May 2026 02:39:17 +0000
ROA not after: Sun 02 May 2027 02:44:17 +0000
asID: 142398
IP address blocks: 103.172.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/82B92CF9AA7A2D709B2CAF4F99D63923D1C171AF.crl
rsync://rpki-rsync.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/82B92CF9AA7A2D709B2CAF4F99D63923D1C171AF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B92CF9AA7A2D709B2CAF4F99D63923D1C171AF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
82:10:07:2a:57:15:29:53:35:df:bc:82:e6:c5:62:4d:15:87:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82B92CF9AA7A2D709B2CAF4F99D63923D1C171AF
Validity
Not Before: May 3 02:39:17 2026 GMT
Not After : May 2 02:44:17 2027 GMT
Subject: CN=33ACE79DC0CF1B31A15364CBEC13C206839097BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:93:09:dd:af:2c:40:63:ee:32:58:2b:f0:
64:8d:a0:64:5f:35:a5:28:ad:47:19:14:0f:6d:03:
12:de:cf:3c:2c:40:cf:6f:93:4f:b1:8a:b5:8e:d6:
6b:5d:72:d5:b9:ad:a3:a2:e9:1d:9b:64:5d:38:30:
25:15:06:97:00:c7:bd:4d:10:b5:ce:0f:d9:ac:04:
bf:4d:e2:46:2c:f7:36:57:8f:33:2c:68:c8:9a:15:
1b:62:b8:ad:1c:93:fe:69:16:69:c4:6c:0d:f0:b2:
0e:c3:6d:93:c7:a7:e3:e4:8b:e2:f2:76:f7:c4:2e:
03:32:48:7b:d5:dc:40:fa:9a:e6:53:f1:92:3c:cf:
ee:24:f4:b0:26:0b:4e:ef:0f:c8:68:ef:ed:c2:4b:
0a:50:a8:46:4e:43:90:0c:63:f5:a2:51:85:d7:b3:
ea:69:40:8b:19:b3:e9:8d:2a:0f:78:be:d8:85:32:
21:b3:9c:cd:b5:0c:58:ef:b0:dc:8f:4e:b2:44:49:
cb:b1:c9:ed:d6:a1:e2:d7:ea:2d:15:a5:ab:2e:01:
e1:cc:15:eb:0c:ae:73:1c:e8:c1:4c:71:c2:5f:65:
ab:98:f9:b9:28:a7:15:e8:8d:80:06:ef:d3:fe:70:
ff:3e:0b:81:09:64:f2:c1:f9:99:05:ec:d6:e8:33:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:E7:9D:C0:CF:1B:31:A1:53:64:CB:EC:13:C2:06:83:90:97:BD
X509v3 Authority Key Identifier:
keyid:82:B9:2C:F9:AA:7A:2D:70:9B:2C:AF:4F:99:D6:39:23:D1:C1:71:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/82B92CF9AA7A2D709B2CAF4F99D63923D1C171AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B92CF9AA7A2D709B2CAF4F99D63923D1C171AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.120.0/23
Signature Algorithm: sha256WithRSAEncryption
85:7c:1d:4f:ce:9c:1e:7e:54:87:84:a5:1c:f6:fa:46:98:36:
ba:be:1f:22:3f:6c:72:ea:06:be:15:56:7a:50:48:da:04:44:
b7:33:22:82:93:16:d8:59:ef:40:63:5f:74:fa:f5:e8:2c:32:
70:32:e2:67:42:9b:a1:33:45:2e:37:29:46:32:ba:93:17:a2:
d1:fe:08:c3:f9:04:d3:db:44:f4:0f:2f:3c:61:13:8f:09:75:
b5:8a:69:ed:de:01:be:69:2f:21:ba:9c:57:59:a9:c8:20:ba:
5f:b3:9c:37:61:fc:cc:f7:82:a5:a0:fc:bd:f1:47:d0:2e:8c:
9d:1b:65:02:50:b9:54:66:c6:78:1d:d6:ce:ba:b5:ca:59:87:
65:96:7a:a1:19:8b:5d:52:43:62:6b:7c:1b:df:41:42:8c:ad:
19:e4:2e:4e:17:86:f7:06:0e:c9:a6:c5:fa:eb:f1:54:77:12:
69:07:df:05:50:90:66:6f:e1:f6:2e:2c:5c:ae:71:d1:59:a4:
05:53:97:6e:c2:96:bb:1a:92:ac:2d:78:00:36:e2:86:ad:cd:
6e:45:fe:77:3a:ad:f0:3f:91:2a:61:13:f5:1f:4d:4d:8f:ae:
4f:5a:2b:7b:5b:95:75:2a:a9:78:a0:2a:1c:dc:e1:be:29:c5:
52:1d:fe:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:43 2026 by rpki-client