
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa
File: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (raw, json)
Hash identifier: ccGmxOk76rCjXiDsAdagg2r1DoIlpvcNCr89qHRVZzQ=
Subject key identifier: 9F:24:E5:D2:56:06:EF:95:CA:22:00:F9:DD:D8:CD:EC:60:01:0C:99
Certificate issuer: /CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB
Certificate serial: 0CF972D2105E0E016F2F6EF72A5B306E8D5BDAF4
Authority key identifier: 24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa
Signing time: Sun 03 May 2026 02:49:32 +0000
ROA not before: Sun 03 May 2026 02:44:32 +0000
ROA not after: Sun 02 May 2027 02:49:32 +0000
asID: 138810
IP address blocks: 103.134.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl
rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f9:72:d2:10:5e:0e:01:6f:2f:6e:f7:2a:5b:30:6e:8d:5b:da:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24324A1FF3EBBF9994008310D32E6B61B2B5EAAB
Validity
Not Before: May 3 02:44:32 2026 GMT
Not After : May 2 02:49:32 2027 GMT
Subject: CN=9F24E5D25606EF95CA2200F9DDD8CDEC60010C99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:ee:3b:05:ed:c7:c0:fd:53:13:b7:22:10:
65:34:92:14:43:1f:11:44:aa:80:e2:4b:4d:03:59:
57:c4:65:f7:ce:41:f5:4d:31:36:34:87:82:9f:58:
d0:d9:84:58:e1:32:8d:9e:73:61:df:25:53:89:cc:
c9:3f:4d:8c:de:9d:28:53:51:ff:09:d0:00:18:fe:
85:eb:42:6b:49:a5:80:a4:a1:b9:3d:af:05:81:32:
4a:e2:07:d0:63:c4:08:cc:02:c6:2b:39:d5:e3:4a:
63:2f:4a:15:a4:40:1f:b5:a7:ff:4c:1b:8f:92:59:
3e:96:f5:4e:f3:ef:69:6f:48:d9:96:e5:62:26:50:
4d:47:31:1c:ee:99:db:89:6b:bd:6d:fe:44:59:30:
f3:74:01:02:40:ce:cd:cd:c4:37:f2:45:97:51:3c:
94:ed:cb:cc:ed:c4:69:fc:c6:1f:32:49:7f:04:ed:
41:6c:42:0e:b0:13:c6:a5:4c:17:78:be:82:75:cb:
f5:93:31:e2:8b:00:1d:a5:f9:eb:5b:b7:48:0e:e2:
85:56:e4:de:38:ed:a9:96:58:7b:36:3f:71:d2:64:
ba:96:f1:ef:f5:e9:67:9f:a5:ef:8f:75:34:14:18:
3a:3a:ac:3a:eb:42:d9:87:c4:a4:7a:3c:37:fb:b7:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:24:E5:D2:56:06:EF:95:CA:22:00:F9:DD:D8:CD:EC:60:01:0C:99
X509v3 Authority Key Identifier:
keyid:24:32:4A:1F:F3:EB:BF:99:94:00:83:10:D3:2E:6B:61:B2:B5:EA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24324A1FF3EBBF9994008310D32E6B61B2B5EAAB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.220.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d9:a5:d6:f0:8b:67:02:21:eb:4d:fe:ea:fe:d4:8a:4a:86:
cc:e0:ed:c4:a0:db:6b:27:c2:57:fd:53:24:3e:38:ad:35:12:
f8:09:f4:bf:ae:af:81:77:f7:4d:51:c5:de:36:07:cd:36:ce:
ab:c3:ea:26:70:52:8c:74:0c:1c:04:f5:d4:cc:62:34:a0:9a:
5f:15:80:c5:67:5b:3b:e3:c3:00:12:36:6e:ad:3f:77:ef:e1:
4a:aa:76:d5:af:03:50:0b:bc:21:9a:57:35:15:64:0b:85:e0:
0d:c5:6c:6c:e1:62:cc:9a:57:c2:fa:a9:8a:d2:21:11:bc:31:
83:c1:15:3c:c6:07:1b:fd:63:ac:0c:74:80:20:cd:45:cf:b4:
2e:66:b1:d0:c5:51:ad:ae:4d:6b:48:86:49:95:44:d5:3c:1c:
76:4d:2a:96:25:0a:a2:dd:04:e9:36:fb:52:01:66:5b:db:b0:
d3:2c:19:35:eb:48:69:fa:fb:c7:bd:13:40:be:7f:d1:49:e0:
80:66:e2:61:c1:4a:fb:68:6a:83:35:47:4d:cd:fe:39:89:bd:
fc:ac:dc:c0:27:71:e5:87:14:80:df:f8:27:e7:5c:19:d3:86:
83:69:32:76:ce:f2:63:83:62:63:7c:14:41:bd:20:ac:c2:0f:
15:7a:66:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:04 2026 by rpki-client