
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa
File: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (raw, json)
Hash identifier: bB08SpYPx/IIwPSFTyJewLNRJCCLadNTfgEzAwt/Uoc=
Subject key identifier: 17:1D:A2:47:C3:92:5B:2A:BC:D3:55:35:AF:A6:35:63:56:A0:81:FB
Certificate issuer: /CN=B313E8A9E464C3F7DE16EFE45069343A952B1AAA
Certificate serial: 07C6D1245CC159E8C86A78A4173DCC9E81E8B7F0
Authority key identifier: B3:13:E8:A9:E4:64:C3:F7:DE:16:EF:E4:50:69:34:3A:95:2B:1A:AA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa
Signing time: Sun 03 May 2026 03:01:55 +0000
ROA not before: Sun 03 May 2026 02:56:55 +0000
ROA not after: Sun 02 May 2027 03:01:55 +0000
asID: 138086
IP address blocks: 103.122.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl
rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c6:d1:24:5c:c1:59:e8:c8:6a:78:a4:17:3d:cc:9e:81:e8:b7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B313E8A9E464C3F7DE16EFE45069343A952B1AAA
Validity
Not Before: May 3 02:56:55 2026 GMT
Not After : May 2 03:01:55 2027 GMT
Subject: CN=171DA247C3925B2ABCD35535AFA6356356A081FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:0b:06:5c:ad:ff:cd:72:2b:db:a2:95:e4:
09:5b:3d:08:3b:d3:3c:a9:fb:b6:e9:d9:4d:d8:18:
cb:e9:7b:ca:3d:35:9d:fd:45:aa:e7:9e:1c:d1:8c:
f5:59:4e:f5:7d:dd:6d:7f:e6:c8:f9:33:22:0d:34:
30:4f:5f:46:1e:1b:20:ae:4c:37:ce:c8:34:5f:11:
38:ba:76:41:ec:3b:17:86:14:46:80:8b:75:7a:a6:
78:e8:2c:97:25:93:86:02:84:eb:48:b4:df:64:81:
f7:68:cf:e7:4d:e0:2d:fa:af:5f:54:b1:33:36:95:
44:b9:33:f2:a7:9c:dd:57:5c:68:6b:e0:ed:ec:b3:
b7:b9:a4:15:48:ad:42:23:08:0c:91:ed:70:f4:45:
57:14:b6:06:81:c5:67:72:00:d4:5a:30:6e:2e:69:
0f:fc:b3:30:af:75:c4:4b:bb:9d:f2:90:32:74:75:
b4:c3:97:7e:56:f5:1c:6f:d3:b9:05:d4:c4:86:0c:
27:80:62:ea:79:86:df:ae:ca:90:eb:11:91:0c:07:
15:60:02:c9:38:dc:cb:3f:f2:a8:a3:e4:22:f2:94:
10:02:37:7b:1e:4a:4a:1e:4f:75:c8:91:55:dd:88:
b0:34:f1:ce:56:84:04:ba:ee:84:44:67:73:c4:59:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1D:A2:47:C3:92:5B:2A:BC:D3:55:35:AF:A6:35:63:56:A0:81:FB
X509v3 Authority Key Identifier:
keyid:B3:13:E8:A9:E4:64:C3:F7:DE:16:EF:E4:50:69:34:3A:95:2B:1A:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e9:9a:09:07:bf:aa:e6:62:3b:59:f3:3b:32:c8:bb:e7:b4:
d1:bc:77:51:6b:31:b7:dc:47:6c:96:f8:4d:12:32:7f:63:70:
c8:fb:89:4a:95:08:35:10:58:b3:f5:f8:5c:12:be:af:16:56:
5c:f7:fa:a6:e4:c8:15:24:50:46:ff:d8:cd:73:67:54:9c:a8:
65:fe:dc:17:27:19:51:ad:25:b3:30:e7:6a:d0:c7:d9:6a:b4:
b5:36:1a:62:0d:c0:48:0f:ff:85:91:25:c8:12:fe:56:d3:fa:
b6:7b:a6:61:1b:6b:03:3b:15:0c:90:aa:df:fb:68:28:29:52:
aa:fa:b2:d1:c3:6a:f9:d3:6f:03:21:da:68:31:54:48:89:71:
e5:53:3b:f1:41:47:9f:00:78:f6:d1:5f:e4:ff:33:21:01:94:
00:4e:81:64:ec:63:85:26:a4:d0:8d:9d:f7:b5:61:0c:4f:6d:
45:72:95:f2:75:02:0b:05:21:33:10:04:e0:ed:6a:44:75:42:
31:28:24:1a:a8:48:2f:1f:80:f0:f2:c3:e6:01:f6:0e:d7:f1:
42:05:39:12:8f:57:b4:de:94:06:be:f2:36:4f:9f:01:77:1c:
2c:93:91:db:cb:02:99:4e:c7:ef:a5:db:e1:aa:a6:45:60:67:
ad:55:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:57 2026 by rpki-client