
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa
File: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier: USfTP+9/4GLbvvoIvIbzRlXyQT6cM8ipPFhCCz3Hhmw=
Subject key identifier: F7:4D:F8:7D:94:43:7D:4D:1E:26:E0:55:DC:69:14:9B:98:39:87:DE
Certificate issuer: /CN=B17A330780AFD953D1D3338525F941E14E1FC919
Certificate serial: 73608D82AA68EB3B1B777628AB4198457733B543
Authority key identifier: B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa
Signing time: Sun 03 May 2026 03:03:01 +0000
ROA not before: Sun 03 May 2026 02:58:01 +0000
ROA not after: Sun 02 May 2027 03:03:01 +0000
asID: 131111
IP address blocks: 103.174.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.crl
rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:05:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:60:8d:82:aa:68:eb:3b:1b:77:76:28:ab:41:98:45:77:33:b5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B17A330780AFD953D1D3338525F941E14E1FC919
Validity
Not Before: May 3 02:58:01 2026 GMT
Not After : May 2 03:03:01 2027 GMT
Subject: CN=F74DF87D94437D4D1E26E055DC69149B983987DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:68:fc:ac:0d:88:7f:57:03:cd:5f:a1:7e:fb:
12:83:c3:87:d4:67:3a:a8:94:70:4c:ed:b5:fe:d3:
30:ca:a6:20:6a:57:b6:47:11:af:fa:35:26:94:e6:
3f:eb:cc:ed:14:29:d7:3e:d7:39:6f:3a:38:88:c6:
2c:f2:c6:29:da:0e:ac:b1:3f:26:71:ef:e2:ed:ee:
f9:29:3f:a7:14:c2:39:1a:cd:0c:49:98:c5:a0:81:
0e:91:50:6c:c5:3c:82:6f:e9:e4:f4:46:65:8f:54:
a6:8c:84:08:be:ba:78:a7:12:ef:3e:14:a1:57:2b:
28:89:7d:bf:75:aa:ec:59:db:7a:bd:c0:a8:47:6c:
89:14:a7:52:5a:79:67:dd:9b:d8:e9:dd:6b:e3:ed:
72:fe:b5:cf:e0:db:71:06:db:23:35:70:cb:59:c2:
12:b5:cf:43:d8:79:10:29:50:e1:e1:a9:bc:06:40:
0b:cf:eb:4e:70:90:44:7c:c0:55:bc:92:3a:9c:e9:
f7:f8:60:c5:25:24:1b:f1:d7:ed:ed:0f:71:04:6c:
e1:89:51:04:23:f7:16:1f:cb:d9:45:7c:a4:ab:ff:
ef:b1:ed:02:0c:a3:a9:eb:00:34:d8:29:8c:c8:fc:
fe:e6:5b:8e:d6:a7:47:04:d7:70:b1:4c:49:fd:13:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4D:F8:7D:94:43:7D:4D:1E:26:E0:55:DC:69:14:9B:98:39:87:DE
X509v3 Authority Key Identifier:
keyid:B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.24.0/23
Signature Algorithm: sha256WithRSAEncryption
77:a9:9d:61:86:97:6c:39:b9:19:80:0a:32:b8:a8:15:2d:bc:
0b:a6:e1:e0:6f:e5:70:3b:ab:9f:81:6c:7a:ed:8b:5a:5b:d5:
5a:0f:0d:3d:2c:03:a7:05:d5:23:d3:83:47:03:46:4e:ac:3c:
66:89:b6:be:13:5e:c9:70:b4:e7:16:77:69:be:2c:63:72:7c:
60:49:1f:91:b3:63:4b:e4:b9:20:79:51:de:31:2d:5f:fa:a4:
d5:f8:86:74:ae:20:60:f5:7b:31:64:70:6f:ee:37:62:ca:cc:
16:05:e4:ee:3d:36:1a:af:18:ee:e7:0f:de:1b:a7:0b:58:fb:
3d:d6:26:d4:e3:03:a1:08:46:ab:e3:92:c7:75:2d:57:e8:2a:
a5:76:80:90:78:e1:c0:d8:8d:0c:51:cc:fb:5d:33:aa:0e:86:
81:f3:05:c0:3a:08:66:d3:2e:5d:65:56:fe:77:d0:17:8b:77:
2f:c2:6d:91:9a:5c:11:3f:63:51:2d:6c:88:03:eb:0d:13:75:
bc:61:be:ff:7a:01:b8:5b:ff:e2:71:b1:e3:07:ad:86:3b:a6:
20:56:3e:d4:9a:ac:6a:1f:b2:6f:71:1d:61:46:7c:bc:d0:1a:
c0:32:c1:a5:0a:e7:ab:0a:2c:a4:9e:36:fd:a6:d6:75:c0:88:
51:38:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:54:31 2026 by rpki-client