
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa
File: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (raw, json)
Hash identifier: S0iGfqt7VJt0f+938bF+sQh55Ot8KzHz4KscepkNqjU=
Subject key identifier: 02:4C:8A:38:D0:C2:5C:20:11:E4:E0:0F:47:ED:A8:E9:3E:D3:FF:34
Certificate issuer: /CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF
Certificate serial: 30A5962E695F33C98E0A6B4E9E36F5E3BE46F966
Authority key identifier: D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa
Signing time: Sun 03 May 2026 02:51:01 +0000
ROA not before: Sun 03 May 2026 02:46:01 +0000
ROA not after: Sun 02 May 2027 02:51:01 +0000
asID: 134620
IP address blocks: 103.203.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl
rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a5:96:2e:69:5f:33:c9:8e:0a:6b:4e:9e:36:f5:e3:be:46:f9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF
Validity
Not Before: May 3 02:46:01 2026 GMT
Not After : May 2 02:51:01 2027 GMT
Subject: CN=024C8A38D0C25C2011E4E00F47EDA8E93ED3FF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:fe:80:ca:7e:58:61:70:cc:3e:ee:34:29:
71:c7:cf:fe:10:fa:29:ce:e3:c3:69:3b:64:61:97:
17:6a:f4:af:93:86:84:0c:80:aa:52:01:83:df:d1:
63:b2:37:0d:f1:3a:ac:97:17:7e:0c:5b:f4:0f:e4:
7e:98:81:d3:93:de:3a:50:7b:de:07:3a:b7:9c:fb:
48:69:d6:4a:b7:23:6a:04:ac:df:d9:bd:08:9c:c0:
41:29:f8:6e:07:f6:0b:9f:1b:90:83:79:8a:59:27:
a3:b8:6f:fa:2f:e2:14:17:5d:da:64:01:1d:2d:e9:
b6:3c:29:77:f6:e9:c1:0d:13:53:20:f5:11:40:f7:
59:cb:32:34:90:57:18:9b:b6:bd:cc:36:f4:c7:df:
86:30:c6:1f:01:e3:77:fe:c7:3c:29:17:7c:13:0b:
de:85:44:77:43:1b:15:df:35:5a:dc:bc:de:b5:87:
f4:af:25:ad:68:cf:49:db:4b:e2:c0:cf:77:48:66:
3a:02:f4:71:8c:43:68:7b:45:01:3a:ea:c9:74:7c:
b2:f1:6f:ff:2a:68:6a:6c:e7:0f:c4:26:26:0c:f8:
1c:a9:33:b4:23:76:a4:97:9a:c9:8b:cc:a9:fa:af:
b8:40:82:29:c2:6e:89:df:5e:4f:5c:ea:3c:86:32:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4C:8A:38:D0:C2:5C:20:11:E4:E0:0F:47:ED:A8:E9:3E:D3:FF:34
X509v3 Authority Key Identifier:
keyid:D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.203.77.0/24
Signature Algorithm: sha256WithRSAEncryption
26:31:f8:6c:76:54:27:56:6a:1f:f6:81:12:13:6d:fc:47:02:
4e:ee:05:e5:77:71:ac:06:d9:05:ea:88:2b:2e:03:a9:9f:c4:
f2:60:de:8b:12:48:b3:54:ff:c3:7c:a8:a4:2b:2d:49:95:fd:
38:dd:47:e7:fd:1c:4d:23:e0:9e:34:ef:47:36:2f:4f:29:9c:
b6:11:32:ed:15:ba:7f:a7:c0:8c:28:a5:dd:6c:44:8e:8a:db:
50:d3:a7:a3:b5:d0:86:49:63:37:22:a8:2d:e5:d0:dc:63:75:
ef:10:31:8c:34:ca:8a:63:17:23:65:81:97:2a:1c:ae:c2:b7:
13:6d:93:f7:6e:dd:ba:bf:b4:06:36:68:ec:fc:68:3e:bf:f2:
b6:f3:47:58:e8:c0:db:ec:67:9d:14:d5:3a:9d:c0:ac:ad:5c:
bf:6b:49:fa:1d:15:4e:5a:36:9d:36:68:9f:68:57:e8:b9:56:
85:ff:9e:b5:99:e0:0d:bb:09:4d:5b:ca:7c:9a:82:db:9a:80:
75:cb:99:68:fc:08:d6:f4:ad:ac:1e:9e:57:14:53:03:6e:1c:
e7:e9:15:1b:ca:13:97:34:68:21:bc:f0:6e:4e:1a:92:c3:2d:
f9:36:a4:c3:bc:0c:98:55:e4:0a:26:fa:d7:5e:bb:b4:ca:d0:
82:2d:b4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:52:06 2026 by rpki-client