
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa
File: 3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa (raw, json)
Hash identifier: SYMIAQW6lQfm+rZplODVm3xwEprXIfjqtxhwRoNnM10=
Subject key identifier: 8D:F2:14:9E:10:AF:B9:E3:C7:97:24:EA:66:47:BC:40:09:54:66:31
Certificate issuer: /CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E
Certificate serial: 15F560E488C1BDB669D111CC900AC4E856204C51
Authority key identifier: 1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa
Signing time: Sun 03 May 2026 02:52:24 +0000
ROA not before: Sun 03 May 2026 02:47:24 +0000
ROA not after: Sun 02 May 2027 02:52:24 +0000
asID: 150985
IP address blocks: 103.228.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl
rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f5:60:e4:88:c1:bd:b6:69:d1:11:cc:90:0a:c4:e8:56:20:4c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E
Validity
Not Before: May 3 02:47:24 2026 GMT
Not After : May 2 02:52:24 2027 GMT
Subject: CN=8DF2149E10AFB9E3C79724EA6647BC4009546631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:86:e9:9c:67:ff:62:55:75:14:28:64:59:
46:28:f0:91:92:21:38:7c:09:f9:87:2b:db:55:68:
c5:84:e0:68:16:09:c6:29:19:a6:d8:f5:0b:61:0f:
51:c9:a2:cd:4f:8d:6a:98:ad:41:9d:85:b4:e7:53:
80:b6:bd:a2:95:7c:88:eb:a5:9b:af:e5:eb:77:41:
7c:da:24:69:76:0f:54:31:88:1c:54:1a:ff:17:e5:
a3:b4:b8:82:3e:d1:f7:2a:36:a6:2b:0d:57:0b:8d:
f8:41:e4:d1:1e:50:79:db:2f:e6:9a:ae:73:ab:d3:
88:f4:72:38:32:3f:42:e8:bf:fb:ed:e9:71:6e:0b:
5a:77:22:7c:f9:30:74:02:6c:10:f9:77:13:03:9d:
c8:71:67:78:2d:ca:ff:75:cc:26:7f:8b:20:2b:ee:
09:e7:93:e8:36:ac:59:1a:65:cd:ab:50:3d:c2:eb:
b5:db:2c:8c:b1:dc:d9:f7:9c:2c:a2:a6:8e:6e:ad:
51:d0:e7:15:75:09:84:a4:4b:de:fd:fe:fb:2c:1c:
e5:75:f7:71:2d:c2:8f:e6:e8:67:05:00:0a:4e:58:
2f:7c:a7:29:65:7b:e6:68:32:12:08:cd:47:7e:db:
c9:14:6b:a4:f2:7b:72:e6:ea:ab:92:3c:a2:08:bc:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F2:14:9E:10:AF:B9:E3:C7:97:24:EA:66:47:BC:40:09:54:66:31
X509v3 Authority Key Identifier:
keyid:1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.228.18.0/24
Signature Algorithm: sha256WithRSAEncryption
22:68:74:f8:5b:dc:e6:f8:73:25:bd:80:e4:c5:59:8c:bf:e7:
0d:ea:4f:c6:ab:05:62:d6:e6:65:e1:37:71:46:c9:f0:3e:b1:
fe:2f:89:8c:23:a1:89:eb:37:f1:44:ba:62:9e:45:0f:cd:fd:
2e:bf:24:2d:25:08:77:03:ed:ba:b6:0b:f2:7e:05:7d:ef:1e:
8f:91:88:80:2d:3a:48:1d:e7:37:6d:52:4a:59:2a:88:ae:bc:
82:5d:bc:a6:ee:fd:6b:6b:ac:66:6c:99:01:8e:4b:13:26:7d:
a2:20:05:43:a2:db:cf:c1:ae:ee:43:f0:3a:73:b3:62:5b:5b:
05:d6:42:83:93:2d:cc:c9:a5:aa:59:30:93:d6:70:f9:f3:f1:
cd:f8:69:63:e9:a1:43:3d:a4:d4:da:87:3a:91:7d:ab:5a:69:
f8:fe:bb:c2:36:2d:6f:68:34:40:07:ec:08:10:97:15:57:db:
cd:9a:6a:c1:cf:4e:ea:a1:45:54:3d:1c:69:e7:92:1c:43:12:
72:c2:c6:23:9a:81:75:73:63:eb:f6:7f:cf:21:3b:59:e1:b4:
d7:e1:43:88:13:4d:f4:0d:ba:cc:0f:ee:12:d8:09:8a:7e:8f:
ee:bd:38:de:e3:44:4b:b3:92:f9:48:1b:4d:50:f4:b7:73:3a:
e9:ef:b2:07
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFfVg5IjBvbZp0RHMkArE6FYgTFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ0RTIxQjVCMDZGRTlBMDQ2NDNBNzAyQzcyQjk2MTZE
NDUwREU4RTAeFw0yNjA1MDMwMjQ3MjRaFw0yNzA1MDIwMjUyMjRaMDMxMTAvBgNV
BAMTKDhERjIxNDlFMTBBRkI5RTNDNzk3MjRFQTY2NDdCQzQwMDk1NDY2MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPYbpnGf/YlV1FChkWUYo8JGS
ITh8CfmHK9tVaMWE4GgWCcYpGabY9QthD1HJos1PjWqYrUGdhbTnU4C2vaKVfIjr
pZuv5et3QXzaJGl2D1QxiBxUGv8X5aO0uII+0fcqNqYrDVcLjfhB5NEeUHnbL+aa
rnOr04j0cjgyP0Lov/vt6XFuC1p3Inz5MHQCbBD5dxMDnchxZ3gtyv91zCZ/iyAr
7gnnk+g2rFkaZc2rUD3C67XbLIyx3Nn3nCyipo5urVHQ5xV1CYSkS979/vssHOV1
93Etwo/m6GcFAApOWC98pylle+ZoMhIIzUd+28kUa6Tye3Lm6quSPKIIvGmBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUjfIUnhCvuePHlyTqZke8QAlUZjEwHwYDVR0j
BBgwFoAUHU4htbBv6aBGQ6cCxyuWFtRQ3o4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTMyOTc5M2UtOGYxOC00MTE2LTkyNjgtYTEzM2RhZjExY2VmLzEvMUQ0RTIxQjVC
MDZGRTlBMDQ2NDNBNzAyQzcyQjk2MTZENDUwREU4RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xRDRFMjFCNUIwNkZFOUEwNDY0M0E3MDJDNzJCOTYxNkQ0NTBE
RThFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkzMjk3OTNlLThmMTgtNDExNi05
MjY4LWExMzNkYWYxMWNlZi8xLzMxMzAzMzJlMzIzMjM4MmUzMTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+QSMA0GCSqG
SIb3DQEBCwUAA4IBAQAiaHT4W9zm+HMlvYDkxVmMv+cN6k/GqwVi1uZl4TdxRsnw
PrH+L4mMI6GJ6zfxRLpinkUPzf0uvyQtJQh3A+26tgvyfgV97x6PkYiALTpIHec3
bVJKWSqIrryCXbym7v1ra6xmbJkBjksTJn2iIAVDotvPwa7uQ/A6c7NiW1sF1kKD
ky3MyaWqWTCT1nD58/HN+Glj6aFDPaTU2oc6kX2rWmn4/rvCNi1vaDRAB+wIEJcV
V9vNmmrBz07qoUVUPRxp55IcQxJywsYjmoF1c2Pr9n/PITtZ4bTX4UOIE030DbrM
D+4S2AmKfo/uvTje40RLs5L5SBtNUPS3czrp77IH
-----END CERTIFICATE-----
Generated at Wed May 13 08:10:35 2026 by rpki-client