
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3130332e3234342e33382e302f32342d3234203d3e203338353030.roa
File: 3130332e3234342e33382e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier: ZLJB2imbqOWZ5Bc98XV6aVzrpBiz747sw/gHHFX4MEc=
Subject key identifier: 89:62:6A:02:BE:4B:7E:7E:9E:5E:D1:D8:4B:DA:9C:3E:5D:1F:B3:32
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 6AC61388A8C9745DFBE53AF9AEE2FD16584EE099
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3130332e3234342e33382e302f32342d3234203d3e203338353030.roa
Signing time: Sun 03 May 2026 03:00:07 +0000
ROA not before: Sun 03 May 2026 02:55:07 +0000
ROA not after: Sun 02 May 2027 03:00:07 +0000
asID: 38500
IP address blocks: 103.244.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c6:13:88:a8:c9:74:5d:fb:e5:3a:f9:ae:e2:fd:16:58:4e:e0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:55:07 2026 GMT
Not After : May 2 03:00:07 2027 GMT
Subject: CN=89626A02BE4B7E7E9E5ED1D84BDA9C3E5D1FB332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:67:67:78:a4:da:c7:1e:c6:43:d6:95:9b:
e4:eb:45:e4:2b:30:0b:39:dc:93:e0:0b:52:44:55:
e0:47:27:44:b7:80:68:35:58:8f:e4:c2:c9:68:52:
22:96:80:ad:ab:30:31:8c:fe:75:a2:f1:00:00:a2:
af:a9:81:ec:52:d1:96:29:97:95:56:56:23:56:16:
db:82:cd:85:16:44:4e:75:34:c5:eb:9e:3b:71:bf:
61:7f:32:68:6b:19:78:a4:69:0b:d4:63:f7:0b:4b:
32:f2:af:2b:03:5f:96:a6:df:54:cb:79:2c:fc:6f:
0c:c1:03:31:5a:64:00:66:8a:0e:1b:ef:31:ff:81:
77:a0:54:ff:ff:fc:d7:ed:97:2b:cb:a0:31:51:cc:
de:c6:62:83:58:b8:95:32:d8:21:ed:9f:ea:01:9a:
13:8f:99:f0:72:d4:37:11:36:c1:b0:fa:b8:6c:2e:
04:e6:3a:fd:c1:0e:d6:4f:d1:15:7f:34:83:da:71:
fc:83:e0:c4:39:d7:7d:9b:f1:e1:5c:38:ad:fb:e2:
8b:14:06:22:b0:84:60:f1:e4:dc:40:c1:db:4b:38:
2a:24:5e:b9:e7:cd:f8:cc:06:fa:e1:04:a9:e5:9b:
7e:fe:3b:9b:db:25:3b:b7:e8:fc:5f:5c:71:50:f6:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:62:6A:02:BE:4B:7E:7E:9E:5E:D1:D8:4B:DA:9C:3E:5D:1F:B3:32
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3130332e3234342e33382e302f32342d3234203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.38.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5c:0f:b1:e1:b1:1c:9b:b8:c5:e0:51:8d:7e:0a:85:fb:5e:
45:83:82:ee:e0:07:b6:f6:54:f5:af:f1:8d:c8:a6:ab:5a:a6:
e6:28:8e:a5:6d:1a:2e:76:fb:72:01:69:50:ed:ec:98:e6:65:
39:eb:7e:e4:e4:1e:84:af:da:b7:d6:6f:8e:5b:67:24:27:07:
a9:e9:3a:77:e6:ad:b2:7d:23:d8:93:c0:07:bb:a2:3d:1d:a6:
a7:e0:bb:72:a4:b5:21:84:f4:f9:5e:9f:da:a6:01:a1:16:36:
8b:af:6c:af:ff:d4:04:33:8c:46:96:60:1c:bb:ec:90:7f:a1:
90:1f:e7:0e:a8:0b:20:e8:63:23:65:89:8b:5c:08:a6:ae:d7:
c3:73:dd:7a:24:5a:a7:a0:62:c8:86:eb:9b:44:25:e2:dd:fc:
55:88:59:9a:f9:c5:cb:3f:b5:20:73:df:f8:3a:46:b1:62:a9:
60:08:c0:9c:ea:74:71:9b:a0:60:5e:7c:3c:06:2d:47:e6:63:
04:45:f4:34:f6:99:36:26:b7:2c:59:23:dc:60:07:7a:7e:7c:
5e:7e:5d:aa:85:c4:02:46:c9:82:3c:6a:05:7c:f6:a4:fd:da:
33:08:07:fb:c4:fc:18:11:e3:a7:30:29:bd:aa:47:2c:ee:27:
95:91:82:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:48 2026 by rpki-client