
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa
File: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (raw, json)
Hash identifier: o6su7IMCtejCKrMWVaKfnnGbeizQl5tOylIJ73OtfwA=
Subject key identifier: 67:E3:81:2D:58:85:6F:35:49:B3:C3:3E:42:56:16:EE:FD:E5:DE:23
Certificate issuer: /CN=149E265C01ED66DA98905D22913EE8E5950357C5
Certificate serial: 5B5E3F372356151A50445C846EC1913C46668582
Authority key identifier: 14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa
Signing time: Sun 03 May 2026 02:45:17 +0000
ROA not before: Sun 03 May 2026 02:40:17 +0000
ROA not after: Sun 02 May 2027 02:45:17 +0000
asID: 149902
IP address blocks: 103.190.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl
rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5e:3f:37:23:56:15:1a:50:44:5c:84:6e:c1:91:3c:46:66:85:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149E265C01ED66DA98905D22913EE8E5950357C5
Validity
Not Before: May 3 02:40:17 2026 GMT
Not After : May 2 02:45:17 2027 GMT
Subject: CN=67E3812D58856F3549B3C33E425616EEFDE5DE23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:74:b1:67:6f:59:01:e8:4c:8a:5a:05:82:
3b:69:ac:be:c0:96:71:fe:28:7d:6a:92:fd:e9:b3:
ac:0a:5e:d5:f0:85:4e:06:9c:e0:b7:a2:5e:71:cb:
84:00:41:d3:fa:07:34:48:59:5c:1d:76:25:14:2e:
7d:54:94:5a:cf:0b:06:ba:0e:b7:34:e2:46:62:44:
ff:9b:7e:8b:93:8b:4e:d6:cc:8c:bb:5a:96:ff:25:
a0:69:aa:00:93:a0:d4:b5:38:86:81:96:6f:4a:2b:
25:7e:71:74:49:4e:c7:ee:7b:c7:35:b7:c2:23:bc:
d3:df:bc:94:d4:7a:08:34:a7:a3:a6:68:b7:68:a0:
25:4c:0e:7a:1d:cd:01:02:91:7a:f3:b6:da:c8:3f:
34:5c:83:2b:75:11:7d:f9:90:70:1f:fe:73:55:70:
48:39:ef:4a:55:08:4d:b7:09:fd:96:82:f5:62:0f:
c8:d8:da:21:47:57:d4:f8:89:11:1c:6e:76:9c:3b:
35:52:b0:62:74:97:68:5b:9f:61:ff:47:63:0f:6c:
57:cb:9b:fc:81:f0:ef:b4:e7:be:f9:74:9f:85:6f:
c4:de:e7:fb:0c:2a:35:f6:4a:65:fb:f7:39:c8:d1:
fe:87:93:de:26:71:eb:48:f2:fd:f5:85:5e:e5:f4:
4a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E3:81:2D:58:85:6F:35:49:B3:C3:3E:42:56:16:EE:FD:E5:DE:23
X509v3 Authority Key Identifier:
keyid:14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5d:39:27:e0:f8:4b:f0:e6:c6:ed:c8:1b:85:24:39:7d:f3:
a8:ba:d1:54:86:76:9d:4b:7e:bb:9b:ac:5c:c0:b0:8f:ae:04:
af:57:b8:26:7f:19:e4:18:73:ba:d3:a5:f7:cf:83:d9:ea:1f:
f9:90:89:83:34:fb:f6:45:4c:7d:cb:65:33:1a:bc:73:d0:e3:
6c:c9:bd:11:c1:39:45:96:d8:fe:95:48:fa:ad:c0:6f:d4:5b:
04:08:3d:68:42:6a:12:03:d1:34:e3:1c:a8:cf:38:79:86:5b:
30:27:a2:ad:cd:f8:66:e3:58:f5:4c:90:4f:89:4e:51:f7:16:
dc:4a:fc:8b:00:e5:4c:bc:fb:f3:40:ce:54:3f:d1:81:b5:17:
08:0d:69:7c:e1:a2:9b:cf:0c:75:54:17:d4:d3:bf:61:e4:f1:
60:c8:5c:cf:9e:25:76:ff:5c:1b:d4:5d:e2:64:66:0c:8b:f3:
36:c4:fa:6b:3a:b9:65:0b:6b:6a:45:47:2e:00:1f:bd:54:21:
01:b3:96:78:14:75:a8:2b:1e:9d:0d:10:28:05:9d:f0:de:fb:
7b:b9:d2:ea:1b:61:21:ef:bc:1a:68:ce:94:b2:ab:05:6a:be:
29:bd:06:46:b0:58:bc:ae:ac:34:17:7d:69:50:e7:8a:af:5e:
55:0c:a5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:07 2026 by rpki-client