
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa
File: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (raw, json)
Hash identifier: SnKbiJCVGtegt8XCckG5YzkpcAALoWkVUsik+AGbmDg=
Subject key identifier: 0E:4A:DA:E3:25:8D:3B:9C:86:41:F5:97:59:7F:5F:30:CF:36:91:61
Certificate issuer: /CN=591286FA978EE719A57E5A972B00E176D16D8BD5
Certificate serial: 64B5214A9C8A529FB45A705F6ED5FB1ADB088D34
Authority key identifier: 59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa
Signing time: Sun 03 May 2026 02:54:15 +0000
ROA not before: Sun 03 May 2026 02:49:15 +0000
ROA not after: Sun 02 May 2027 02:54:15 +0000
asID: 150501
IP address blocks: 103.120.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl
rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b5:21:4a:9c:8a:52:9f:b4:5a:70:5f:6e:d5:fb:1a:db:08:8d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591286FA978EE719A57E5A972B00E176D16D8BD5
Validity
Not Before: May 3 02:49:15 2026 GMT
Not After : May 2 02:54:15 2027 GMT
Subject: CN=0E4ADAE3258D3B9C8641F597597F5F30CF369161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:b1:40:4e:ac:ca:9f:e4:e4:da:44:f0:d6:
25:41:33:d2:e2:d2:e1:86:6c:86:0b:10:83:5a:d8:
9f:56:ae:49:40:9b:b0:eb:02:48:7f:91:67:17:6d:
eb:5a:e2:eb:5d:ee:a4:bf:c6:8b:58:7c:47:ad:a0:
50:96:6f:69:a8:99:45:49:e2:68:80:18:3c:4d:30:
98:d3:d6:b4:f7:80:f9:c4:de:91:01:d9:a1:04:83:
3c:7f:8a:8f:59:54:20:a3:41:0a:ce:42:c1:2a:83:
c9:98:90:3c:32:b8:e3:85:d1:18:67:8b:d0:c7:07:
b7:45:e5:df:1c:dd:33:15:cd:e8:1c:19:43:d2:b8:
c1:79:20:7b:c1:4c:8b:19:ed:c9:4f:3d:ff:2a:70:
92:6d:a6:60:36:2a:3f:10:c2:ce:5b:a0:a1:41:9f:
bb:f7:7d:5f:9b:fe:80:44:29:ec:ef:b1:15:9e:42:
62:f0:7a:78:46:d3:2a:51:d7:9b:03:ce:d5:75:27:
25:2c:f1:42:a0:22:16:34:2e:d4:75:d0:ac:05:da:
e3:33:b6:59:03:27:62:f0:8d:03:1b:ec:17:77:68:
9b:53:ea:e8:37:57:aa:e1:f9:69:c5:fb:f2:1d:d7:
cb:f2:54:e9:02:d2:83:02:a3:7e:fb:9f:b8:da:4f:
91:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4A:DA:E3:25:8D:3B:9C:86:41:F5:97:59:7F:5F:30:CF:36:91:61
X509v3 Authority Key Identifier:
keyid:59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.120.76.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f2:66:3a:33:bb:e4:8e:33:6d:8b:29:a8:1c:f5:ee:39:11:
44:5f:56:53:41:0d:15:e8:2d:fb:88:c4:b9:82:17:21:ed:83:
ff:62:d9:16:db:42:1b:ae:3e:65:7b:98:65:5b:0a:85:f2:a7:
f1:da:a9:cb:e9:0c:dc:23:c2:65:bc:4c:81:d7:0f:0a:8b:9c:
5f:ac:49:83:f4:22:b3:8a:a8:8c:70:89:50:cd:cd:13:63:53:
93:3a:e1:21:be:af:a4:4a:21:c6:aa:ac:62:f1:88:05:42:cd:
fa:7a:6e:36:20:2e:8b:56:90:84:bc:67:2d:a8:93:be:3f:52:
fb:cc:08:cd:60:fe:8f:7a:e8:34:b1:7c:e2:66:d7:10:1e:b2:
b1:73:06:00:fb:fc:57:5d:08:a0:a7:c4:c0:c5:59:7e:8a:5a:
be:4d:79:08:f2:fc:47:5d:86:93:95:c2:57:d0:ad:a3:06:a6:
47:c4:e0:4e:a1:b3:31:43:3e:9c:48:b8:4e:ed:59:98:a7:ba:
d9:70:5a:58:28:88:07:57:93:30:6a:e6:ec:8a:dd:ae:bc:57:
d3:89:17:f1:01:bf:62:41:6f:8d:dd:d3:ec:91:b4:bc:3b:ba:
da:48:3a:fc:e8:43:f4:4d:a3:ce:44:8e:b2:ee:9b:91:06:18:
33:fd:82:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:02 2026 by rpki-client