
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa
File: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (raw, json)
Hash identifier: 3yR2EetJw0/oTW9Jd2JlHIoWXFNaZZVAvLcOZ+/Wty4=
Subject key identifier: FE:C7:89:2A:E4:A4:76:AA:6E:1D:CF:6E:5F:73:11:9A:21:1F:2B:D2
Certificate issuer: /CN=67EFB834694FDF326541D90AA7679322947189B3
Certificate serial: 5436ACE04809711DD121AC7103FC2D798CE5C551
Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa
Signing time: Sun 03 May 2026 03:06:10 +0000
ROA not before: Sun 03 May 2026 03:01:10 +0000
ROA not after: Sun 02 May 2027 03:06:10 +0000
asID: 7713
IP address blocks: 103.149.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl
rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:36:ac:e0:48:09:71:1d:d1:21:ac:71:03:fc:2d:79:8c:e5:c5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3
Validity
Not Before: May 3 03:01:10 2026 GMT
Not After : May 2 03:06:10 2027 GMT
Subject: CN=FEC7892AE4A476AA6E1DCF6E5F73119A211F2BD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:d2:14:12:c7:e1:28:79:82:d3:32:e2:b7:
bf:98:82:70:18:10:91:24:af:e3:92:48:5c:25:ae:
5e:16:85:94:cd:22:47:5e:5b:67:71:f6:28:20:7b:
e7:30:1e:9e:a4:df:b3:6b:6b:58:40:48:03:c7:8b:
fc:d7:d1:d9:36:2a:77:22:3b:1b:40:4c:a0:19:75:
94:1b:84:7d:7a:6f:b6:6e:7f:a6:0a:9c:64:bf:da:
76:bc:c0:bf:a2:c3:a6:64:6a:e7:6c:83:7f:d1:99:
e5:e8:cb:9b:6b:9f:0a:82:7c:fc:aa:3b:eb:fd:bd:
e6:57:43:76:29:bc:c4:04:7c:e8:ee:09:a3:6f:55:
e2:ef:16:1f:3b:49:96:2a:68:33:e6:40:9f:f0:f0:
3d:82:1c:6e:81:55:1c:fd:f3:88:65:54:68:0f:47:
f1:5c:ee:a8:be:6f:f3:c6:a6:6f:71:9e:a1:74:a1:
76:f4:fe:5a:fb:a2:fb:12:d7:e1:05:66:b5:70:48:
99:3e:03:82:7a:df:14:b8:94:37:4c:ca:25:df:7d:
7d:aa:71:46:95:87:41:1d:61:a7:a0:4a:b9:bc:0e:
4d:7f:78:b3:13:3d:34:f6:ed:44:5a:a3:d1:2c:7a:
b4:1f:79:dd:f6:77:78:21:5b:4a:ad:f9:d7:f9:7d:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C7:89:2A:E4:A4:76:AA:6E:1D:CF:6E:5F:73:11:9A:21:1F:2B:D2
X509v3 Authority Key Identifier:
keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:40:0d:a7:28:b1:ed:98:62:bb:97:fe:75:89:4a:35:83:2d:
13:1a:f3:b4:51:bb:80:8f:92:85:13:55:11:4d:77:d2:de:57:
78:58:ca:fd:a4:56:a1:5a:81:8b:db:51:45:4b:9f:89:b5:9d:
7f:70:95:4f:9b:4b:5a:10:2d:93:21:75:ce:06:3c:2a:7a:dc:
20:3c:da:d5:4f:41:cf:fd:57:81:df:0e:df:57:dc:c3:47:52:
bc:df:0c:8f:59:27:39:79:f5:47:16:de:c1:27:1b:73:6f:4c:
60:43:50:be:67:6d:aa:d1:2e:b5:be:32:90:33:f5:93:0f:4b:
2c:1f:48:c8:7c:35:4d:73:1a:67:c4:e7:83:bb:a0:a1:fe:94:
96:f4:98:b9:a0:c6:a3:ab:f1:0d:02:82:41:a2:33:cf:74:42:
bd:08:32:8d:e0:05:ec:26:0d:9a:49:06:16:50:71:19:cf:1c:
ba:14:7e:d7:e8:34:30:f3:26:6f:06:d4:14:82:bb:1b:1d:eb:
15:c6:00:90:7b:a2:d7:4b:a1:1f:2a:01:83:bc:2b:fe:2f:7c:
c3:bc:43:e3:42:d2:90:16:3c:e3:8a:07:15:9a:77:db:0e:1b:
72:ed:43:41:38:e4:33:93:48:be:95:2f:ff:23:fc:db:2b:30:
db:5d:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:45 2026 by rpki-client