
$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32342d3234203d3e203633383237.roa
File: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier: NtkyFz71abqYBOulA/yf0usZVvUpaEttpy+f3u3kpp8=
Subject key identifier: 98:BB:B1:73:68:AB:67:F6:D1:0B:3A:F3:DD:77:95:DF:A6:03:8D:4D
Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial: 5AB703FF552FCE7E3173AC96C7C7CE868F4FBD03
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32342d3234203d3e203633383237.roa
Signing time: Sun 03 May 2026 02:52:01 +0000
ROA not before: Sun 03 May 2026 02:47:01 +0000
ROA not after: Sun 02 May 2027 02:52:01 +0000
asID: 63827
IP address blocks: 103.39.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b7:03:ff:55:2f:ce:7e:31:73:ac:96:c7:c7:ce:86:8f:4f:bd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Validity
Not Before: May 3 02:47:01 2026 GMT
Not After : May 2 02:52:01 2027 GMT
Subject: CN=98BBB17368AB67F6D10B3AF3DD7795DFA6038D4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:ef:3b:1b:b4:4e:ca:fb:06:55:f8:13:a7:
f5:2b:16:bd:8e:a7:65:4c:01:8f:81:60:da:ff:ac:
b3:8e:17:02:a5:d6:73:aa:83:6f:b8:72:94:22:ad:
f5:66:68:79:be:13:f1:5c:e3:49:0b:e4:f7:4c:2a:
22:96:41:8c:ae:31:3f:2b:57:3e:29:9b:64:47:9b:
df:33:bf:ea:66:f7:6b:bf:ad:07:42:fc:bf:d7:ec:
ba:b7:3a:bd:2f:eb:d3:6a:d0:30:33:06:27:01:e3:
8f:81:09:16:5b:78:00:41:9c:87:c8:21:57:56:35:
af:ff:e4:ff:34:31:1d:33:dc:d3:f1:93:f5:6c:70:
9e:60:db:e2:b8:99:c4:c5:f7:83:ee:ad:df:1e:22:
61:0e:ba:35:3c:4d:fa:e9:ed:ed:8a:e0:cc:b5:d7:
6f:f0:d1:b0:a8:a5:be:5d:43:a0:dc:14:59:6d:8a:
80:ff:dd:de:78:e2:18:45:77:40:4d:11:ef:e3:b4:
8a:31:65:1b:7f:1d:39:7e:1a:b2:fd:4d:9f:27:27:
e0:8e:65:44:ec:fd:26:b1:5f:aa:eb:f4:87:8a:bd:
db:6a:c9:3c:e4:a7:c8:57:26:38:5e:4b:68:b4:32:
ed:c0:1e:d1:b8:de:89:79:54:aa:f5:77:b7:a7:d9:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BB:B1:73:68:AB:67:F6:D1:0B:3A:F3:DD:77:95:DF:A6:03:8D:4D
X509v3 Authority Key Identifier:
keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32342d3234203d3e203633383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.12.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:b8:e2:c2:17:d5:e7:85:ca:1e:e8:09:d6:dd:26:73:d3:45:
f9:64:ac:aa:6e:04:80:49:51:a2:60:c3:27:4c:ee:40:bb:76:
f5:58:6a:43:bf:58:54:f3:e6:a1:91:ec:11:e0:21:7e:9c:fc:
60:97:c2:67:ef:c2:c2:75:96:80:00:33:1d:11:65:78:39:5b:
22:28:fc:f8:e0:3e:5e:61:c7:ab:55:f3:94:80:ce:73:c6:dc:
75:f7:fb:9d:f0:85:52:53:6b:62:fc:0d:41:af:fa:44:08:0c:
e5:1c:56:84:63:e5:52:1f:ec:e5:c5:15:1e:d4:e4:a5:01:c5:
43:7d:d1:cc:66:ba:a6:e2:e3:5a:05:9b:9e:16:5a:60:72:f7:
7a:56:00:98:54:bb:02:0f:63:53:aa:e4:a7:70:27:e9:aa:60:
41:30:56:75:32:88:61:a6:bb:5b:cf:90:ea:69:8b:7f:ca:22:
3b:dc:3f:f1:d5:9f:e7:30:ab:f3:53:3e:54:3d:8b:01:95:65:
88:ef:7c:b8:60:4a:1c:d6:f6:34:10:b3:f3:b5:10:e3:b3:9e:
40:f5:e1:67:55:83:6c:9d:45:c7:32:67:7c:41:db:d4:b7:11:
12:20:9f:c5:67:72:8c:7b:11:15:43:7a:82:ec:4d:fd:a8:2c:
2e:ed:9a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:17 2026 by rpki-client