
$ rpki-client -vvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa
File: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (raw, json)
Hash identifier: blqaAQUh+/Ci23PSpz6kWjhOXoOQ7V7lhdmAJgQyDKE=
Subject key identifier: 05:0B:FC:9F:80:56:94:84:59:61:4C:AB:38:C4:A7:60:80:9F:06:AF
Certificate issuer: /CN=D8435659F33EE1F7005A21C1387F49D353431808
Certificate serial: 0AB5526997AE92A41E1B3D20270B90ED5595A5E2
Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa
Signing time: Sun 03 May 2026 02:52:16 +0000
ROA not before: Sun 03 May 2026 02:47:16 +0000
ROA not after: Sun 02 May 2027 02:52:16 +0000
asID: 131706
IP address blocks: 103.247.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl
rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b5:52:69:97:ae:92:a4:1e:1b:3d:20:27:0b:90:ed:55:95:a5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808
Validity
Not Before: May 3 02:47:16 2026 GMT
Not After : May 2 02:52:16 2027 GMT
Subject: CN=050BFC9F8056948459614CAB38C4A760809F06AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:09:0c:81:d7:db:14:bd:d2:e7:57:b8:34:
c1:04:29:ce:12:35:cd:5d:9b:f6:b0:83:35:ee:cb:
ab:1a:a0:35:0b:c4:d4:d1:11:a1:a3:9e:a3:94:79:
45:b2:2a:fd:80:69:a8:1a:88:36:f3:2e:d8:54:32:
60:52:43:62:a3:a4:5c:dc:26:e3:f8:7f:18:80:dc:
4e:41:3e:5d:0a:29:3e:3c:fb:24:17:23:8d:7a:bf:
26:ac:e6:58:6e:c4:a5:e8:0b:57:bd:23:80:cd:f8:
35:15:87:22:f0:f6:cc:d1:6b:6b:e8:3c:e8:65:86:
7e:e1:ff:4a:5e:94:02:05:fa:53:c3:91:60:98:af:
ee:04:5c:9c:8a:c5:19:f5:c7:8a:c9:24:54:74:ca:
b4:28:e7:0c:cc:e1:a8:d4:25:fb:b3:40:1a:a4:3c:
13:f4:75:7d:ac:fc:76:b1:51:8c:24:85:fd:1f:d9:
55:bd:87:e3:98:7d:26:55:ce:a8:4e:a1:4b:66:0c:
06:19:3b:d6:64:27:c6:2f:d6:64:9b:8a:3c:c8:a1:
ec:0d:f6:90:9c:a1:a7:b0:8a:cf:69:40:c9:1d:71:
51:37:ac:9e:c6:21:c8:7a:46:5e:f1:35:e9:2e:fa:
86:cc:3b:20:d5:70:bb:5f:5e:0c:bc:99:ff:8c:e8:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0B:FC:9F:80:56:94:84:59:61:4C:AB:38:C4:A7:60:80:9F:06:AF
X509v3 Authority Key Identifier:
keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.14.0/23
Signature Algorithm: sha256WithRSAEncryption
88:71:aa:87:2b:d6:fc:68:d8:18:12:70:77:c6:7b:a8:50:13:
4b:79:d5:c7:cc:38:12:3d:4f:93:27:54:47:cb:87:37:60:e3:
de:ca:73:c9:e4:ee:7b:de:31:05:47:f0:a8:f9:c7:f4:26:4c:
19:cd:8e:81:72:31:89:96:81:0b:8a:a9:3b:0d:14:24:be:06:
3a:89:76:84:3b:55:1f:0d:9f:f8:f6:87:d7:27:45:5b:f8:45:
cb:89:a5:12:57:4d:c9:37:da:9a:68:b0:38:67:3c:b2:36:5c:
4f:38:1c:1f:ec:d0:38:83:81:38:e6:f1:fd:85:71:0c:ea:30:
66:b3:4c:b1:4f:0c:49:56:7e:52:80:26:4a:ad:8d:c1:e8:38:
8c:6e:1e:84:95:03:4b:de:42:ea:ec:bd:e6:73:fb:8a:91:22:
b4:74:f6:59:86:ea:bc:ed:e7:99:c4:8c:a3:81:8f:b5:18:b1:
0c:a1:6e:b6:a4:28:99:e0:cf:95:22:b5:40:bc:7d:d2:ec:3d:
f2:3d:da:e2:13:0a:1f:1f:49:17:8f:68:ce:b2:e3:02:24:03:
61:40:75:d5:d5:7c:4d:e3:ec:5b:2a:ff:e8:e0:fb:2f:cf:b1:
cf:d0:1e:6c:a8:11:a1:f9:16:c3:0f:71:a7:e3:e5:ad:9a:1c:
17:97:e5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:51 2026 by rpki-client