
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa
File: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (raw, json)
Hash identifier: HqJNR72y60tx+IHjixNLgxPcXZs1k5eDNNpIpPxwoc8=
Subject key identifier: 98:8C:ED:87:47:48:C3:45:1B:83:B6:62:25:2C:42:D7:0E:8B:75:DD
Certificate issuer: /CN=67EFB834694FDF326541D90AA7679322947189B3
Certificate serial: 5CC8AA6CBEB40DC43DFABBFBF4B720000925E13A
Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa
Signing time: Sun 03 May 2026 03:06:10 +0000
ROA not before: Sun 03 May 2026 03:01:10 +0000
ROA not after: Sun 02 May 2027 03:06:10 +0000
asID: 7713
IP address blocks: 103.149.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl
rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c8:aa:6c:be:b4:0d:c4:3d:fa:bb:fb:f4:b7:20:00:09:25:e1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3
Validity
Not Before: May 3 03:01:10 2026 GMT
Not After : May 2 03:06:10 2027 GMT
Subject: CN=988CED874748C3451B83B662252C42D70E8B75DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:c2:fa:dc:f4:5e:6d:5e:00:1b:81:ac:ee:
ba:5d:5b:d8:fb:ba:30:9f:17:27:66:c7:54:bd:28:
80:25:43:6f:69:de:88:82:7a:40:fb:2e:81:9a:10:
ff:54:71:bb:5d:ad:5f:b2:c3:55:8e:8a:af:41:9c:
27:6a:db:3d:de:de:f8:3c:da:08:92:75:46:bc:ab:
6b:6c:bf:10:59:de:b8:c1:c6:8f:11:16:ab:6a:ed:
9a:0f:c2:db:b3:5a:17:53:e6:3d:14:16:11:d8:81:
8c:67:63:f7:45:d5:06:f8:73:01:4a:15:12:42:34:
b9:1f:44:a6:91:5f:0d:0f:ef:c0:10:40:c0:bb:2c:
33:df:e5:08:c2:6d:e4:cb:c6:5e:ae:18:61:16:79:
d9:92:60:eb:0e:8d:59:ef:41:04:7c:fd:c4:c4:5b:
8b:89:7d:3f:61:61:8a:f9:8a:37:88:64:08:64:9f:
c2:c7:99:8a:c3:a3:9c:3d:26:b9:d1:7a:cd:e5:64:
10:04:ad:9a:c7:73:6f:2b:d5:6d:58:ea:65:c1:1d:
11:ba:83:4e:76:af:2a:51:4b:d2:70:63:57:fd:1c:
62:c1:ae:c8:8e:7a:bf:61:22:97:9a:f4:3b:be:08:
39:3f:85:32:ae:4f:cd:3b:90:4b:6b:61:ba:49:3a:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8C:ED:87:47:48:C3:45:1B:83:B6:62:25:2C:42:D7:0E:8B:75:DD
X509v3 Authority Key Identifier:
keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:11:fe:0f:9b:45:ad:0f:b3:c4:3f:d5:a4:71:f6:27:17:c4:
0f:83:4e:d4:a8:56:a4:9e:fc:79:ba:b0:5f:0a:f0:96:18:a9:
4a:5c:72:6d:77:06:c2:a9:db:30:4b:e4:dc:70:47:22:4e:54:
35:32:81:0b:a5:80:3f:e3:7c:8b:ac:ce:42:ba:30:6e:1a:3e:
2b:f5:9e:eb:67:25:8a:a6:8f:86:80:77:ef:67:82:27:d0:1c:
55:76:46:8b:33:c7:7b:60:4f:c4:39:7a:b1:7b:f6:e3:b9:9a:
fb:4f:d7:78:b0:65:99:38:c2:58:a9:c8:95:9a:46:0a:cb:ec:
ba:3e:45:e2:c6:57:ce:0a:6e:59:cd:92:e9:1b:a9:ec:7d:77:
51:ff:44:e3:09:39:f0:47:11:5c:e5:40:25:53:5d:82:a1:47:
7f:17:96:d5:ac:47:80:7c:02:b4:cd:5d:d6:3f:8f:14:19:dd:
42:27:60:56:28:ae:33:33:cc:68:11:9a:f3:40:a7:97:7a:2d:
62:0a:6c:80:26:6e:1f:71:40:47:0e:f0:0e:92:df:e4:5a:20:
e0:11:90:0d:b8:6e:11:54:c5:5c:bd:c9:d6:6a:63:04:70:6b:
db:b0:39:ff:7b:c4:a8:5a:0b:e7:e5:8e:41:e9:59:26:c0:40:
5e:7e:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:54:53 2026 by rpki-client