
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/3130332e3134332e342e302f32342d3234203d3e20313339343034.roa
File: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (raw, json)
Hash identifier: trtJ6caoi9E2cPVadT/x0hsZneaEQLzf3GDB3mta1B8=
Subject key identifier: 66:9B:6A:15:40:1F:E5:22:8A:AB:28:07:98:DB:9C:5B:78:38:40:FB
Certificate issuer: /CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20
Certificate serial: 1B8F4D3186F5EFB401982323D0C90F4689410849
Authority key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/3130332e3134332e342e302f32342d3234203d3e20313339343034.roa
Signing time: Sun 03 May 2026 02:44:30 +0000
ROA not before: Sun 03 May 2026 02:39:30 +0000
ROA not after: Sun 02 May 2027 02:44:30 +0000
asID: 139404
IP address blocks: 103.143.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl
rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8f:4d:31:86:f5:ef:b4:01:98:23:23:d0:c9:0f:46:89:41:08:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20
Validity
Not Before: May 3 02:39:30 2026 GMT
Not After : May 2 02:44:30 2027 GMT
Subject: CN=669B6A15401FE5228AAB280798DB9C5B783840FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:6e:53:69:15:75:41:d7:9f:fd:4b:c5:b8:
3f:0f:fb:4c:6a:73:3d:b8:80:61:e7:c8:58:2d:e0:
e5:e9:ba:1d:2a:2d:19:e4:0a:5e:42:fd:33:45:92:
07:ed:41:64:18:c9:34:a5:cd:93:fa:5f:0f:4a:34:
6f:c7:ca:32:41:69:e9:22:29:04:b6:fa:a2:9a:37:
21:13:cc:ab:f3:e4:be:40:ee:ae:d1:3e:26:5b:c8:
ea:8e:e2:a9:10:f6:b0:19:bc:ed:22:4c:df:89:84:
f5:39:75:ce:62:58:26:c0:cc:32:70:30:3c:96:2c:
2e:b3:47:5a:03:95:d5:09:c5:78:7a:c0:44:1e:5b:
e4:53:9a:d7:7a:1c:2e:95:52:25:2d:87:79:b8:a6:
61:8a:04:b9:f2:45:7d:42:cc:c8:e3:45:29:10:dc:
f0:bf:49:d1:0a:24:c5:93:0b:5e:03:af:4b:59:d8:
38:c9:a4:2c:62:86:d0:b7:04:ad:f2:66:9f:e0:41:
c8:a8:57:d7:1d:da:24:07:2b:af:1c:9d:6a:65:3d:
db:db:35:12:3b:0c:a9:2b:f5:d1:04:74:74:d1:95:
9a:6b:3f:6b:e8:19:e0:7a:43:b0:10:87:df:aa:25:
98:e5:e2:e3:2f:28:10:c7:14:6b:92:e0:3c:91:e1:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9B:6A:15:40:1F:E5:22:8A:AB:28:07:98:DB:9C:5B:78:38:40:FB
X509v3 Authority Key Identifier:
keyid:C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/3130332e3134332e342e302f32342d3234203d3e20313339343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.4.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:d4:8c:31:41:c2:37:3e:65:09:ec:98:e6:4d:c9:94:1d:64:
9d:3d:d5:44:c0:eb:35:6c:a7:06:2a:0f:ee:a7:83:8a:6f:f2:
67:3e:39:20:c6:18:49:a5:10:2f:c5:61:f2:70:6a:e9:da:4e:
a7:49:90:18:c0:a1:a3:a8:e3:cd:fc:10:0f:3f:e4:60:6d:db:
31:03:71:92:a6:ff:4b:a8:94:6b:7b:a1:b1:a1:52:51:43:3c:
c9:a3:93:9c:94:35:4a:d0:5b:93:ef:75:bc:9d:f2:41:3f:c9:
23:d1:12:33:03:c2:f4:28:e8:ef:d1:18:ae:ff:f2:72:c5:3d:
7e:d1:b1:3e:76:cc:96:7e:d9:3c:b7:02:4a:01:09:40:80:74:
e0:b0:fd:fc:9a:15:14:96:ad:fc:bb:13:86:9e:ee:bf:ee:0d:
7c:4a:46:30:0d:80:0b:21:d8:83:1c:cb:65:9a:62:12:fe:cb:
b5:d0:81:7d:f9:33:d9:9d:49:05:94:ee:9d:d9:2f:43:b9:c8:
77:16:95:c0:a4:54:0d:c2:2a:3f:32:24:d6:3a:bd:b6:27:8c:
3c:b9:cc:0f:ec:bb:69:30:46:20:04:f3:8c:ac:6f:40:50:76:
a2:3d:9d:8a:e0:be:47:7f:03:b0:b2:28:c4:14:35:c7:1e:a1:
67:3e:42:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:12 2026 by rpki-client