
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa
File: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (raw, json)
Hash identifier: 9MCsmuGnmFDoeSG3rIPrfccOXghMBGlEEz5Onpmf8wY=
Subject key identifier: 5E:5D:0F:83:57:89:05:24:7D:F8:87:73:0A:ED:0B:6A:94:DD:08:11
Certificate issuer: /CN=FF5F881DC07CC4A9A985D594360658D202A551B7
Certificate serial: 7C4FF184E1AFBB080386C5167571F5C6D92C3416
Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa
Signing time: Sun 03 May 2026 02:45:23 +0000
ROA not before: Sun 03 May 2026 02:40:23 +0000
ROA not after: Sun 02 May 2027 02:45:23 +0000
asID: 17440
IP address blocks: 103.209.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl
rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4f:f1:84:e1:af:bb:08:03:86:c5:16:75:71:f5:c6:d9:2c:34:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7
Validity
Not Before: May 3 02:40:23 2026 GMT
Not After : May 2 02:45:23 2027 GMT
Subject: CN=5E5D0F83578905247DF887730AED0B6A94DD0811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:a8:ea:53:88:dc:9f:2d:7f:78:ea:ae:49:
c0:f6:24:ae:5b:35:ec:31:ba:a4:6d:c7:4c:7a:3e:
89:d3:94:f9:f2:01:05:1d:e5:a8:50:72:62:65:67:
bf:99:08:e3:86:16:15:e7:a5:9c:06:9a:15:13:d9:
be:28:36:a3:21:aa:88:cb:16:a1:81:69:61:69:47:
67:99:de:02:43:c8:14:a5:0c:b3:b7:0a:f1:9e:51:
de:d7:a5:af:a3:de:0d:85:b5:b3:5c:80:7d:ce:f5:
0f:c3:b9:77:cb:81:3f:d6:e1:b7:7f:af:7b:47:d9:
20:27:34:fe:4b:28:5f:b8:b3:8e:e4:52:f1:c2:d9:
51:65:08:a7:03:79:ce:69:6a:1e:7c:9b:32:42:fd:
51:a4:36:02:d9:f8:53:53:4c:91:04:4d:d1:30:08:
5c:9f:d5:d4:c0:16:a8:82:ca:70:2f:16:40:55:02:
6a:c8:04:7b:fb:2b:38:a2:1a:7c:18:26:34:f4:91:
aa:09:10:17:3c:5c:fd:89:67:b0:b0:55:3f:e8:cd:
23:18:29:df:9a:ca:10:3d:1c:7c:80:4c:fd:f8:57:
e9:18:32:de:b5:6a:7a:10:60:72:60:bf:77:56:04:
64:30:98:ed:02:a5:3c:15:00:e8:88:07:be:e2:94:
c6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5D:0F:83:57:89:05:24:7D:F8:87:73:0A:ED:0B:6A:94:DD:08:11
X509v3 Authority Key Identifier:
keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.209.248.0/23
Signature Algorithm: sha256WithRSAEncryption
01:aa:d3:d9:02:9f:de:4f:07:03:65:28:c2:59:9c:5e:93:64:
49:1e:d7:6f:f8:8b:33:7a:42:ec:77:7d:36:d4:33:2f:79:74:
8a:1c:f4:c4:9c:43:46:49:77:0a:77:8b:dc:25:88:d2:ae:a5:
fb:25:3c:8a:c2:dc:79:13:96:54:b8:30:a7:b1:a2:d2:d4:27:
cc:bc:f6:2b:61:6d:ea:5f:ea:6c:5a:83:ba:24:39:b2:48:47:
2a:64:7e:f5:e6:c2:58:90:eb:80:74:3a:b9:1c:aa:f0:c6:31:
c4:be:fd:d2:39:5e:fc:19:45:d1:90:50:40:13:78:ed:d3:94:
30:c4:79:35:34:9c:9e:0e:8f:3f:63:2b:ac:5e:0a:2d:7e:2b:
ce:f7:3d:05:8f:91:43:c5:8c:9e:1f:95:a5:2c:af:17:c9:60:
4e:09:62:17:2d:10:ed:47:e5:e2:67:4f:71:8c:88:da:31:b6:
cb:c5:ce:e3:f9:59:8e:91:ed:83:ed:42:5d:06:cb:b6:ee:13:
de:4e:59:77:9c:01:a1:2e:c5:69:45:65:bf:31:52:fa:79:1c:
d8:34:99:fc:69:e5:3d:40:a0:32:59:ef:fe:ab:53:f7:00:27:
f5:68:b8:5f:37:f4:8b:fc:a3:5d:b5:13:eb:5a:57:2d:1f:6c:
1b:9d:a1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:12 2026 by rpki-client