
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa
File: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (raw, json)
Hash identifier: G626nf3IkAH7IIThn3UlVRBOX9wH92EFofVHExk6vxQ=
Subject key identifier: 6A:53:1C:D9:58:38:8C:6B:DB:23:23:A9:3B:61:64:4E:93:31:BF:58
Certificate issuer: /CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5
Certificate serial: 1D672E5FE86DB0A6720B072F885EF520AFFEAB70
Authority key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa
Signing time: Sun 03 May 2026 02:54:30 +0000
ROA not before: Sun 03 May 2026 02:49:30 +0000
ROA not after: Sun 02 May 2027 02:54:30 +0000
asID: 135480
IP address blocks: 103.76.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl
rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:67:2e:5f:e8:6d:b0:a6:72:0b:07:2f:88:5e:f5:20:af:fe:ab:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5
Validity
Not Before: May 3 02:49:30 2026 GMT
Not After : May 2 02:54:30 2027 GMT
Subject: CN=6A531CD958388C6BDB2323A93B61644E9331BF58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:57:9d:62:bf:52:b1:1a:bd:f6:50:9d:43:
fb:de:86:5d:62:0b:a0:40:39:b0:cf:36:ce:96:4d:
61:b2:c4:47:81:c8:94:1e:86:d0:0e:7d:52:08:a4:
10:49:4f:73:d9:fa:af:16:58:13:79:23:5f:00:57:
24:1b:ee:4a:c1:9c:5f:35:00:41:a3:95:1d:79:ba:
5a:44:19:78:e8:52:d2:12:f0:91:ee:b0:e7:a5:96:
86:8c:20:e9:09:a4:1a:a7:d4:59:e5:2b:5d:d4:43:
48:7a:89:b9:1c:6b:54:a7:97:ff:15:04:3b:41:83:
73:63:22:cc:98:33:73:97:b7:87:10:63:e5:bf:3f:
43:cd:b1:ef:10:0a:7f:af:ee:59:97:cd:99:fe:cd:
b2:f3:3d:e2:9c:42:50:d2:2c:5c:f1:c0:20:1b:74:
7c:36:bb:03:09:12:c1:3b:92:7d:93:e6:0e:91:4b:
18:e4:1f:51:22:85:cd:6d:d2:78:99:36:9f:36:06:
af:70:21:c8:5a:54:2a:a4:d1:2e:3d:2d:97:77:f9:
79:0e:91:90:76:df:75:39:a2:5e:f4:11:1f:6a:8f:
14:08:65:06:9b:d9:1b:3e:8c:c8:cb:4e:37:0c:cd:
b7:72:07:8d:08:70:61:70:5b:82:f6:4a:87:73:60:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:1C:D9:58:38:8C:6B:DB:23:23:A9:3B:61:64:4E:93:31:BF:58
X509v3 Authority Key Identifier:
keyid:B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.200.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:a7:37:e4:55:b6:12:bb:a3:0a:8f:24:c2:80:9e:21:09:0e:
33:7a:75:13:69:76:44:7a:2c:63:85:ef:2c:f9:47:11:f4:c2:
dd:df:59:76:e3:ec:6a:8d:2f:ea:eb:db:86:19:97:64:70:d4:
b3:e6:f4:11:a6:10:ad:e5:97:3f:bf:3a:fb:e7:84:28:45:0d:
b8:26:7d:07:d7:87:05:d4:fa:ba:3b:e3:17:bd:46:4d:6b:a9:
40:3e:71:63:fe:49:f6:fc:ab:01:d0:be:74:30:7e:92:45:51:
2e:f9:66:9f:ab:c2:7e:5c:98:de:76:51:8a:1f:8e:bf:a7:99:
78:b5:1d:f0:a5:67:4b:6a:d4:0e:a3:9b:1b:f3:05:3d:d9:60:
4c:99:75:21:1a:27:d9:bc:48:02:2a:0d:0e:84:ac:81:96:86:
e5:e1:8c:bc:03:03:f6:86:f5:7f:bb:96:37:0b:f1:8c:35:e5:
77:e3:39:30:a0:50:5b:8e:b5:e8:12:15:c6:e3:ea:c4:65:60:
f9:77:3b:30:2b:78:d9:a1:c0:32:04:be:a5:6f:fa:6d:5f:f2:
6c:f4:26:df:b3:33:00:d3:5b:62:db:8b:21:1b:03:ea:bc:96:
43:19:e6:3b:d1:f9:2a:ac:4f:ef:ea:c3:78:fa:41:92:95:fe:
45:6f:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:56 2026 by rpki-client