
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa
File: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (raw, json)
Hash identifier: C3zLhXQdm0Y8L/fkvQyrUb6nvy5u+LmWUMPrd0571WA=
Subject key identifier: B2:9E:E4:AF:16:31:02:A8:0B:AD:23:D0:52:AD:08:1E:09:15:9B:56
Certificate issuer: /CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C
Certificate serial: 1CDB79DFF91CF8EB03474A1C8AE853BA58DCF328
Authority key identifier: CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa
Signing time: Sun 03 May 2026 02:50:26 +0000
ROA not before: Sun 03 May 2026 02:45:26 +0000
ROA not after: Sun 02 May 2027 02:50:26 +0000
asID: 58819
IP address blocks: 103.240.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl
rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:db:79:df:f9:1c:f8:eb:03:47:4a:1c:8a:e8:53:ba:58:dc:f3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C
Validity
Not Before: May 3 02:45:26 2026 GMT
Not After : May 2 02:50:26 2027 GMT
Subject: CN=B29EE4AF163102A80BAD23D052AD081E09159B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:c9:8a:5a:bc:df:ff:7f:db:ce:d9:fb:1b:
7e:9d:37:8f:85:5e:e3:10:29:15:80:2a:d1:6d:3f:
58:f8:f2:4b:b4:cd:13:ec:b5:c3:1e:68:91:6c:88:
7e:31:a1:bd:e7:e7:91:2a:3d:42:76:a9:89:45:bd:
12:c8:7a:e2:e8:c5:d1:73:cb:07:0d:f6:e3:9b:18:
f6:e9:e8:6f:f8:74:39:d8:51:66:16:a0:73:c1:83:
fa:fb:6b:db:cd:41:e7:23:b8:c6:d5:24:7c:11:7f:
3c:d2:70:be:e2:ff:f5:49:64:59:b9:d6:a0:3f:78:
d9:b1:2c:ca:d2:36:76:f7:6e:54:a3:15:45:31:3d:
8b:ad:c0:80:85:6c:d7:f7:3e:29:d2:af:1f:4f:27:
4a:fb:1a:b0:2f:3a:b3:7d:16:b2:90:a5:b9:d8:51:
b4:05:23:37:30:48:1c:00:ab:12:c4:41:a8:06:60:
d0:54:35:87:48:60:e4:43:c3:61:36:ed:4f:c1:a2:
ab:77:57:45:7d:03:17:7e:4c:2d:9c:e1:0d:47:d9:
e0:28:74:70:ae:0a:0c:a7:80:6d:b2:fd:f0:07:2f:
66:5f:29:51:72:29:54:fa:8e:84:6d:3e:e3:c7:50:
ce:8c:43:aa:4d:75:58:11:64:9d:1c:2a:76:2d:31:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9E:E4:AF:16:31:02:A8:0B:AD:23:D0:52:AD:08:1E:09:15:9B:56
X509v3 Authority Key Identifier:
keyid:CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.240.110.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e6:eb:d5:d6:72:db:77:13:3d:c7:12:e1:d9:12:5f:23:0b:
99:5a:78:ee:a5:df:68:6f:67:a2:25:ca:a0:29:49:3d:68:b7:
32:29:5a:ee:41:73:de:8f:43:ed:a2:64:18:e9:03:0c:3d:e4:
3b:52:8e:7b:cc:2e:8b:fe:02:59:9e:af:f1:70:25:e7:e6:1d:
35:2d:b1:bc:e9:11:a7:8f:86:e7:43:52:03:94:38:4b:5e:b6:
19:42:d3:2b:e9:d1:c3:80:2d:47:e7:77:7e:5d:74:cc:77:e3:
9b:da:0f:51:86:99:d5:de:89:78:a3:dc:7c:8e:49:3d:e6:1e:
ec:37:7a:38:c7:4c:f1:1c:a6:90:3b:6b:4e:67:61:61:71:78:
17:69:2d:8f:bc:37:0a:c8:b6:61:ee:72:86:38:12:8d:8a:5b:
e9:b2:78:43:de:bb:9b:6b:a6:bd:af:56:c4:2d:c7:34:15:02:
60:21:2b:a9:46:85:93:17:f1:95:8a:e5:4a:fb:0a:a7:e5:0e:
c9:3f:a1:64:bb:58:61:2a:cc:f8:91:b9:6c:03:bb:8b:ba:cc:
dd:4a:39:95:aa:1f:9a:5c:e1:03:db:d4:1c:38:0f:6d:0c:74:
2c:46:66:2b:57:92:98:b1:5e:59:18:99:0a:00:60:ad:0f:6e:
0a:0d:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:56 2026 by rpki-client