
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa
File: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (raw, json)
Hash identifier: yAzMQkLI2YElNnNv3RsEoxmgF9F1Ze8FCH2iEusLcbI=
Subject key identifier: 70:05:04:7B:07:D0:82:E1:D6:46:69:70:82:B1:2C:DD:53:C8:74:70
Certificate issuer: /CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7
Certificate serial: 1B2A79886E01597443CAB62A78A24300FD5972D0
Authority key identifier: 85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa
Signing time: Sun 03 May 2026 02:54:20 +0000
ROA not before: Sun 03 May 2026 02:49:20 +0000
ROA not after: Sun 02 May 2027 02:54:20 +0000
asID: 136116
IP address blocks: 103.112.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl
rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:2a:79:88:6e:01:59:74:43:ca:b6:2a:78:a2:43:00:fd:59:72:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7
Validity
Not Before: May 3 02:49:20 2026 GMT
Not After : May 2 02:54:20 2027 GMT
Subject: CN=7005047B07D082E1D646697082B12CDD53C87470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:63:b6:80:2f:70:f9:7e:65:e5:21:d9:f1:03:
b2:ba:d4:44:66:5e:29:98:8e:5b:7b:38:b1:22:a4:
af:d1:74:00:e6:42:e5:b8:41:d3:7a:1b:c8:11:2d:
fe:75:e8:16:b5:74:50:db:6c:63:11:40:a4:89:28:
e4:13:c2:87:74:85:31:8c:f7:0e:42:69:d8:2f:76:
1c:bd:6d:c7:b3:7e:b8:c7:4a:d6:62:47:4a:5c:0a:
46:52:99:84:85:4c:6e:71:33:e4:dc:53:36:20:dd:
80:2f:71:d5:84:41:c9:d0:19:70:b4:7c:0f:37:1d:
ac:d1:f0:71:6f:da:20:23:7a:f1:a4:91:ce:82:5b:
16:ee:5e:ef:e0:52:63:34:80:3f:23:4f:4e:ff:03:
be:cb:70:54:aa:f8:7b:36:ef:55:24:5d:64:df:e4:
61:0f:27:58:1d:5e:4f:8b:34:1c:af:1a:8a:fd:73:
93:fa:2b:e6:b6:92:ab:71:d7:16:c6:78:d2:8b:8b:
c2:bd:9a:d0:e0:1b:c9:ac:97:b3:36:b6:68:70:04:
72:8d:a5:ea:e9:d8:12:5f:b5:ea:00:ea:e7:50:d2:
1f:23:1a:ce:99:f0:a2:b2:cc:ff:09:a5:f7:d7:db:
0b:51:49:45:63:85:18:b2:a6:ec:a3:e0:19:84:38:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:05:04:7B:07:D0:82:E1:D6:46:69:70:82:B1:2C:DD:53:C8:74:70
X509v3 Authority Key Identifier:
keyid:85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.228.0/23
Signature Algorithm: sha256WithRSAEncryption
21:19:d4:0a:85:d0:c2:6c:65:d1:d3:80:32:d2:53:04:b8:a7:
ab:7c:c7:a2:c4:4c:6e:d5:00:ca:e9:b5:12:47:fe:36:4d:2c:
45:bc:00:0d:5f:af:f2:48:22:a1:18:c0:4f:09:ca:80:99:d9:
25:aa:d1:e8:07:84:ff:e5:98:e7:92:70:97:e1:7b:ea:15:34:
fc:ab:56:14:3a:7c:2c:6d:6c:4f:ac:08:03:97:95:89:b6:83:
28:0a:d1:30:4e:f6:d9:27:74:ef:30:f7:01:47:d5:d2:d6:9d:
5e:b3:d4:5e:b8:c4:34:50:38:1b:68:0d:42:49:5d:78:ad:74:
bc:46:b6:08:05:5b:1e:bb:15:0a:10:bc:90:6b:01:ac:dc:4f:
9f:8f:27:72:8c:da:e3:ca:b4:27:d6:72:ee:67:1a:2c:59:29:
4b:27:e3:e9:7a:36:63:4a:1b:e7:18:bf:a2:77:b7:a3:41:da:
26:c7:a0:d7:b7:95:51:29:e7:a6:6c:23:d4:22:de:1e:5d:03:
ee:65:89:e7:b9:9d:1a:08:50:4d:eb:f2:5e:2b:49:a8:35:fb:
74:87:62:e7:27:77:a8:4f:17:ed:10:51:08:f8:80:91:b5:62:
4c:16:d4:17:25:7e:63:2b:a0:18:11:78:0a:e1:13:91:9b:9d:
90:52:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:06 2026 by rpki-client