
$ rpki-client -vvf rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa
File: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (raw, json)
Hash identifier: 2ktJ+LGrBdyxqO+5Ni21bj0NM08xpyYMFhaaSWYusJY=
Subject key identifier: 37:7A:AD:C7:E7:A8:AB:AE:64:EA:B4:C1:CF:C9:1B:86:89:DC:E5:26
Certificate issuer: /CN=4BD77983D98742985400276FF0F5959696EA7807
Certificate serial: 3211EE6503CCF6F7AD77C00FBBE33DBBE65358BD
Authority key identifier: 4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa
Signing time: Sun 03 May 2026 02:48:28 +0000
ROA not before: Sun 03 May 2026 02:43:28 +0000
ROA not after: Sun 02 May 2027 02:48:28 +0000
asID: 133834
IP address blocks: 103.58.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl
rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:11:ee:65:03:cc:f6:f7:ad:77:c0:0f:bb:e3:3d:bb:e6:53:58:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BD77983D98742985400276FF0F5959696EA7807
Validity
Not Before: May 3 02:43:28 2026 GMT
Not After : May 2 02:48:28 2027 GMT
Subject: CN=377AADC7E7A8ABAE64EAB4C1CFC91B8689DCE526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:74:c7:eb:c3:a9:5f:4a:ad:9a:07:4b:6f:
1a:f9:ff:8f:6d:95:d9:85:c7:4e:0e:ee:6b:93:e5:
2c:e0:b8:74:43:60:19:63:6a:b1:4d:49:21:ce:d0:
42:d9:55:24:32:7d:35:31:e4:54:15:d8:d5:88:bf:
dd:02:67:e0:6e:25:72:64:a6:89:81:ac:df:5a:a2:
a6:fd:0a:ca:84:f9:7c:89:40:5f:79:93:89:43:93:
f3:54:51:63:83:0e:3f:93:5b:16:63:1e:78:db:4d:
d2:5d:4f:d5:2b:68:68:d3:08:50:cf:85:76:a2:75:
10:43:c8:34:91:5e:6c:3f:d2:e6:1d:2d:fd:39:f2:
8b:7b:31:1f:da:46:df:ba:42:00:db:3b:10:43:7f:
51:89:cc:25:ca:02:66:cf:0b:09:fa:d7:ac:a8:d7:
09:5c:05:f3:38:8c:91:77:80:07:89:ef:c8:e0:9f:
15:0a:b0:4c:ad:a4:db:6b:aa:1c:c4:b6:86:7b:4b:
9d:24:b3:ed:3d:85:4a:7c:f4:83:29:22:29:ae:79:
6e:73:9b:df:9b:e2:92:0c:64:de:f8:a8:1c:19:d0:
0b:d2:31:24:46:a6:90:a8:4a:68:5c:3f:e0:ac:f2:
05:be:b2:bb:ac:63:b3:e1:00:92:de:b5:1a:ff:7a:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7A:AD:C7:E7:A8:AB:AE:64:EA:B4:C1:CF:C9:1B:86:89:DC:E5:26
X509v3 Authority Key Identifier:
keyid:4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.104.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:6c:6a:ad:0f:41:8a:49:c1:4d:60:78:af:5f:9d:b3:78:33:
78:de:7c:5c:2c:fe:e3:11:ee:da:8b:16:be:45:41:f2:0c:92:
73:d6:95:77:b5:7f:1f:a1:61:34:8e:95:10:18:2e:3e:d3:48:
8a:fa:2a:2c:ad:f5:e5:9f:2f:24:72:2d:74:13:40:2c:32:20:
77:de:08:1d:46:ba:f7:b3:1c:b8:4b:22:8d:80:3b:5b:d9:11:
38:7d:93:c0:29:cc:ef:6d:8d:fe:eb:0f:c9:a3:0c:a8:35:45:
00:26:ad:a9:06:53:d8:a1:c1:1b:09:ec:69:88:ab:bc:fd:7c:
fb:a9:af:35:6a:00:22:af:75:7d:e4:bb:69:e7:e6:ab:23:ca:
c1:56:72:cb:9c:bc:c5:6e:c1:86:7b:fe:1f:3e:4d:bc:a3:8b:
2a:7f:2b:db:1c:07:fa:20:ee:2e:45:ab:38:7c:73:08:45:ef:
53:39:04:77:c9:5d:09:2e:e0:84:7b:6f:7f:fb:26:8c:5b:25:
d3:66:23:b4:cd:85:c3:c0:1f:13:2a:3a:43:ad:d5:93:6f:25:
04:39:34:1c:25:49:e5:90:2f:5a:0d:2d:fc:a8:dc:a0:5c:58:
8e:9c:12:ce:6e:77:8f:1c:62:2d:45:f9:e9:1c:08:40:2f:a0:
48:9a:b1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:08 2026 by rpki-client