
$ rpki-client -vvf rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa
File: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (raw, json)
Hash identifier: JtFDDBHLhFW7JsMlxs4g2eR/5c2AZrAbcpY0KNoiazs=
Subject key identifier: CF:A8:4F:57:4E:51:F4:6C:8C:72:7F:69:BF:FB:12:47:78:D9:F9:9C
Certificate issuer: /CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D
Certificate serial: 27B0F3B5E7B7C1277CF94F53E02B6BF75DA2ADA0
Authority key identifier: B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa
Signing time: Sun 03 May 2026 02:52:06 +0000
ROA not before: Sun 03 May 2026 02:47:06 +0000
ROA not after: Sun 02 May 2027 02:52:06 +0000
asID: 150951
IP address blocks: 103.196.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl
rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b0:f3:b5:e7:b7:c1:27:7c:f9:4f:53:e0:2b:6b:f7:5d:a2:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D
Validity
Not Before: May 3 02:47:06 2026 GMT
Not After : May 2 02:52:06 2027 GMT
Subject: CN=CFA84F574E51F46C8C727F69BFFB124778D9F99C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:98:e4:2c:03:b1:85:e7:30:99:c7:dd:f1:
19:3f:66:30:1f:3e:72:8c:5f:2c:f0:a6:58:8d:1c:
cf:0f:01:cd:c4:19:74:01:f6:c7:6c:f8:4f:3b:76:
b6:ed:b4:c5:e6:ab:98:e3:32:0e:a3:e2:12:b4:15:
39:82:08:37:b0:9c:f6:10:c8:16:5a:10:59:7b:47:
68:71:0d:36:ac:01:e1:78:d5:8c:90:51:11:71:b9:
d1:5c:e6:03:ce:4f:bb:2b:5e:a9:a7:82:8b:df:9d:
e1:47:80:b3:a0:d2:8b:df:48:a0:8f:4e:34:b4:c0:
d4:84:19:b0:98:db:94:38:68:60:aa:f9:36:50:ba:
3e:bf:17:cf:e7:b0:e8:d3:51:34:a6:85:67:cc:7b:
1d:43:e2:a0:31:b2:6a:b2:20:09:cf:4b:95:1a:2c:
ec:de:5e:e6:e8:32:78:ff:db:9c:9f:db:d2:97:26:
9d:0c:2b:63:4b:66:3e:40:84:bc:6e:5e:aa:f5:e4:
25:a6:93:1b:3b:7b:07:f3:82:11:91:95:e3:c0:f3:
70:36:ae:e5:e0:1a:78:9f:22:4c:a8:bf:cc:63:91:
e3:a1:de:94:d7:de:54:bd:97:0e:79:df:b1:ab:40:
7b:4b:85:15:3a:12:69:8e:4c:51:3f:7e:71:ce:72:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A8:4F:57:4E:51:F4:6C:8C:72:7F:69:BF:FB:12:47:78:D9:F9:9C
X509v3 Authority Key Identifier:
keyid:B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.196.156.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a7:ed:62:51:97:37:73:65:3c:31:6b:96:f9:bd:be:65:95:
7c:f8:4f:ae:9c:4d:25:b0:4f:21:42:4b:74:8d:7f:37:b9:ed:
33:e0:e7:83:b9:20:3a:3b:58:e5:fa:cf:fb:7d:07:a5:d6:76:
c1:55:39:6f:ab:84:76:02:7a:52:f9:76:af:cc:89:67:9b:c0:
fe:e3:4d:e2:4d:5d:91:d4:e1:6a:ca:6e:69:7f:23:23:d2:00:
20:89:3f:c8:ff:b7:da:13:db:a9:42:cc:c3:69:f3:a6:5e:9d:
ed:a9:43:f8:6f:45:af:31:42:13:ed:e8:ff:c1:65:6a:d4:6b:
3c:59:58:c8:5c:8b:15:0b:ad:8d:cf:06:12:5b:48:df:67:6a:
f9:24:1b:90:79:cd:1f:97:dd:0a:b7:de:d7:18:f4:50:0d:c1:
01:3d:5c:96:6c:16:cc:58:9e:19:ef:76:c8:3d:d2:1d:0f:91:
94:ce:e7:fb:fa:f4:3a:3b:b0:a4:58:e8:33:74:30:b5:30:5c:
68:45:2e:43:32:39:d6:28:ec:00:c8:62:ef:0c:f1:04:51:71:
82:ec:41:72:e2:45:47:2f:4a:3a:ac:3a:e9:41:de:67:1a:da:
79:1b:66:2d:32:2a:ec:78:96:dd:ac:39:5e:53:eb:78:a3:2c:
83:15:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:30 2026 by rpki-client