
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa
File: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (raw, json)
Hash identifier: 6Vy3iy991tbMeWN8XgwIw7kSD92akdQ0AseMbxbKJxY=
Subject key identifier: EA:22:B8:B2:0C:3A:A9:2B:6E:DF:7A:02:F2:DF:42:48:81:B9:60:F6
Certificate issuer: /CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
Certificate serial: 329AFAC1D14566979B807B72604E84AF5766F5CF
Authority key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa
Signing time: Sun 03 May 2026 02:54:59 +0000
ROA not before: Sun 03 May 2026 02:49:59 +0000
ROA not after: Sun 02 May 2027 02:54:59 +0000
asID: 142340
IP address blocks: 103.169.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl
rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:9a:fa:c1:d1:45:66:97:9b:80:7b:72:60:4e:84:af:57:66:f5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
Validity
Not Before: May 3 02:49:59 2026 GMT
Not After : May 2 02:54:59 2027 GMT
Subject: CN=EA22B8B20C3AA92B6EDF7A02F2DF424881B960F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:0b:de:be:38:8f:e6:e7:a0:7c:12:28:e3:
76:42:8d:b2:1a:60:1a:15:bf:8c:7c:04:d8:c9:59:
bf:69:86:01:1e:00:7d:09:a8:d4:bc:e6:ae:6e:ab:
a2:74:e6:c3:03:2f:44:79:86:24:ba:ef:93:62:ca:
e6:29:de:17:6f:1d:34:c1:48:9d:b4:af:ad:61:d2:
d1:df:3e:c3:48:59:e1:e0:a3:68:5b:3c:28:69:d5:
1f:45:fa:04:01:80:39:8d:5e:be:ef:fb:12:7b:a4:
f6:89:31:64:29:a3:e6:af:3c:62:c3:63:d4:88:99:
b8:25:ca:7f:b4:f6:c4:9a:de:a9:6f:da:29:a2:8c:
0c:ae:4a:05:f5:41:01:b6:67:e4:e7:bf:63:86:d2:
ce:b9:f2:0b:e7:27:25:09:21:14:f2:4f:a1:6a:95:
f2:54:fd:cd:83:e5:7f:ca:70:0c:4c:4d:72:b4:fb:
f8:30:d9:1b:93:da:6e:7e:d7:a0:ff:76:f3:e0:dc:
44:2c:5a:eb:a8:05:fd:37:52:6e:0b:62:0e:a8:a3:
8c:6a:2c:ad:f0:f2:a7:bf:25:72:8e:55:ea:9c:a7:
c0:0f:52:d2:cb:48:ce:68:6b:68:0b:25:32:38:9b:
5f:f2:e2:ad:15:c1:27:97:d0:de:01:02:a1:bb:82:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:22:B8:B2:0C:3A:A9:2B:6E:DF:7A:02:F2:DF:42:48:81:B9:60:F6
X509v3 Authority Key Identifier:
keyid:4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.130.0/23
Signature Algorithm: sha256WithRSAEncryption
87:ee:be:4a:2f:44:eb:f4:6d:b2:83:6c:13:82:fd:f1:9c:13:
0b:8f:25:b1:d6:ce:b8:82:c1:29:9a:59:23:87:e6:32:5a:0d:
e4:92:62:95:87:b0:b5:c4:13:6e:c1:a8:a2:57:52:57:3a:72:
c6:ea:ad:33:bf:7c:00:36:3e:58:34:2a:b2:71:e5:96:e0:9e:
74:30:d8:79:41:9e:11:be:9d:59:77:e0:0f:b3:01:79:05:a7:
cd:69:31:d9:21:79:1e:50:5e:db:e9:5a:76:c8:27:69:df:7e:
ef:4d:75:e5:8e:9c:2d:26:d9:80:19:fc:1b:a2:53:8c:20:1a:
58:b3:c7:18:d3:5b:14:cf:a1:78:48:21:bc:b5:e7:72:d1:8e:
f0:ef:62:68:b7:2a:c3:ce:ec:3f:6d:8c:23:13:f3:ce:4b:a2:
e3:ba:1b:a4:db:fb:84:35:63:65:13:ec:23:76:a8:09:f0:f7:
e4:20:60:25:08:3b:08:a5:7f:1d:62:12:2f:e6:b9:0b:6c:f2:
a7:75:f2:59:01:96:1d:b0:a8:30:03:9b:8b:09:3e:d5:cf:f7:
1e:ac:03:87:16:91:ff:cc:cc:72:17:e3:49:96:ee:13:9d:0d:
67:af:30:fb:29:d3:55:5f:f2:93:3d:99:c3:9e:4e:aa:76:27:
17:24:a2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:13 2026 by rpki-client