
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa
File: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (raw, json)
Hash identifier: ZGaSW5GUniP8uwcoro/pO60B9A0CYxjWYYtxiwSdvI8=
Subject key identifier: 53:B2:F6:1C:04:C8:FD:A7:D6:69:2D:F2:A4:5E:3E:46:14:15:13:DB
Certificate issuer: /CN=AE70603036AD2614B0A87825C6E2788B1AD6F663
Certificate serial: 05C9372D10488679D7AE4C26C736F98041D3E2BC
Authority key identifier: AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa
Signing time: Sun 03 May 2026 02:59:11 +0000
ROA not before: Sun 03 May 2026 02:54:11 +0000
ROA not after: Sun 02 May 2027 02:59:11 +0000
asID: 136075
IP address blocks: 103.84.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl
rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:c9:37:2d:10:48:86:79:d7:ae:4c:26:c7:36:f9:80:41:d3:e2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE70603036AD2614B0A87825C6E2788B1AD6F663
Validity
Not Before: May 3 02:54:11 2026 GMT
Not After : May 2 02:59:11 2027 GMT
Subject: CN=53B2F61C04C8FDA7D6692DF2A45E3E46141513DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:90:04:93:51:d2:fb:1f:54:a5:ca:e5:2b:
f7:d9:b8:d8:ee:8e:60:67:b5:48:a8:bd:95:5d:59:
ed:b9:22:77:50:6c:31:65:51:85:18:a0:f6:bf:41:
8d:fa:9e:3f:cc:a9:66:ce:ba:33:13:00:6b:ea:bf:
a8:b0:93:56:9b:8b:cc:13:c0:da:4e:b7:a0:ff:a9:
42:8e:e5:93:b6:86:1a:ca:74:f4:11:e3:de:2d:ab:
d2:2d:2b:12:d3:8f:38:d7:04:83:d5:cd:f3:5b:91:
72:0e:cd:2e:cd:a5:42:ca:c2:0b:42:74:77:2b:2d:
80:60:2e:44:2a:02:2a:c1:8c:db:5e:81:42:61:70:
22:60:5e:bf:ff:f3:d2:a8:05:d0:3b:a8:f2:c1:d5:
3d:5e:2f:42:6e:eb:84:8e:23:56:fb:31:e1:7c:40:
52:ac:70:47:49:29:fa:ef:cc:7e:af:e3:26:38:e8:
98:6e:46:3f:73:d2:fe:87:0b:29:f1:e0:6b:76:f5:
d8:32:13:b5:76:df:6b:08:c5:c4:5f:5b:23:cb:26:
e4:8b:28:0b:d9:69:2f:49:59:9b:56:7c:2d:10:02:
c3:e5:e6:ef:93:2b:ee:5a:03:94:05:d9:e3:b3:e3:
e7:8b:29:5d:18:4c:62:84:64:ef:64:f8:ee:2c:da:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B2:F6:1C:04:C8:FD:A7:D6:69:2D:F2:A4:5E:3E:46:14:15:13:DB
X509v3 Authority Key Identifier:
keyid:AE:70:60:30:36:AD:26:14:B0:A8:78:25:C6:E2:78:8B:1A:D6:F6:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/AE70603036AD2614B0A87825C6E2788B1AD6F663.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE70603036AD2614B0A87825C6E2788B1AD6F663.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.211.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ce:07:74:62:5b:0e:ce:37:3f:15:8b:91:59:0c:3a:94:af:
61:3f:e5:60:2c:37:bb:d3:df:6f:ea:cd:97:10:71:01:13:56:
58:93:74:02:f9:97:e2:3a:67:be:09:5c:90:38:ee:67:40:91:
64:de:c6:ba:05:b2:bf:f3:74:62:bb:e7:ec:7a:50:2b:e4:20:
0f:4e:9e:cc:70:84:4f:ae:fb:fe:7e:18:a0:4b:9f:49:94:d5:
d3:b6:d0:c0:f5:7f:be:d3:16:35:a1:f0:90:72:a6:19:ed:b1:
6a:37:10:82:a0:4d:4e:bd:54:6c:db:8d:84:7b:c1:50:bd:da:
22:ec:d4:d0:44:33:15:94:35:3d:96:78:28:39:a9:1d:f7:cb:
3e:2a:b5:b4:44:db:0c:ec:b1:dc:4c:c8:b8:7a:4b:b1:6e:d4:
5c:75:71:24:6b:70:66:bf:e4:82:9a:77:c3:db:eb:aa:a2:25:
1b:8a:cc:59:5f:55:2c:09:17:e5:4e:2c:61:6c:a2:cb:70:ae:
11:f6:51:81:7e:6a:21:62:98:61:a3:3a:1a:1a:b2:60:99:c4:
dd:c6:8a:d1:34:06:f1:f2:23:6c:39:af:8b:82:e6:49:2f:a1:
89:39:65:a4:f2:89:44:b3:02:fa:51:21:8c:1d:0c:87:86:c2:
95:f3:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:43 2026 by rpki-client