
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa
File: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (raw, json)
Hash identifier: sb2b0BvTmrzj1UZrNAjcbapczR2THwPhTn7rFLIGhwc=
Subject key identifier: ED:2D:B3:9E:AA:E0:AA:9F:B4:81:40:DB:7E:28:DE:1F:04:D8:82:11
Certificate issuer: /CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688
Certificate serial: 48FF2C47B3CDE5388AF7FE0D2390AA1B55609943
Authority key identifier: E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa
Signing time: Sun 03 May 2026 03:02:17 +0000
ROA not before: Sun 03 May 2026 02:57:17 +0000
ROA not after: Sun 02 May 2027 03:02:17 +0000
asID: 136880
IP address blocks: 103.106.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl
rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ff:2c:47:b3:cd:e5:38:8a:f7:fe:0d:23:90:aa:1b:55:60:99:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688
Validity
Not Before: May 3 02:57:17 2026 GMT
Not After : May 2 03:02:17 2027 GMT
Subject: CN=ED2DB39EAAE0AA9FB48140DB7E28DE1F04D88211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3d:83:a0:7e:a8:f5:ef:e7:0e:d9:f0:e9:f1:
fb:e1:fc:f6:ec:3a:1b:4b:97:fd:23:27:c1:e9:3c:
0c:6a:8f:c5:af:11:a8:21:6b:44:70:f2:bc:67:2f:
a7:99:f1:c5:de:9f:05:b9:d1:3b:fa:5c:63:29:1d:
fe:75:a3:74:95:22:34:3e:81:23:d1:94:2a:1f:5d:
af:d2:2c:dd:cd:9a:76:60:01:af:07:a9:c9:78:a9:
f9:ed:0f:ec:55:96:40:9e:05:e0:68:01:21:98:9b:
64:ea:0b:6b:31:d0:a4:8a:dc:ad:01:52:22:f8:a1:
ac:42:ed:c1:55:76:2a:d0:44:b1:fc:b1:c1:63:52:
95:5e:92:67:cc:0b:32:ca:57:8e:00:b7:dc:04:57:
df:42:73:50:9f:0c:13:df:f8:82:31:52:fa:7f:7b:
48:11:f8:2b:40:5b:cd:27:3f:ce:31:5a:bb:ee:41:
62:68:96:4d:5d:df:0a:74:d2:ce:36:cf:be:f1:ed:
b2:dd:3b:1e:39:36:29:33:6f:47:c2:04:c9:ba:53:
6e:00:f2:0b:1f:56:cc:c6:58:78:5f:f0:93:34:af:
37:ac:a0:45:e6:4b:f3:ec:d3:1b:6b:7e:7d:16:15:
f7:f2:c4:be:26:b9:aa:80:42:45:df:c5:cb:0a:a9:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2D:B3:9E:AA:E0:AA:9F:B4:81:40:DB:7E:28:DE:1F:04:D8:82:11
X509v3 Authority Key Identifier:
keyid:E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.106.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:0b:a6:eb:ee:5c:52:15:1a:83:dd:f7:86:54:6c:aa:a8:5b:
37:7e:99:82:a6:5a:02:97:25:79:3b:76:cb:6b:41:53:74:5d:
11:73:c6:c0:82:96:81:3b:10:23:36:2e:ea:1b:af:b3:71:c5:
43:d0:9b:bf:48:3a:ad:48:1c:1c:66:d0:3e:b3:0d:95:ac:fc:
62:61:08:79:47:fe:ad:6b:e7:3b:f4:79:78:76:5e:71:b5:b5:
61:17:e2:21:a7:e2:8d:0d:dd:34:10:64:ce:52:a6:18:ec:2a:
96:45:15:dd:57:d2:17:cf:95:29:85:3d:7d:02:a2:a2:f9:16:
06:cf:f8:8d:72:ef:2e:b9:b9:c2:8d:64:b8:65:dc:12:f7:52:
94:22:82:56:1a:6b:09:b0:64:b3:39:39:5e:64:8c:e2:7b:8a:
19:9e:29:86:54:3d:ba:2c:0c:16:24:5b:37:70:ab:0c:2a:45:
56:2c:31:85:8a:0b:f1:a1:78:ae:b6:41:48:67:82:db:55:4f:
7e:6f:ab:48:97:47:f3:e8:b1:b3:55:71:71:6f:e6:88:9f:bd:
e8:cd:f4:07:0b:a4:a6:7a:a1:c9:71:41:ce:ae:fa:76:ce:d9:
2b:0a:48:3b:e1:06:89:cc:34:be:f2:f2:65:35:57:d4:6b:4d:
17:3a:e2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:23 2026 by rpki-client