
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa
File: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (raw, json)
Hash identifier: ztZRgaXUDlz+suazGGurQouD2lrLzAX+Obh7oeSoFpQ=
Subject key identifier: A5:E9:C9:CA:EF:C0:57:1B:42:6E:16:55:7E:58:17:99:95:14:A4:8C
Certificate issuer: /CN=B679ABD48A919D142B31732EEB7434BD0864B337
Certificate serial: 418C03E59688E2519CF7B80C923D2AC4123D0FF7
Authority key identifier: B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa
Signing time: Sun 03 May 2026 02:57:42 +0000
ROA not before: Sun 03 May 2026 02:52:42 +0000
ROA not after: Sun 02 May 2027 02:57:42 +0000
asID: 138128
IP address blocks: 103.96.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl
rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:8c:03:e5:96:88:e2:51:9c:f7:b8:0c:92:3d:2a:c4:12:3d:0f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B679ABD48A919D142B31732EEB7434BD0864B337
Validity
Not Before: May 3 02:52:42 2026 GMT
Not After : May 2 02:57:42 2027 GMT
Subject: CN=A5E9C9CAEFC0571B426E16557E5817999514A48C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:71:5c:83:47:73:ec:ee:fe:49:87:b8:0a:
7c:8a:7c:fe:19:4a:ad:fe:bf:40:67:21:a0:94:0c:
dc:9f:98:5a:54:84:09:58:46:3a:9e:e2:1c:f5:18:
89:37:2e:5d:b7:dd:b7:2a:63:a1:8b:0d:97:6b:e1:
55:b7:1c:39:89:c1:0d:d3:84:de:80:3b:c0:35:5c:
cc:42:6f:96:49:01:0e:6b:28:37:54:0d:73:4e:ce:
32:a5:0b:e0:62:74:7f:6b:1b:2e:ac:e2:7f:25:04:
66:13:f6:1f:aa:99:44:29:54:2c:ac:9a:c7:8d:31:
55:2e:72:ff:62:35:84:15:d0:4d:5e:cd:53:9d:3e:
92:0c:e2:a1:e6:59:b8:88:86:5b:6e:e1:a3:4e:b8:
12:3d:8f:72:cd:eb:08:5f:e2:bd:b3:1b:31:91:bd:
53:45:93:4a:6d:4c:f3:c6:ba:f4:1e:92:72:18:9a:
79:07:13:a2:ba:90:3d:44:99:3b:18:99:61:ee:ae:
0a:c5:82:aa:2a:92:21:da:48:de:69:1e:09:39:a2:
e0:2b:36:48:ee:5b:c8:47:00:8f:bc:43:3c:de:68:
05:2c:e5:99:38:a5:27:1c:b8:e3:01:84:db:93:0d:
ce:90:66:3c:f1:da:9a:a8:e8:59:e6:69:11:9a:45:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E9:C9:CA:EF:C0:57:1B:42:6E:16:55:7E:58:17:99:95:14:A4:8C
X509v3 Authority Key Identifier:
keyid:B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.145.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:14:86:4f:ef:36:c9:c7:62:0a:c2:77:93:1a:fa:4d:64:02:
a7:ae:c6:a9:5e:c2:e4:dd:dd:23:ef:08:0a:7d:2c:09:08:b1:
1b:6d:7e:93:5d:82:0c:6a:8c:ea:12:06:db:2d:fb:31:0a:22:
a6:e5:70:ed:d1:27:22:e5:e8:37:43:81:5d:8c:e4:a9:1c:fe:
d1:f2:55:22:fb:68:a2:5c:90:12:5c:6e:29:d3:77:49:dc:03:
1a:b3:fd:ef:3f:51:e4:7f:2b:65:6a:fc:df:15:eb:cd:c9:fb:
eb:51:f2:35:ca:00:32:10:ec:dc:3f:a1:30:0a:7c:84:2d:40:
92:0c:17:10:12:0e:25:f0:b4:79:00:98:89:8f:7d:56:59:11:
3e:4a:98:ff:bb:8b:81:33:ae:6d:2f:76:66:69:bb:26:c4:1c:
d1:89:e8:7c:36:d3:26:7c:c9:19:f0:0b:8a:54:e0:a8:6d:ae:
24:11:ea:b7:dd:ce:fd:43:61:57:75:28:cc:be:71:62:cd:67:
67:e3:ce:da:78:2b:b6:7b:9f:81:6c:16:7c:44:10:70:79:05:
7b:60:11:2e:de:ef:b3:7f:75:00:c1:c0:8c:8e:ea:c7:07:c6:
cc:1d:1e:87:63:a8:f3:da:93:05:bf:1f:29:3d:d9:e8:ca:84:
7d:6d:d0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:08:27 2026 by rpki-client