
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa
File: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (raw, json)
Hash identifier: uDDSqQJALKhSiJ8HMA/VUDQe5THFv4WrWGBluPCxcKI=
Subject key identifier: FF:86:CF:52:5F:03:5A:74:01:AC:FA:BE:D2:50:30:88:4B:16:AE:CD
Certificate issuer: /CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C
Certificate serial: 5BF0DF6A8ED50AC8591B484CD7346AA7D6A5B6CE
Authority key identifier: 3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa
Signing time: Sun 03 May 2026 02:45:16 +0000
ROA not before: Sun 03 May 2026 02:40:16 +0000
ROA not after: Sun 02 May 2027 02:45:16 +0000
asID: 139365
IP address blocks: 103.141.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl
rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f0:df:6a:8e:d5:0a:c8:59:1b:48:4c:d7:34:6a:a7:d6:a5:b6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C
Validity
Not Before: May 3 02:40:16 2026 GMT
Not After : May 2 02:45:16 2027 GMT
Subject: CN=FF86CF525F035A7401ACFABED25030884B16AECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:71:2b:d0:68:83:96:fe:ad:6d:5b:76:80:76:
d7:c1:cf:55:4e:29:cd:5a:6e:31:a5:30:cd:79:b0:
84:1a:0d:e3:d5:56:d1:94:b4:2b:e3:c3:ca:c3:60:
b3:b6:4e:d7:b3:00:1d:82:8e:fb:f0:43:3b:8b:56:
7e:b1:98:60:c9:c1:72:25:17:7a:19:8d:a4:a5:15:
59:79:02:c1:c8:9c:c4:81:73:a9:45:cd:01:af:cb:
6d:e1:e2:66:e6:a6:29:ed:44:d5:7f:db:25:d4:df:
65:b1:2d:f3:83:40:be:cc:05:b0:ab:28:30:f5:08:
8a:4f:ae:ca:d1:d2:e5:10:3a:f9:32:a3:3d:40:7b:
d6:ff:95:39:52:81:3f:b5:3a:c2:26:57:69:f5:0b:
0b:ad:d1:cd:e9:0b:31:1e:43:52:0d:d8:89:20:ff:
33:d7:4e:21:ea:c7:22:57:43:25:02:ab:24:76:98:
e3:ab:3e:f6:59:71:13:ba:21:fb:9b:e9:6c:a0:9c:
b9:51:ca:ae:4d:4f:1a:ca:b6:88:3d:45:7a:62:f4:
e6:d2:10:5b:9f:6b:7e:3a:56:61:29:f2:f2:3c:0e:
65:5e:f5:15:2e:54:57:e8:aa:0c:17:84:d3:0e:59:
26:3d:a5:09:52:a0:04:81:4a:8e:a7:2e:61:cd:6f:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:CF:52:5F:03:5A:74:01:AC:FA:BE:D2:50:30:88:4B:16:AE:CD
X509v3 Authority Key Identifier:
keyid:3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.244.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4a:5a:3b:9f:38:4e:89:3e:c7:7f:03:be:92:1e:0a:71:72:
bb:a0:3d:c9:46:28:34:a8:87:03:a8:92:ba:00:9c:11:bc:af:
70:5c:fa:98:6c:47:1e:b3:10:cc:62:e2:65:64:b8:3e:14:fd:
31:6d:bb:15:28:6e:cd:d6:70:60:31:d8:61:6c:76:06:45:d0:
b5:4a:06:a0:48:99:51:72:1e:f3:d4:8e:1d:d1:dd:bd:d4:48:
10:22:54:05:49:8f:ee:5e:04:74:3e:07:97:b4:94:7a:d2:65:
3a:a0:fc:2a:56:07:7b:7e:da:6b:5f:39:c1:b8:47:ad:9b:81:
03:c6:7a:9f:90:3f:72:3d:4b:4e:88:e8:73:a7:67:7b:06:cd:
68:eb:f1:3b:f0:13:4b:c1:20:85:c9:4a:95:aa:c5:25:eb:c0:
5f:0a:97:e9:83:cf:ed:93:2b:f7:ef:0a:3b:f9:a3:c7:de:28:
77:59:c2:6a:f2:8d:61:e3:6f:ff:7a:2a:c5:ad:df:a0:bc:b1:
8e:9b:d9:a1:6b:6b:8d:d0:fe:5b:82:25:7f:43:04:c6:be:4d:
a6:8f:00:c7:b2:56:61:08:f1:f9:97:c3:fd:6d:87:e1:59:7e:
cb:d0:73:66:67:f8:33:e0:b4:12:6c:7e:a0:f1:a9:ec:81:8b:
e5:0b:79:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:20 2026 by rpki-client