
$ rpki-client -vvf rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa
File: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: LF59rdbly3qY6QhOFQEuAQ69CIbhIGzKez5frVrEQC4=
Subject key identifier: 63:2C:A2:E4:66:9F:A2:D8:84:50:77:20:AC:CF:81:22:52:F5:24:89
Certificate issuer: /CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4
Certificate serial: 237A586A5A83FE021463BA14BC8A7B253F1A4D15
Authority key identifier: 29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa
Signing time: Sun 03 May 2026 02:47:15 +0000
ROA not before: Sun 03 May 2026 02:42:15 +0000
ROA not after: Sun 02 May 2027 02:47:15 +0000
asID: 133800
IP address blocks: 103.150.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl
rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:7a:58:6a:5a:83:fe:02:14:63:ba:14:bc:8a:7b:25:3f:1a:4d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4
Validity
Not Before: May 3 02:42:15 2026 GMT
Not After : May 2 02:47:15 2027 GMT
Subject: CN=632CA2E4669FA2D884507720ACCF812252F52489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:7c:34:05:ec:e7:8b:98:22:fd:85:7f:6e:
b3:7a:4a:70:dd:8b:40:19:3f:69:92:d2:22:ae:8c:
e4:23:36:fb:cb:64:e3:80:eb:ff:f0:cb:76:2a:24:
2a:6b:74:ff:22:54:c7:fa:a8:98:a8:e3:51:33:af:
af:7a:c5:a4:ff:44:e0:6a:07:74:b7:37:aa:6c:87:
3f:8f:e6:e6:37:78:ba:8d:4d:9b:da:cd:71:0c:c3:
0e:c4:fc:98:de:16:ba:cc:1b:03:d4:65:b7:2c:3d:
85:db:95:83:9a:17:2a:4b:84:bc:b8:57:2f:2c:07:
62:94:d0:2f:b5:f6:25:06:87:15:f0:53:a9:99:59:
df:0b:d5:84:06:db:1e:f7:69:09:56:8a:43:1d:26:
53:ee:d9:b1:86:24:7d:b4:9a:34:3f:b3:1f:68:96:
28:66:e3:8a:a5:e0:90:dd:46:d9:50:0f:ee:6e:87:
08:40:b6:fb:62:d8:14:59:66:19:e3:a5:83:50:11:
2b:3f:35:df:ba:d8:f2:57:74:9b:3f:42:0b:e4:01:
3a:1b:3c:a8:de:04:3c:e7:73:e3:30:b5:12:ef:76:
17:77:33:65:8a:b3:fc:5e:47:41:9f:9f:51:62:0f:
d5:bd:f3:b1:fc:13:ca:9e:3d:8a:3e:4e:26:a2:6f:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2C:A2:E4:66:9F:A2:D8:84:50:77:20:AC:CF:81:22:52:F5:24:89
X509v3 Authority Key Identifier:
keyid:29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.226.0/23
Signature Algorithm: sha256WithRSAEncryption
64:0c:57:a4:a3:98:c7:a9:fd:e3:9a:fb:b6:eb:5f:40:d4:0e:
df:5d:01:bc:08:75:f7:5f:e8:58:c3:d8:9d:16:7d:bd:b4:2e:
29:84:6c:ce:b4:69:83:36:67:f8:88:f3:84:ed:8a:4a:81:18:
04:78:5e:67:d6:de:96:ed:1a:42:e5:57:31:9b:47:83:7f:27:
dc:e7:6d:97:ba:e8:99:cb:f8:8d:03:03:ff:fe:9c:47:f5:42:
67:c2:ca:e2:e9:64:7e:97:31:4e:47:2c:9d:c7:9a:7e:be:97:
d8:9c:94:58:80:4a:ae:a3:93:37:e3:e7:b7:20:b7:ed:2e:2b:
4a:85:dc:18:c0:bc:e9:d5:9d:5f:00:d9:54:6d:2f:37:fb:4a:
53:3b:46:bc:b9:8c:ab:22:1a:ac:e8:a4:f9:89:dd:3b:5b:3d:
6e:66:72:6c:6c:f9:43:56:be:93:e8:47:8d:75:fc:77:27:89:
04:6a:67:1d:ce:76:f8:31:ac:69:64:19:40:bc:a5:9b:15:a4:
06:c0:f1:0f:fa:af:ba:ca:4f:d4:77:e2:08:e6:55:c2:05:c1:
f8:33:7b:61:e0:20:61:05:6f:25:d9:1a:fc:04:6d:4f:82:7b:
42:1a:c0:a8:b7:06:87:17:c6:7b:37:c1:5e:18:b7:32:9f:b2:
c2:8c:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:46 2026 by rpki-client