
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa
File: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (raw, json)
Hash identifier: cnrnucshQjB1HR7ilM8foFskZiCRkLLcdgQGq/I0/j4=
Subject key identifier: C7:8B:C7:E6:E8:09:13:78:13:CD:EB:32:16:7C:D1:6C:24:41:11:B0
Certificate issuer: /CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Certificate serial: 0D4E792B7A7E44D28BC56B72D431DAACBCC839DE
Authority key identifier: C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa
Signing time: Sun 03 May 2026 02:54:44 +0000
ROA not before: Sun 03 May 2026 02:49:44 +0000
ROA not after: Sun 02 May 2027 02:54:44 +0000
asID: 140409
IP address blocks: 103.151.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:46:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:4e:79:2b:7a:7e:44:d2:8b:c5:6b:72:d4:31:da:ac:bc:c8:39:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Validity
Not Before: May 3 02:49:44 2026 GMT
Not After : May 2 02:54:44 2027 GMT
Subject: CN=C78BC7E6E809137813CDEB32167CD16C244111B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:04:cd:b2:ca:ff:5b:f9:1b:43:9b:df:87:
77:03:4e:48:aa:0a:0e:8b:25:20:c9:d4:2b:f3:76:
7f:6f:3e:5c:f9:7a:0f:1b:28:e3:33:65:98:a8:39:
74:e1:3b:49:ce:49:42:4c:49:f6:9e:9e:04:d7:de:
3e:01:cd:c6:82:f8:c8:33:73:ee:eb:1b:3d:7a:3f:
44:a4:d6:75:e4:4f:9e:dc:c8:3a:ca:ec:15:ee:72:
b3:68:71:36:0f:01:c0:77:e9:70:c0:52:58:d2:49:
f9:9a:13:20:fc:1b:81:41:2f:e7:8f:21:71:75:be:
17:62:0b:94:2b:71:88:2f:04:fb:57:75:57:bb:29:
69:8e:71:0c:90:e2:be:41:10:e2:7f:36:52:0e:29:
e4:15:d5:4b:ad:ba:e5:b2:91:fa:b2:07:83:6a:20:
bc:4b:bd:58:29:7b:5e:9f:c5:9a:cc:ed:b0:8a:52:
4c:a3:ee:ae:30:dd:d6:82:af:3d:18:ce:46:b1:64:
bd:98:2d:8d:f0:0f:3c:a2:84:98:3c:3d:22:e6:e8:
26:6b:9e:23:a0:10:36:4c:c0:68:0f:a5:de:53:ba:
69:d6:a8:f1:cf:67:b8:ef:ee:7d:35:c0:57:2a:e3:
f3:f3:6a:5e:ea:c8:22:b8:6a:09:e5:43:ff:06:46:
fe:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8B:C7:E6:E8:09:13:78:13:CD:EB:32:16:7C:D1:6C:24:41:11:B0
X509v3 Authority Key Identifier:
keyid:C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.151.72.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:81:95:31:7a:24:33:8a:ef:46:4f:25:85:97:34:0c:11:79:
3e:31:48:a4:bb:51:8a:10:d7:f0:5e:2e:1e:f8:85:53:d5:4d:
2d:3b:79:0d:e2:6a:64:4a:7f:2f:b2:41:80:18:76:92:85:73:
68:58:c6:7b:e4:62:a9:7e:98:23:20:b4:ce:86:98:ae:c8:87:
50:5e:f7:e1:2d:c1:b2:47:a4:8e:51:e6:52:f8:1c:4a:57:a6:
fe:18:38:6d:c5:43:bd:38:6f:4a:2e:c8:01:bd:74:1d:be:0b:
2b:98:70:e4:bc:8a:68:be:b7:61:f0:0f:a2:8b:5b:43:7a:91:
b8:d5:d6:c2:44:1c:df:74:f7:e8:06:83:4e:b6:0d:ac:ab:56:
aa:2b:74:ca:30:d0:2b:80:9f:1a:c8:22:d4:05:da:41:bc:59:
b8:7d:ae:b3:c0:b0:5e:20:c2:0e:77:16:ba:04:55:77:31:7e:
fe:b9:7d:ce:e1:9a:e5:d0:9d:9c:a0:bc:e3:da:ea:cf:55:4e:
39:7c:f0:f0:47:7c:74:f3:af:c5:3c:08:75:51:7d:4f:47:46:
d0:cc:24:fa:fa:46:28:88:6a:9f:cf:c4:6c:0d:9b:2c:de:74:
78:29:4f:b3:e9:f2:9f:cb:69:27:a1:12:7d:6c:3d:6f:40:29:
f0:bf:53:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:18:52 2026 by rpki-client