
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa
File: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (raw, json)
Hash identifier: qvATYP4H/eMNe5opq2LHxYvNPQ/hG8JcWnqWytUagjE=
Subject key identifier: 57:CF:4E:D9:2B:E2:1B:2E:F9:F4:B4:53:A3:9C:DD:53:84:FE:CA:31
Certificate issuer: /CN=20960DA2C8391ACA821C6A472677485F6C49F24B
Certificate serial: 2FEB3F6338AB577D6568CEC8A23DF84F325C83FC
Authority key identifier: 20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa
Signing time: Sun 03 May 2026 02:45:32 +0000
ROA not before: Sun 03 May 2026 02:40:32 +0000
ROA not after: Sun 02 May 2027 02:45:32 +0000
asID: 141907
IP address blocks: 103.163.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl
rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:eb:3f:63:38:ab:57:7d:65:68:ce:c8:a2:3d:f8:4f:32:5c:83:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20960DA2C8391ACA821C6A472677485F6C49F24B
Validity
Not Before: May 3 02:40:32 2026 GMT
Not After : May 2 02:45:32 2027 GMT
Subject: CN=57CF4ED92BE21B2EF9F4B453A39CDD5384FECA31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:d2:06:e6:75:bd:d7:e6:36:eb:71:d0:c3:
5e:b9:ae:82:5c:d2:c6:b5:23:29:f0:71:3f:98:87:
7f:a0:aa:b4:45:8d:fe:a5:24:ed:fe:6f:56:93:2e:
44:7b:f7:67:b8:f1:ae:66:15:a1:d0:52:74:80:52:
2b:de:f6:b4:1d:9a:cf:c5:72:24:9a:97:8a:27:05:
e1:4c:f6:61:66:10:aa:91:6a:43:65:12:0a:39:47:
67:5a:95:2b:96:e0:5b:cc:77:05:a2:11:88:6a:1f:
10:eb:90:f6:39:66:83:3e:ed:a1:e5:8d:38:c1:14:
cc:4c:b1:ed:a0:c2:1f:1c:8f:2b:d4:47:4f:2f:b4:
08:39:37:8d:69:b5:ae:a5:31:1f:aa:1e:86:37:61:
ca:f8:2e:b9:11:0b:8b:57:13:9a:da:3a:bf:f3:a3:
6b:c2:92:d0:9d:a4:47:95:ca:36:03:29:10:12:6f:
54:38:d5:02:69:2d:06:e9:f9:88:8a:4a:ee:af:81:
50:c3:ef:21:fe:25:9f:3c:a2:cf:8e:65:fa:3e:fa:
83:92:0d:78:ed:5c:db:a3:7e:8f:f6:03:76:4b:c1:
4b:fe:cf:2a:b6:9b:00:06:a1:0c:a0:e1:8a:22:54:
03:3a:7a:be:bf:c7:9e:a4:0b:34:c2:df:1f:9e:09:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:4E:D9:2B:E2:1B:2E:F9:F4:B4:53:A3:9C:DD:53:84:FE:CA:31
X509v3 Authority Key Identifier:
keyid:20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.230.0/23
Signature Algorithm: sha256WithRSAEncryption
77:12:89:3f:ce:5b:4c:53:a8:59:8a:d0:55:dc:94:c8:6a:6e:
ee:6a:2e:94:f5:4f:c1:fe:8b:09:ff:f7:e2:8c:0d:c6:4f:f2:
ef:fe:fb:36:7f:db:67:b8:15:ce:97:12:03:1a:a9:84:27:30:
54:65:e3:6a:f7:d7:b2:be:ff:64:75:58:d4:af:e7:e3:a8:7a:
e1:3c:3e:36:a7:76:3a:f3:c2:21:57:50:72:ae:4a:9c:9f:26:
09:1f:ab:96:c4:2e:5f:0f:9f:33:f5:3a:e3:ae:5e:d6:45:0b:
21:e8:04:b4:7d:13:db:00:49:d3:d8:df:aa:f5:99:60:bd:83:
3a:44:0d:09:9a:c1:85:39:ae:e3:57:35:87:61:2a:15:80:1e:
08:bc:23:f0:97:79:5d:12:18:22:22:3b:55:bf:ea:ac:34:78:
7d:20:48:35:f8:8d:a9:d4:b9:76:0a:a1:d4:ef:1f:ea:3a:b7:
88:1f:11:8b:71:b2:f7:2c:5b:57:36:c3:e3:66:a8:11:ab:5b:
d0:67:5d:67:b2:bd:00:9c:93:e3:ba:93:e6:0f:d0:1f:37:87:
c0:c2:06:94:1b:71:53:bd:6d:3d:68:8c:55:f2:2a:ee:1d:cf:
90:a7:66:8f:3d:af:dc:fd:e0:80:66:f0:54:e6:b5:8b:d8:e6:
0e:11:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:39:53 2026 by rpki-client