
$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31332e302f32342d3234203d3e203633383237.roa
File: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier: RlgIs0QjanrifNmC6pZ/6muj/iE2ejRnuLFDY7kN47g=
Subject key identifier: F1:54:A1:7C:45:75:9A:2B:1B:5B:8D:1D:0C:A0:41:8F:44:0C:B8:1A
Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial: 4638B3AF4E6B4BA763C259CE87473FEA1645B6CB
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31332e302f32342d3234203d3e203633383237.roa
Signing time: Sun 03 May 2026 02:52:00 +0000
ROA not before: Sun 03 May 2026 02:47:00 +0000
ROA not after: Sun 02 May 2027 02:52:00 +0000
asID: 63827
IP address blocks: 103.39.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:38:b3:af:4e:6b:4b:a7:63:c2:59:ce:87:47:3f:ea:16:45:b6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Validity
Not Before: May 3 02:47:00 2026 GMT
Not After : May 2 02:52:00 2027 GMT
Subject: CN=F154A17C45759A2B1B5B8D1D0CA0418F440CB81A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:ac:34:36:af:92:80:a0:ea:cc:1d:2f:13:
09:cf:5d:6d:38:02:a9:03:41:c6:be:68:86:3b:2b:
75:fd:56:18:5d:9a:1f:b6:dc:4f:6e:94:1e:eb:2b:
ca:34:58:1d:07:01:23:fd:4b:e2:a2:8f:fe:a7:93:
ab:63:8f:12:ee:18:9a:44:9d:23:e3:b7:08:68:a5:
3e:b3:56:1c:ab:7d:11:d6:b4:43:91:d9:34:db:d2:
76:63:70:0d:8b:23:41:35:ff:d6:00:00:d3:f8:a1:
1a:a8:d7:fe:bb:a3:78:a7:98:3a:e9:83:58:7f:8d:
64:b5:ea:fe:80:6c:58:5e:8f:ce:ba:24:db:99:45:
06:ee:e6:60:2b:7c:2f:1c:7e:ec:ca:33:cc:a8:05:
23:c1:98:f3:fa:1a:32:d3:3e:9f:17:89:8e:7f:5c:
7e:83:9b:f3:56:e4:24:f9:74:83:2f:a8:3b:21:32:
d0:bc:57:b3:dc:01:cb:88:a0:e1:ac:67:29:30:ab:
e0:dd:24:70:2f:ff:27:76:0f:52:2b:0e:c5:80:7f:
98:76:a7:88:fd:c9:16:3c:41:7e:2e:82:93:e8:c3:
e9:af:eb:15:b4:fe:ef:6a:e2:a8:19:c6:87:c3:3a:
8e:dc:d4:e6:d3:c9:5c:d9:0a:41:07:38:4b:21:e0:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:54:A1:7C:45:75:9A:2B:1B:5B:8D:1D:0C:A0:41:8F:44:0C:B8:1A
X509v3 Authority Key Identifier:
keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31332e302f32342d3234203d3e203633383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.13.0/24
Signature Algorithm: sha256WithRSAEncryption
90:18:e2:e4:bb:a9:1b:25:54:7e:ce:53:08:af:36:05:3b:b7:
cf:f0:52:00:68:ae:50:62:69:74:0b:d3:ae:21:55:c1:fd:5d:
01:d2:48:ca:e3:58:f7:2d:75:21:e4:f0:c4:ee:86:e3:38:12:
17:f5:be:49:1c:d3:08:79:c1:27:40:5c:3c:a2:ad:40:ce:85:
a1:7c:be:f3:32:d8:0f:a9:df:3b:14:27:15:c8:40:0d:48:42:
6c:bf:02:9a:3e:c1:84:35:7f:17:8f:a3:6a:f8:fb:dd:b0:7a:
44:b7:91:9b:5f:3c:ef:af:ec:ec:c6:e2:d8:50:67:26:51:8b:
4a:41:ed:0c:4c:8f:10:e2:23:d5:78:8e:a5:c4:26:28:99:a6:
e4:72:24:5e:be:ff:60:c4:de:8d:4a:8e:71:f2:5c:91:73:32:
b7:f8:e2:a3:3c:71:8a:d0:5e:32:47:b7:e7:13:1b:71:c7:18:
c4:08:b7:ea:44:61:6e:0f:63:3e:78:9d:47:9d:3b:53:75:5b:
ba:0e:66:30:43:5f:4a:7f:5c:3d:47:39:1c:37:d6:e1:46:33:
b7:35:12:c5:91:ce:c9:54:29:3c:a3:50:92:73:b2:8c:55:dc:
db:31:f3:3f:63:36:5c:e3:d3:a6:6e:e6:ae:5e:b0:56:fd:3d:
d6:84:6f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:20 2026 by rpki-client