
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa
File: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (raw, json)
Hash identifier: HMstQWwIQ4Ttwiw1acG6eiASnTbL+rVODQ6ae+mQEZ0=
Subject key identifier: 84:62:F3:36:AA:50:A9:D4:95:A8:AF:18:FF:F9:54:22:D6:87:1B:FE
Certificate issuer: /CN=B679ABD48A919D142B31732EEB7434BD0864B337
Certificate serial: 5F0A71075BCA119582F045ACA9A47EA9171640D2
Authority key identifier: B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa
Signing time: Sun 03 May 2026 02:57:42 +0000
ROA not before: Sun 03 May 2026 02:52:42 +0000
ROA not after: Sun 02 May 2027 02:57:42 +0000
asID: 138884
IP address blocks: 103.96.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl
rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0a:71:07:5b:ca:11:95:82:f0:45:ac:a9:a4:7e:a9:17:16:40:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B679ABD48A919D142B31732EEB7434BD0864B337
Validity
Not Before: May 3 02:52:42 2026 GMT
Not After : May 2 02:57:42 2027 GMT
Subject: CN=8462F336AA50A9D495A8AF18FFF95422D6871BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:93:ec:34:7f:f2:a6:6a:5c:67:6c:54:b2:
14:ed:4b:17:f1:7f:d0:0c:e8:89:d2:8f:ee:6d:2f:
f6:80:1b:42:16:0e:5a:dd:cd:bf:31:41:9d:a9:8c:
98:40:0e:01:28:3c:15:67:c3:9a:a3:b7:66:80:f1:
c6:d6:de:63:69:f8:10:69:12:0c:33:e4:cc:ec:7c:
c5:d3:a4:cd:65:7c:95:55:ad:c5:fb:95:0d:95:3e:
a2:c0:3e:89:57:6b:ca:a4:a1:6c:26:17:2f:92:b7:
e7:d8:f2:c0:bd:ef:28:59:05:28:df:82:e9:ad:1f:
a8:fa:20:2f:ea:57:ef:e2:1c:0d:0c:c0:36:fc:c7:
c1:6e:eb:40:ea:b4:48:d3:36:2a:c7:31:29:2e:fc:
40:44:72:f3:26:e4:22:cc:95:e6:a6:af:3a:ad:7b:
02:52:18:8e:76:8a:ef:98:1c:14:f6:ec:75:7d:22:
7f:6f:06:aa:1d:ca:d4:52:8a:b0:f5:12:8c:2d:7a:
93:bf:31:57:6e:08:58:1c:ef:56:e2:28:70:b7:60:
99:f6:32:ed:cd:e1:72:6d:1f:c7:88:18:7a:b5:6f:
be:be:24:14:7e:22:7a:4a:f1:b6:c8:ee:b1:62:22:
5e:db:e0:fa:47:43:c3:f8:cb:31:9e:2f:7d:4a:07:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:62:F3:36:AA:50:A9:D4:95:A8:AF:18:FF:F9:54:22:D6:87:1B:FE
X509v3 Authority Key Identifier:
keyid:B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.145.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ea:5e:8a:e9:f1:64:ae:79:b1:a4:95:50:d5:6d:f5:f9:a0:
1c:69:ec:7b:1a:b2:79:c3:aa:6c:f5:33:fa:25:83:12:6c:e8:
69:06:59:df:22:d0:54:8d:bf:ca:38:83:07:c2:73:e1:d6:1c:
4d:f3:7d:4a:c3:93:09:e8:b8:df:c6:8f:63:29:02:d2:e1:c9:
62:2f:6c:27:23:bb:39:6a:b9:b1:63:ff:e0:3a:87:87:a0:1e:
3c:67:54:b6:c7:75:da:35:7a:c7:16:38:cc:9c:d8:f8:85:53:
66:7a:9a:c3:bb:34:53:a4:31:60:34:11:a0:db:dc:c9:61:e3:
44:01:1f:49:4c:a8:b3:db:fd:71:00:1a:c5:90:b7:9c:05:73:
af:73:2c:12:c8:e5:ad:58:8d:97:77:a0:3c:b5:82:e8:ae:63:
47:82:86:81:40:56:97:03:d2:78:3e:a1:35:0b:70:ee:30:64:
2a:b3:5b:5b:c6:95:00:c7:89:99:fa:3a:42:f0:14:e7:f3:55:
0f:7f:d1:9d:33:2d:45:de:8c:99:1d:4c:39:47:ce:0e:e8:f2:
2d:bf:d4:ba:f2:13:a1:4f:d4:5a:45:ef:5b:eb:62:8a:e1:c4:
1d:1d:0a:d3:72:ce:39:51:fa:7e:1d:4e:41:15:07:d0:ac:eb:
59:a2:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:05 2026 by rpki-client