
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa
File: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (raw, json)
Hash identifier: S54fglHVGgOkdpOGlybfdLwbJlLyDvqF1bFNcWMY+6I=
Subject key identifier: 9A:90:92:52:5D:DC:B8:3A:3C:27:90:3E:C3:34:C4:69:5A:83:A1:F2
Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519
Certificate serial: 0FAD2CF985D6AF04D7CF9F2F6E3971DD338E42BB
Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa
Signing time: Sun 03 May 2026 03:02:15 +0000
ROA not before: Sun 03 May 2026 02:57:15 +0000
ROA not after: Sun 02 May 2027 03:02:15 +0000
asID: 131706
IP address blocks: 103.102.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl
rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ad:2c:f9:85:d6:af:04:d7:cf:9f:2f:6e:39:71:dd:33:8e:42:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519
Validity
Not Before: May 3 02:57:15 2026 GMT
Not After : May 2 03:02:15 2027 GMT
Subject: CN=9A9092525DDCB83A3C27903EC334C4695A83A1F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:ac:38:b9:86:2b:f7:9c:52:2a:72:e5:91:
46:c4:6c:bd:dc:41:63:57:02:da:f8:06:b2:85:90:
37:70:d8:0f:bf:f0:b6:0b:79:4d:18:fd:78:5a:5e:
dc:5a:c0:03:85:9d:7c:1a:8e:92:27:f6:46:1c:ae:
1e:48:32:d4:ce:c0:4b:aa:48:da:0e:2c:28:3f:33:
7f:12:7e:a7:01:79:91:9e:99:54:13:b0:8c:67:e9:
0a:e6:21:f0:0f:4e:e2:6d:ed:fe:90:ab:8d:88:a7:
67:e4:e0:06:88:24:a9:2b:f5:e3:ea:cc:05:19:3c:
b4:f7:65:ee:c2:1e:21:33:ea:f5:7c:91:56:06:74:
2f:17:3d:57:2c:af:31:99:b7:a7:3b:7b:d0:95:31:
6e:b3:b7:7b:23:c5:19:4f:d5:95:85:9c:d6:ae:de:
03:de:54:87:ec:2e:70:98:05:12:9d:ed:0a:cf:4e:
38:1c:b4:ef:cd:84:63:c0:3c:99:6c:c6:ec:cb:cd:
bc:dd:9a:6c:20:65:7e:5b:fd:80:49:0f:14:e4:58:
c5:2d:4c:bb:c3:a0:e3:11:75:01:ab:05:53:b3:a5:
35:78:fb:9c:bb:cb:33:87:75:b3:fe:c7:18:9a:a7:
6d:32:1d:3a:90:c3:70:cf:56:89:e2:2e:6e:b1:48:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:90:92:52:5D:DC:B8:3A:3C:27:90:3E:C3:34:C4:69:5A:83:A1:F2
X509v3 Authority Key Identifier:
keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.151.0/24
Signature Algorithm: sha256WithRSAEncryption
47:66:89:ed:b6:a2:92:86:62:75:c4:ac:3f:df:6a:f7:a7:a3:
98:94:3f:e1:d4:ab:c8:cc:ae:c0:2c:2b:5f:21:51:c8:44:57:
98:be:9b:0d:21:94:7a:4d:13:79:ab:36:0c:9c:df:41:d4:e7:
2a:65:73:0a:da:5a:be:88:cf:41:40:48:f3:8f:93:db:64:d8:
29:14:4b:95:1e:82:74:fe:02:a4:5e:fc:7b:63:76:84:24:71:
dc:95:fc:83:24:d1:1a:66:be:65:24:a7:30:24:cc:8b:ab:2c:
d6:80:df:15:ba:4d:3c:fa:d1:ff:bd:20:80:ab:9c:1e:c7:6d:
3a:89:3f:54:75:a8:c2:b3:5d:f5:a1:96:28:61:b4:6a:6b:7c:
f1:1e:5c:e3:ec:c1:1b:b7:de:d8:5f:3d:85:83:ee:75:46:e7:
52:ad:3d:5e:9e:84:db:8f:2f:ca:14:f4:c6:2d:ef:21:70:8d:
64:d3:45:8b:3f:8b:dc:b4:82:cf:95:22:6e:17:f9:66:89:39:
a8:43:36:74:66:f9:a6:c7:db:6a:a4:f2:33:fc:f7:8c:61:2d:
ba:02:a6:29:da:cd:f3:78:93:04:45:6b:2e:cb:9d:5d:06:78:
cb:d8:0d:41:39:eb:80:53:8a:01:96:73:33:06:da:47:9e:b6:
dd:ef:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:12 2026 by rpki-client