
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa
File: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (raw, json)
Hash identifier: jakvC7z6ih8TLDBjPGwBe82NoGvM+4jFqZRksuR7CGI=
Subject key identifier: BF:B4:2B:09:A7:F4:A2:AF:8F:69:EC:7B:96:87:08:B1:6F:41:D5:93
Certificate issuer: /CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE
Certificate serial: 467E981EF4659DA54A70BB7B645CDBA7304DDB6E
Authority key identifier: 72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa
Signing time: Sun 03 May 2026 03:06:41 +0000
ROA not before: Sun 03 May 2026 03:01:41 +0000
ROA not after: Sun 02 May 2027 03:06:41 +0000
asID: 151599
IP address blocks: 103.7.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl
rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:7e:98:1e:f4:65:9d:a5:4a:70:bb:7b:64:5c:db:a7:30:4d:db:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE
Validity
Not Before: May 3 03:01:41 2026 GMT
Not After : May 2 03:06:41 2027 GMT
Subject: CN=BFB42B09A7F4A2AF8F69EC7B968708B16F41D593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:a4:6b:5c:f3:9f:ad:f5:e3:7c:b8:8e:28:
1a:92:c1:88:b3:f7:68:61:c5:7f:35:3f:2c:8a:63:
e9:a5:07:3a:7a:79:06:6e:88:d3:87:fa:82:90:07:
52:3e:f2:b5:20:92:5c:cf:a8:1f:e9:01:67:82:de:
71:3f:3f:a5:29:4d:41:68:be:90:ba:24:25:51:45:
b2:f7:f3:91:c6:72:e3:a6:78:7b:86:7e:6a:53:e7:
5d:fb:b7:d0:72:da:52:c1:95:c6:8d:5a:bc:b9:67:
5d:8c:3a:f4:9e:f3:c5:21:b3:af:c9:8b:ae:78:7f:
5e:2d:ac:f3:27:6a:af:54:77:8c:66:bc:91:5e:48:
16:20:a6:a9:59:57:59:30:d7:97:84:c1:10:3b:a8:
4b:ea:2a:b1:d6:78:f9:98:af:85:8a:25:d8:05:25:
5d:fa:1a:34:b0:7d:9b:a9:86:05:b4:cf:34:b8:02:
b0:67:e4:5f:79:eb:dd:31:87:c2:55:36:ca:9e:2a:
d2:a5:55:2d:21:7b:03:a0:16:89:c3:d7:29:13:ad:
72:81:d1:10:0b:b1:d3:87:dd:e0:96:04:01:7a:f5:
89:32:eb:c7:56:56:19:39:7a:64:42:28:f2:0f:00:
12:f4:fb:fe:dd:9c:83:a9:f1:fb:fc:e1:57:ad:32:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B4:2B:09:A7:F4:A2:AF:8F:69:EC:7B:96:87:08:B1:6F:41:D5:93
X509v3 Authority Key Identifier:
keyid:72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.106.0/23
Signature Algorithm: sha256WithRSAEncryption
66:10:8e:c2:70:3d:8e:9d:98:d9:0f:94:66:28:6c:5e:2e:88:
16:fe:08:df:c8:40:e2:74:b8:ec:9a:b9:c8:b3:e8:10:79:b9:
5c:01:e3:6d:fd:29:bd:0f:a5:80:21:38:c7:60:0b:06:9d:4c:
e4:0a:9f:73:a9:d4:40:97:13:cd:43:8b:77:49:e9:ef:dd:42:
94:86:cf:3e:89:36:0a:20:24:de:bd:87:ed:35:c1:bd:5c:b5:
74:2c:62:f4:8a:6b:c0:ad:01:04:01:91:dd:98:b5:bc:2a:5f:
bf:fa:66:78:5a:a5:9b:89:78:d0:b9:0b:73:1d:f6:63:55:2f:
4d:ae:a0:9a:c3:28:3e:5a:79:df:57:2e:b3:e8:a5:5a:11:7d:
65:90:dc:b0:58:40:a1:8f:60:90:80:af:70:8a:fb:b9:f4:da:
a3:9e:00:39:7c:1d:7c:73:96:ce:c6:9d:8b:fc:7d:b7:2b:1b:
6d:08:ad:d4:be:eb:c5:45:c0:77:fb:8c:b3:a9:95:0f:b0:67:
25:8c:30:bc:f3:67:61:ec:15:6f:6f:78:00:d3:d0:5f:3d:ba:
10:30:be:cf:08:97:51:d4:66:10:93:05:99:7f:ac:6b:52:b4:
36:c7:45:19:68:84:9c:8c:6e:01:1a:08:41:42:84:d0:19:20:
07:3f:f7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:52 2026 by rpki-client