
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa
File: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (raw, json)
Hash identifier: Je18gPRqgq+WsGNVuHao3MPV58XjK3X72Kp18GA2rlA=
Subject key identifier: D3:97:3F:9E:90:64:FB:1D:68:3E:D7:97:B8:DB:3F:2B:F4:78:48:69
Certificate issuer: /CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF
Certificate serial: 3537AC8D7BE5464E0238F08CE6125F98500A94F7
Authority key identifier: 1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa
Signing time: Sun 03 May 2026 03:05:17 +0000
ROA not before: Sun 03 May 2026 03:00:17 +0000
ROA not after: Sun 02 May 2027 03:05:17 +0000
asID: 153111
IP address blocks: 103.184.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl
rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:37:ac:8d:7b:e5:46:4e:02:38:f0:8c:e6:12:5f:98:50:0a:94:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF
Validity
Not Before: May 3 03:00:17 2026 GMT
Not After : May 2 03:05:17 2027 GMT
Subject: CN=D3973F9E9064FB1D683ED797B8DB3F2BF4784869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:f0:33:6e:85:bc:52:8c:07:11:b9:d3:96:
19:1e:b5:7d:28:18:ad:bd:f0:54:e9:7e:b4:56:b9:
dd:09:1a:10:81:e2:80:4f:95:75:42:c0:35:03:a7:
da:d1:8b:20:41:c4:a7:37:11:49:9a:69:ec:96:01:
8c:bf:c9:c1:e8:b6:e2:0f:4b:a5:c7:bd:1d:7d:5f:
0e:67:8b:19:a6:75:88:11:22:dc:e3:39:43:1c:65:
97:0b:e3:b2:61:f3:00:76:88:94:50:44:de:46:65:
6f:2a:b7:07:24:e3:78:9c:90:60:39:68:7d:38:06:
dc:f5:aa:0a:57:d1:f0:a8:b1:89:e0:f8:af:d9:c8:
4d:80:7e:30:0a:f7:24:b1:f6:74:7a:6c:95:cf:95:
93:4e:af:64:36:60:81:e1:e0:55:3c:ae:eb:a7:85:
da:4a:a2:5b:bd:93:b1:be:5c:11:7d:7c:81:80:18:
06:b5:7a:01:bd:70:1c:1d:63:dc:1b:cc:b8:72:9a:
23:6a:82:c2:cd:c3:5b:0b:7b:0a:e4:1f:01:fc:09:
8a:2a:19:8c:c1:eb:73:7b:f0:d3:2f:ca:75:b8:3e:
bd:23:78:1a:3c:da:61:60:f3:50:ec:cf:5b:e2:98:
51:39:eb:4c:32:34:4a:a6:a9:4c:d3:34:14:6b:77:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:97:3F:9E:90:64:FB:1D:68:3E:D7:97:B8:DB:3F:2B:F4:78:48:69
X509v3 Authority Key Identifier:
keyid:1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.14.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:4f:15:75:bd:fe:d7:18:6d:68:01:69:87:08:5c:72:1f:de:
3d:21:75:64:b7:64:aa:2b:94:d5:e9:9f:94:33:92:0d:ad:18:
ca:54:0a:d4:51:b6:02:5e:90:3d:63:ba:92:ea:44:cf:ae:e0:
47:21:45:d5:79:26:00:0c:66:77:35:65:55:e6:4b:88:b9:a3:
92:80:ea:1f:7d:e1:26:3e:c3:c2:78:9d:56:70:b9:5a:6f:1b:
d5:c2:81:3c:2f:76:c5:1f:9a:ae:5e:a4:56:10:82:38:e7:26:
a0:a1:29:4f:d2:61:e7:b6:e9:f6:df:22:6b:ac:4d:2d:86:36:
ae:fe:0b:c8:23:f9:49:f4:33:3f:c3:f6:39:53:a0:5b:fe:ad:
8d:31:df:5a:4c:ed:e8:ac:d2:79:59:30:74:65:34:72:7b:61:
84:4a:01:87:3b:cb:6f:a9:a2:01:49:f5:f9:7f:0f:87:79:f2:
c8:ed:6a:9b:9f:a3:fb:89:15:29:95:04:51:a2:2e:50:98:ad:
57:c0:ff:2d:ad:2a:b4:ba:d7:9a:9c:47:4b:38:70:a0:db:b9:
cf:17:71:5e:f5:d2:76:d0:84:63:47:68:04:66:09:05:4b:65:
a2:52:f2:4a:8f:3f:2d:d8:8a:07:74:9d:6d:95:5a:93:39:e6:
7f:a2:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:02 2026 by rpki-client