
$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3130332e32312e3231362e302f32322d3234203d3e2039393035.roa
File: 3130332e32312e3231362e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier: 69DRa4aTIpAEdb51xzvQioJYr3teJfUAi2k8d2rlqC4=
Subject key identifier: 7C:F8:3F:98:FA:48:CF:04:C7:CB:E9:60:55:1A:AE:95:29:7F:72:DF
Certificate issuer: /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial: 34540B618FE3E5A02B5FCBEB4D1FCFD446E008F3
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3130332e32312e3231362e302f32322d3234203d3e2039393035.roa
Signing time: Sun 03 May 2026 02:44:39 +0000
ROA not before: Sun 03 May 2026 02:39:39 +0000
ROA not after: Sun 02 May 2027 02:44:39 +0000
asID: 9905
IP address blocks: 103.21.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:54:0b:61:8f:e3:e5:a0:2b:5f:cb:eb:4d:1f:cf:d4:46:e0:08:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
Validity
Not Before: May 3 02:39:39 2026 GMT
Not After : May 2 02:44:39 2027 GMT
Subject: CN=7CF83F98FA48CF04C7CBE960551AAE95297F72DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:61:f8:5d:3b:65:12:28:7a:a4:94:d4:62:
6a:27:56:94:8e:2a:37:c5:3d:ca:10:48:97:10:1a:
54:94:39:24:57:42:a0:54:8f:91:f9:58:cb:98:56:
3a:d7:0f:5f:c0:d7:2d:37:3f:1c:e7:e8:0e:5a:50:
f0:69:15:a7:12:19:7c:82:e6:24:65:2c:06:ab:d2:
9c:2a:f7:90:86:70:17:e8:c5:72:24:91:9b:ba:90:
0c:a0:28:96:47:cf:3b:18:2c:73:b8:99:20:7b:75:
2b:14:86:12:2b:3a:95:0b:3c:ff:66:56:68:04:bb:
56:9c:49:95:01:72:98:56:92:1a:fe:06:be:59:1c:
86:ce:f4:18:c9:0d:a0:35:a3:f3:18:fb:f2:ce:86:
e3:ef:ac:f2:df:57:93:31:30:42:a0:76:4f:1f:6d:
b5:37:80:77:41:d6:6f:16:bc:a5:55:4f:f1:ed:22:
6c:2d:74:22:ff:9a:82:09:d8:7e:b6:b4:1a:f1:b0:
b8:6f:06:8c:19:5c:3f:50:58:c2:06:f7:4a:24:83:
c5:c2:93:b6:59:42:69:f1:e4:e6:18:3d:33:f1:2b:
10:6b:22:34:3d:af:30:55:89:b0:cf:ad:1a:24:d2:
78:5f:19:cb:33:79:5e:82:4f:8e:3e:18:ea:b8:d4:
aa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F8:3F:98:FA:48:CF:04:C7:CB:E9:60:55:1A:AE:95:29:7F:72:DF
X509v3 Authority Key Identifier:
keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3130332e32312e3231362e302f32322d3234203d3e2039393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:8f:fc:3a:5c:56:97:be:07:bc:14:c5:11:90:99:fc:e9:b5:
ec:f7:a7:1d:77:3e:3a:0a:e4:d7:61:14:1f:23:b4:63:7a:37:
f2:dc:21:55:14:2b:78:46:eb:57:fb:f1:9b:e0:45:fb:0c:be:
66:ef:06:3b:7f:b1:2a:93:77:3e:6d:87:08:95:cc:47:a9:22:
5e:94:99:5e:c9:7e:fe:cf:8b:b1:6c:2f:e7:84:f3:21:51:09:
4e:26:f3:5a:1c:c0:24:8b:93:42:96:4a:37:5f:c1:64:2f:70:
e7:27:5c:fa:a5:35:45:3b:d6:22:8e:db:e1:66:9e:8a:16:c3:
13:89:3b:2b:6c:95:9a:65:18:a2:d0:97:c0:eb:0a:48:ed:f1:
28:cd:a6:3c:6c:f0:f6:e2:4d:70:98:95:4e:29:8c:71:6e:3e:
88:05:21:b0:67:0c:1f:52:bb:36:b2:12:58:96:bb:19:af:17:
ae:5e:50:f3:21:0d:94:87:7a:a1:f0:7d:e4:bd:bd:72:43:32:
24:4c:a5:64:7e:79:2d:f9:14:44:90:18:b6:01:69:55:e1:15:
d9:c4:5a:18:b6:e9:47:0d:19:b4:06:ad:8c:3c:cd:e5:b3:46:
05:53:00:ad:dc:fa:d1:3a:8a:d7:54:e8:87:62:58:90:82:82:
aa:a0:f5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:28 2026 by rpki-client