
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa
File: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier: PA5AaiwfWDOA9e4XK2C1zY54VpkFPgexoF1yEhBpCQI=
Subject key identifier: E7:46:3C:CB:7B:59:38:AC:AA:81:F5:08:57:25:FB:D4:A3:E6:02:8B
Certificate issuer: /CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269
Certificate serial: 78F35ED809A332064C059A26F44584546DB36246
Authority key identifier: EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa
Signing time: Sun 03 May 2026 02:49:26 +0000
ROA not before: Sun 03 May 2026 02:44:26 +0000
ROA not after: Sun 02 May 2027 02:49:26 +0000
asID: 140443
IP address blocks: 103.149.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl
rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f3:5e:d8:09:a3:32:06:4c:05:9a:26:f4:45:84:54:6d:b3:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269
Validity
Not Before: May 3 02:44:26 2026 GMT
Not After : May 2 02:49:26 2027 GMT
Subject: CN=E7463CCB7B5938ACAA81F5085725FBD4A3E6028B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:5d:8e:4f:d4:f9:90:33:d9:03:9f:50:aa:
7c:fd:0c:1b:8c:9a:a2:7f:03:45:1f:06:2c:b3:24:
c7:02:21:ba:a9:f7:35:14:ac:bf:42:8d:bd:c4:3d:
e8:64:8e:cc:92:01:f2:e8:3d:38:75:a2:97:3e:60:
c1:b5:f1:e3:81:99:ad:2a:18:f2:d5:34:21:62:1a:
51:a2:fd:1b:a1:ee:99:12:99:f6:ca:e7:dc:9e:5f:
9c:be:d4:d0:8d:b9:1c:1e:73:a2:f3:78:48:c5:a9:
a3:23:47:a2:e3:2c:df:3b:32:d9:d8:ee:04:d8:1a:
ef:e7:d1:c3:6f:7a:e5:2e:64:72:7c:bf:bc:87:a6:
b8:88:2e:aa:29:45:2d:81:90:1c:04:01:a3:ef:da:
10:ff:87:9e:f0:a1:55:7d:e1:61:1d:59:3a:95:e9:
94:fd:47:04:07:61:d5:a9:56:c3:e2:b9:97:6d:07:
78:01:6b:6d:46:7b:f1:56:bb:99:9d:17:9e:38:4a:
71:6a:27:d8:e1:a6:6d:4b:56:b4:2e:83:b7:f1:02:
20:e0:41:84:6a:f6:e7:ae:58:5e:f0:01:3c:95:c1:
1e:2f:a1:6d:af:2a:f1:80:23:5c:2c:31:45:9c:52:
48:eb:91:64:ff:76:89:d1:5a:8a:bc:60:b4:39:7d:
29:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:46:3C:CB:7B:59:38:AC:AA:81:F5:08:57:25:FB:D4:A3:E6:02:8B
X509v3 Authority Key Identifier:
keyid:EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.176.0/24
Signature Algorithm: sha256WithRSAEncryption
61:12:a5:74:a2:e3:ba:56:c5:28:ab:7f:f5:4e:8e:a3:f5:9e:
3a:7d:52:fc:60:cc:82:69:7c:b4:75:ae:e3:ef:b1:aa:b9:8f:
30:11:94:e6:88:50:26:0b:a9:ac:af:bc:0d:4e:cd:b2:a4:71:
46:4e:37:bd:a8:d2:11:35:a4:c2:1d:3f:96:86:c4:75:fe:72:
30:1e:b0:19:1b:b3:11:ba:d1:b4:ff:60:3a:18:02:be:e0:99:
cf:6b:c5:60:40:f8:e9:20:57:44:92:a7:7f:7e:3d:6b:2d:21:
e9:de:15:b6:78:ba:6c:e7:73:f5:36:5f:0d:41:1c:6e:60:b9:
6f:1d:87:57:36:30:0d:3d:a5:16:6e:28:53:e0:98:ea:93:b8:
56:28:b4:91:44:81:ab:e4:68:2e:f3:76:2f:92:00:44:f1:bc:
93:f4:c4:db:ea:2e:b8:c8:47:08:05:63:af:d2:10:1d:ea:d6:
46:a1:51:e2:99:93:0e:ff:ec:fc:18:88:69:ad:f8:50:f6:86:
5b:3b:79:65:89:9e:a9:c5:a2:7a:43:99:e8:02:4f:eb:b7:2c:
4d:7a:9d:c8:7e:9d:fd:61:67:b8:3b:84:95:4a:a9:fe:93:0b:
52:00:b0:93:ed:17:ba:9c:64:b8:c0:a5:99:fa:c2:41:8b:9f:
3b:5f:02:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:50 2026 by rpki-client