
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa
File: 3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa (raw, json)
Hash identifier: Q3RsZBk5q9tyrBDMlbDRl2T3DfnBOVkpF/7xiffBucI=
Subject key identifier: 49:59:50:58:6D:95:26:FF:E4:DC:FE:04:F5:28:13:3C:E0:88:A5:4D
Certificate issuer: /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial: 1D36EF8A9258080995A68EA49FE62ADCA4382505
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa
Signing time: Sun 03 May 2026 02:57:04 +0000
ROA not before: Sun 03 May 2026 02:52:04 +0000
ROA not after: Sun 02 May 2027 02:57:04 +0000
asID: 132647
IP address blocks: 103.19.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:36:ef:8a:92:58:08:09:95:a6:8e:a4:9f:e6:2a:dc:a4:38:25:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Validity
Not Before: May 3 02:52:04 2026 GMT
Not After : May 2 02:57:04 2027 GMT
Subject: CN=495950586D9526FFE4DCFE04F528133CE088A54D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:67:dc:8e:78:e1:76:7a:91:08:35:dc:16:
82:f8:67:a2:a3:8d:b8:83:08:b0:59:74:79:5c:99:
68:b7:41:13:a6:0a:c5:72:40:84:7c:ec:7f:bd:d5:
31:8f:29:41:b8:ab:b5:07:ce:7e:39:97:7e:67:e6:
62:39:39:1a:20:6e:93:77:d3:09:6b:dd:2c:72:3e:
cb:f9:a3:73:78:78:28:09:6d:95:36:01:2d:6f:f4:
a0:6a:8b:48:18:4c:c5:b8:e2:06:45:2c:f2:89:7d:
5d:5d:e7:a0:16:15:0a:72:4b:77:db:6f:49:27:13:
15:9b:c6:42:4a:73:e5:92:10:b6:db:cc:b4:d1:32:
fa:df:45:15:e7:7e:bc:ca:c4:0d:40:30:57:c3:d5:
e6:35:68:39:8d:51:bb:3f:b9:30:12:5f:87:16:37:
b5:ff:89:fa:38:c3:a6:50:fc:c9:18:dd:dc:8f:18:
9e:bc:52:50:81:62:16:0b:ff:fc:ce:9c:a3:3e:48:
73:46:75:67:07:f5:c3:2c:e7:a1:3a:e4:0d:3c:16:
0f:31:ab:0e:4d:02:d8:49:55:dc:4e:38:89:64:1c:
8c:f7:c3:21:86:fc:46:7d:51:b3:b3:26:36:79:6c:
7d:3a:e2:63:74:58:00:cf:3c:4f:88:c3:8a:87:90:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:59:50:58:6D:95:26:FF:E4:DC:FE:04:F5:28:13:3C:E0:88:A5:4D
X509v3 Authority Key Identifier:
keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.19.176.0/24
Signature Algorithm: sha256WithRSAEncryption
50:9c:89:9b:96:84:fe:f7:d3:e4:d4:64:5c:a9:80:aa:1f:32:
78:14:7b:81:35:b7:f3:3a:ce:26:0d:5a:9e:c9:99:6f:8b:c2:
a2:26:d7:2b:39:fb:30:c5:68:40:b2:6f:99:2d:6e:e9:e1:9f:
3b:99:3d:0b:4e:ea:bf:a2:6b:7d:60:f4:92:ab:0b:16:84:50:
ce:a0:8b:05:44:e1:e8:76:11:b0:22:17:b5:b7:61:36:b7:03:
37:27:80:a0:f3:d4:0e:16:d4:3b:fb:3e:79:12:43:bb:54:18:
99:88:13:34:f7:7d:9f:ef:2d:8a:99:db:ad:2e:56:2e:a4:f2:
fe:bf:7b:d8:db:b7:3c:14:22:f3:64:c8:06:aa:2e:b2:79:cd:
f4:30:b0:4e:6d:ab:55:0e:88:b5:50:75:22:4a:ee:9e:61:0e:
ce:0a:a6:dc:2e:70:1a:a9:42:72:00:ad:19:7d:6b:02:6f:27:
57:d4:35:98:2b:ac:bc:ae:dc:fb:2d:f5:31:e2:67:7d:2d:e3:
20:c7:6d:25:1b:b9:31:45:5d:19:4c:4e:a0:7f:09:a0:c4:64:
e9:3c:ef:aa:23:22:88:6a:57:98:01:39:26:e6:e9:c7:8d:82:
5d:85:d9:9d:24:e0:69:03:f1:ad:e9:25:c4:33:8d:7c:21:5f:
9b:01:70:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:19 2026 by rpki-client