
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32332e33322e302f32322d3232203d3e203535363939.roa
File: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier: Y1EVFuIwP2J3LGEmXO1ADmvKKygK86wXzAkR/y0dT8g=
Subject key identifier: ED:85:AD:F3:6A:8E:D6:F7:D8:7E:54:B8:67:94:24:22:E0:37:FA:2C
Certificate issuer: /CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Certificate serial: 26BC474C731E8F6D5185D058FCA8C974BFDD4E72
Authority key identifier: C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32332e33322e302f32322d3232203d3e203535363939.roa
Signing time: Sun 03 May 2026 03:01:19 +0000
ROA not before: Sun 03 May 2026 02:56:19 +0000
ROA not after: Sun 02 May 2027 03:01:19 +0000
asID: 55699
IP address blocks: 103.23.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:bc:47:4c:73:1e:8f:6d:51:85:d0:58:fc:a8:c9:74:bf:dd:4e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Validity
Not Before: May 3 02:56:19 2026 GMT
Not After : May 2 03:01:19 2027 GMT
Subject: CN=ED85ADF36A8ED6F7D87E54B867942422E037FA2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:18:7a:9e:f9:e9:30:6c:b1:d1:54:7a:c2:
fb:ab:20:82:6e:1f:95:97:31:45:38:dc:e9:9c:ea:
df:91:87:ad:eb:53:c5:95:53:3a:ae:10:00:36:9b:
1d:2c:57:b0:c7:83:36:66:ce:8f:d1:fb:05:73:60:
f1:34:c8:77:f6:19:48:37:87:10:69:a4:1c:76:24:
e2:a6:78:cf:88:ca:8c:9a:d5:c3:32:3a:8e:4e:d5:
d6:49:47:61:f4:73:9e:1c:fb:62:0f:a2:1d:6c:fd:
ac:a2:45:58:42:54:29:dd:5c:b9:4d:85:97:91:33:
a8:f0:86:a5:93:3b:82:b6:cf:21:6e:1d:8b:e4:e7:
1d:6b:2b:9c:1a:a7:9a:2f:e6:94:49:84:c5:ae:40:
56:c0:1c:49:db:d0:de:ca:00:64:8d:99:5a:59:ad:
63:29:12:5d:21:ae:0a:f0:0f:80:2f:72:e3:3b:fa:
49:ee:be:e6:8f:a9:b7:0b:a8:40:eb:73:e7:7e:cd:
3b:83:4f:da:60:2f:86:aa:8a:65:49:d7:e7:91:9d:
30:f4:71:5b:25:b0:b4:94:32:f6:15:2c:12:ce:39:
c4:43:77:c7:1c:29:21:31:c0:f4:ed:5f:9f:9a:6e:
3a:96:e7:38:80:43:9f:47:7d:cb:2a:0e:d9:14:e9:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:85:AD:F3:6A:8E:D6:F7:D8:7E:54:B8:67:94:24:22:E0:37:FA:2C
X509v3 Authority Key Identifier:
keyid:C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32332e33322e302f32322d3232203d3e203535363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.32.0/22
Signature Algorithm: sha256WithRSAEncryption
37:8f:08:f7:b0:db:93:6c:99:1c:7c:a3:28:00:97:7a:0b:d1:
25:be:7c:f0:20:0e:ca:2a:34:9f:b7:b8:a4:c1:15:fe:f6:f2:
44:9f:80:ba:e9:aa:23:f5:2e:a7:a0:87:1f:56:9d:af:63:c7:
99:cb:be:2c:87:d8:d0:14:8d:d2:71:dd:fc:5b:dd:f3:98:2f:
8f:bd:13:78:b7:0f:6f:e9:93:04:7a:7d:e3:72:cc:08:cb:c2:
99:41:06:3c:a6:01:51:66:78:5d:81:37:2a:d0:f3:d8:73:a0:
88:6d:1f:2c:75:ba:c5:b8:57:74:bf:d4:7e:99:89:12:57:1c:
13:60:d1:b8:23:77:78:62:33:7c:69:e1:ae:57:24:47:1f:5d:
7b:f1:81:22:2e:5f:b7:70:c6:64:af:b3:8a:d6:78:ef:f7:8c:
32:53:e5:cc:7e:c8:af:99:0f:5f:67:73:b7:6f:10:09:14:65:
f9:9f:51:61:ae:cb:44:6c:c7:17:d9:7e:f7:69:6f:a0:7b:fb:
8e:eb:bd:25:84:a3:f4:16:8c:43:d1:19:2e:bb:3a:02:fa:16:
9a:72:73:f5:76:db:ac:4c:be:d6:62:2d:eb:5c:a9:4a:81:10:
a2:cb:43:ff:83:72:cf:a2:85:e8:c5:b8:60:47:27:29:7b:de:
03:86:97:11
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUJrxHTHMej21RhdBY/KjJdL/dTnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEyNjBBOTU4Rjg2RjFGRjIwQUUwRjMxRTg0NkJBMUM0
RTlBMjRGQTAeFw0yNjA1MDMwMjU2MTlaFw0yNzA1MDIwMzAxMTlaMDMxMTAvBgNV
BAMTKEVEODVBREYzNkE4RUQ2RjdEODdFNTRCODY3OTQyNDIyRTAzN0ZBMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoxh6nvnpMGyx0VR6wvurIIJu
H5WXMUU43Omc6t+Rh63rU8WVUzquEAA2mx0sV7DHgzZmzo/R+wVzYPE0yHf2GUg3
hxBppBx2JOKmeM+Iyoya1cMyOo5O1dZJR2H0c54c+2IPoh1s/ayiRVhCVCndXLlN
hZeRM6jwhqWTO4K2zyFuHYvk5x1rK5wap5ov5pRJhMWuQFbAHEnb0N7KAGSNmVpZ
rWMpEl0hrgrwD4AvcuM7+knuvuaPqbcLqEDrc+d+zTuDT9pgL4aqimVJ1+eRnTD0
cVslsLSUMvYVLBLOOcRDd8ccKSExwPTtX5+abjqW5ziAQ59HfcsqDtkU6R2PAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU7YWt82qO1vfYflS4Z5QkIuA3+iwwHwYDVR0j
BBgwFoAUwSYKlY+G8f8grg8x6Ea6HE6aJPowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjU5OWVkOTYtZDQwOC00NDE4LWI4MmEtNWQ1YThlNjY1N2YzLzAvQzEyNjBBOTU4
Rjg2RjFGRjIwQUUwRjMxRTg0NkJBMUM0RTlBMjRGQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMTI2MEE5NThGODZGMUZGMjBBRTBGMzFFODQ2QkExQzRFOUEy
NEZBLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I1OTllZDk2LWQ0MDgtNDQxOC1i
ODJhLTVkNWE4ZTY2NTdmMy8wLzMxMzAzMzJlMzIzMzJlMzMzMjJlMzAyZjMyMzIy
ZDMyMzIyMDNkM2UyMDM1MzUzNjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnFyAwDQYJKoZIhvcN
AQELBQADggEBADePCPew25NsmRx8oygAl3oL0SW+fPAgDsoqNJ+3uKTBFf728kSf
gLrpqiP1Lqeghx9Wna9jx5nLviyH2NAUjdJx3fxb3fOYL4+9E3i3D2/pkwR6feNy
zAjLwplBBjymAVFmeF2BNyrQ89hzoIhtHyx1usW4V3S/1H6ZiRJXHBNg0bgjd3hi
M3xp4a5XJEcfXXvxgSIuX7dwxmSvs4rWeO/3jDJT5cx+yK+ZD19nc7dvEAkUZfmf
UWGuy0RsxxfZfvdpb6B7+47rvSWEo/QWjEPRGS67OgL6Fppyc/V226xMvtZiLetc
qUqBEKLLQ/+Dcs+ihejFuGBHJyl73gOGlxE=
-----END CERTIFICATE-----
Generated at Wed May 13 04:26:21 2026 by rpki-client