
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa
File: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (raw, json)
Hash identifier: 3u4SqpMZHOiN005smob5L/czZ7TrAkEBbioYuGaCo6o=
Subject key identifier: 2B:2F:15:D3:14:23:EB:85:C2:B5:73:50:1B:36:AE:DF:BC:30:CD:B3
Certificate issuer: /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44
Certificate serial: 3DE2E3A3E980BD84A8997AEAC8FC7846709F59C7
Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa
Signing time: Sun 03 May 2026 02:49:47 +0000
ROA not before: Sun 03 May 2026 02:44:47 +0000
ROA not after: Sun 02 May 2027 02:49:47 +0000
asID: 140421
IP address blocks: 103.148.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl
rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e2:e3:a3:e9:80:bd:84:a8:99:7a:ea:c8:fc:78:46:70:9f:59:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44
Validity
Not Before: May 3 02:44:47 2026 GMT
Not After : May 2 02:49:47 2027 GMT
Subject: CN=2B2F15D31423EB85C2B573501B36AEDFBC30CDB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:1c:98:b1:8c:b1:fb:75:91:08:6f:54:d9:
b0:48:d7:8a:31:94:50:e6:0e:61:ce:5f:5f:07:e6:
91:93:03:9c:82:cf:12:0b:c8:77:2f:c2:bd:aa:ee:
2d:59:cc:39:55:01:ad:d0:2a:4a:72:d1:19:ae:f7:
c0:89:28:48:c1:c3:59:06:f6:d4:fa:4c:d8:0c:fa:
94:9b:a7:46:a3:0b:16:93:e9:e3:e1:91:4a:67:50:
99:b7:95:59:ca:f5:78:85:40:c7:80:30:1e:6f:b3:
41:93:24:e2:cc:8f:4f:7b:67:d8:02:8d:f7:c2:bd:
f7:a8:2b:57:58:83:b8:15:bf:9a:69:c5:df:7a:2f:
5c:f1:69:7d:51:df:f4:16:b0:a7:b3:26:2a:52:d8:
e8:3b:96:4c:81:f5:90:93:23:dd:38:96:86:ed:1e:
95:15:4c:c3:38:5a:fe:3b:6c:a1:6e:a2:cf:e1:5b:
20:18:cb:1e:27:9f:33:69:d2:7c:88:20:ad:f6:eb:
30:ac:05:00:f0:b2:59:d3:fc:9b:45:06:62:a7:7c:
b7:6e:b5:b3:a7:69:f6:60:f9:88:7a:9c:9f:00:64:
1d:41:8c:dc:93:8c:1c:17:b2:6d:cd:43:0c:fa:d4:
e4:f2:4a:fa:3c:51:e8:c7:f8:15:a9:93:54:a8:ba:
ef:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2F:15:D3:14:23:EB:85:C2:B5:73:50:1B:36:AE:DF:BC:30:CD:B3
X509v3 Authority Key Identifier:
keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.88.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:46:b7:44:ab:e8:75:1b:83:83:03:c3:c6:cd:db:c1:fd:d9:
f3:5a:b4:cc:be:a7:b5:af:71:7e:10:aa:c5:2b:ab:2a:dc:36:
f0:32:83:78:41:e1:d9:f2:1b:e5:e2:69:ca:0d:80:54:c2:ea:
3a:d7:91:b9:cb:57:5d:5f:c6:5d:d6:6e:74:50:a1:c5:35:50:
72:26:28:62:73:b9:db:7d:b2:af:4b:0a:6c:73:fd:76:62:68:
13:51:42:b3:36:f7:b5:fd:9d:78:c4:56:5e:f5:2d:f7:a9:f0:
a4:b9:95:bf:67:2e:24:a1:3f:24:78:5e:2b:02:c8:1c:8a:0d:
c6:94:6d:2f:72:01:06:d3:dd:30:24:f8:05:4c:b2:e4:7b:d4:
5b:67:a5:e7:4b:cb:63:7c:d7:17:b7:30:2d:db:c3:30:4b:23:
30:92:11:eb:42:29:85:54:66:20:c8:d4:e5:9c:ab:a7:8d:cd:
cd:3f:43:fb:7b:af:46:b1:1e:8e:df:60:89:a5:2c:26:70:a5:
83:67:84:d7:74:3c:89:6f:d1:e1:16:91:90:07:34:e8:4d:03:
ae:11:c1:db:d3:92:92:58:ff:2d:89:c5:d7:44:fe:a1:2e:c3:
ac:1d:90:3a:7a:4d:1c:f9:22:a8:f1:bf:e0:95:e1:6e:3d:b6:
d7:aa:ce:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:24 2026 by rpki-client