
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa
File: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (raw, json)
Hash identifier: 6IFvIlwM6aIx7tnOnE1+rdakVYbeL0dKrUmRNu3aOIc=
Subject key identifier: 97:47:B4:7B:FF:8F:D1:7A:2F:ED:09:6E:31:B8:96:79:CA:50:AA:7B
Certificate issuer: /CN=C855F0A07BFEA69901C5345D79932B70E2991F5E
Certificate serial: 2DAEB91559B09F15F1E48D226F3FE5BD1E0A1F5D
Authority key identifier: C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa
Signing time: Sun 03 May 2026 02:57:17 +0000
ROA not before: Sun 03 May 2026 02:52:17 +0000
ROA not after: Sun 02 May 2027 02:57:17 +0000
asID: 151581
IP address blocks: 103.169.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl
rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ae:b9:15:59:b0:9f:15:f1:e4:8d:22:6f:3f:e5:bd:1e:0a:1f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C855F0A07BFEA69901C5345D79932B70E2991F5E
Validity
Not Before: May 3 02:52:17 2026 GMT
Not After : May 2 02:57:17 2027 GMT
Subject: CN=9747B47BFF8FD17A2FED096E31B89679CA50AA7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a0:db:ee:81:31:99:22:45:b6:1f:21:05:73:
62:5b:41:58:76:04:b0:3c:9d:5c:c9:75:fe:69:48:
e2:f5:f3:89:5a:f3:80:21:b3:d5:f0:c2:55:17:78:
3d:6f:25:08:91:7a:58:e3:69:df:8d:a4:9f:ea:e3:
23:43:42:74:e9:31:7f:87:48:56:21:f9:81:98:c3:
cf:d3:fe:da:ae:60:6f:6f:ab:0f:21:49:86:f5:7b:
dc:f2:f7:b6:46:c1:ad:6a:9b:9a:78:8e:79:8d:35:
0a:c1:db:ee:b3:40:9c:31:0d:34:2e:8e:e2:96:30:
ac:61:26:06:8c:0c:32:cd:83:3b:43:dc:9a:67:25:
cf:aa:a8:ec:fb:1b:2d:03:90:d4:05:bd:e8:b4:2c:
f2:5b:41:54:ba:94:27:d5:eb:35:b9:cc:18:47:5a:
f3:e7:b7:db:67:72:c3:25:d9:73:bc:f9:5a:ff:c5:
85:25:9c:ca:ab:49:5f:c1:52:cd:00:47:4d:98:75:
79:e5:3d:29:fd:5c:d3:e6:47:35:81:86:50:74:1e:
01:80:bb:fe:77:47:ca:ec:05:49:52:cc:43:bb:a6:
bc:70:08:a6:31:d7:71:a7:24:d9:42:af:31:71:f3:
7c:7d:95:7f:36:3c:58:b2:ad:a2:c5:c3:0a:83:70:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:47:B4:7B:FF:8F:D1:7A:2F:ED:09:6E:31:B8:96:79:CA:50:AA:7B
X509v3 Authority Key Identifier:
keyid:C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.143.0/24
Signature Algorithm: sha256WithRSAEncryption
16:03:b3:63:40:18:c6:23:de:0b:01:42:d3:17:e3:a8:9c:53:
71:b7:ef:f7:6f:ab:1a:64:da:cf:53:e6:3d:13:fb:8b:cd:e9:
1a:09:be:14:54:e3:38:f9:10:a0:14:bc:55:66:5c:74:10:8a:
bf:b9:e1:e0:aa:4e:b9:3d:7e:40:dc:25:db:9f:b3:11:6f:73:
28:55:b2:c7:b4:57:eb:7b:2e:40:89:75:a6:6f:39:87:15:21:
2a:d5:fb:27:05:d5:78:82:a9:23:3a:d0:ac:9f:21:6a:69:82:
70:6c:4d:46:bb:f7:7c:81:23:93:c4:d5:75:61:03:3c:34:dd:
05:68:9e:66:14:de:97:7b:8b:61:d2:5e:f8:06:b9:e4:f3:06:
66:27:f5:80:96:0c:50:50:62:b3:0d:42:55:ed:e2:7f:b0:2f:
b2:5e:a8:15:24:d8:be:9c:d6:a6:d7:66:ab:74:19:0e:ca:8a:
9e:16:52:54:c8:7d:34:7c:5c:e7:46:68:df:f7:74:b9:f9:cd:
03:47:92:19:e4:d3:8c:b1:9b:bf:9e:ce:0d:8d:7a:a6:1f:09:
5d:f7:b9:37:fc:48:41:96:1f:21:99:0a:48:32:dd:44:fe:70:
08:24:37:52:2c:43:b3:43:68:db:7c:cf:52:ab:61:97:cd:5e:
7f:2f:ad:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:32 2026 by rpki-client