
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa
File: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (raw, json)
Hash identifier: Jv5U5LGovEDFBhrf2yN8LsratIXrB4UcO/MW+FaftYc=
Subject key identifier: D9:44:98:95:09:95:A7:4F:D7:0C:2C:55:FF:F2:10:FF:74:F5:DA:0F
Certificate issuer: /CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA
Certificate serial: 436CC5DCD79A6E038D2D6E0C3FC727155BBDAA84
Authority key identifier: 2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa
Signing time: Sun 03 May 2026 03:07:16 +0000
ROA not before: Sun 03 May 2026 03:02:16 +0000
ROA not after: Sun 02 May 2027 03:07:16 +0000
asID: 152373
IP address blocks: 103.176.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl
rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:26:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:6c:c5:dc:d7:9a:6e:03:8d:2d:6e:0c:3f:c7:27:15:5b:bd:aa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA
Validity
Not Before: May 3 03:02:16 2026 GMT
Not After : May 2 03:07:16 2027 GMT
Subject: CN=D94498950995A74FD70C2C55FFF210FF74F5DA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:dd:df:4e:22:c9:4c:6f:fb:05:6f:dd:66:
be:0f:a6:ff:2d:58:d1:ff:2d:6c:b8:cd:5c:26:ca:
70:c8:ba:a8:c3:f9:70:65:66:31:02:d2:b2:7e:52:
c9:0d:75:73:a1:fa:3f:fc:37:dc:24:e4:35:7e:57:
f5:0f:d1:08:74:e0:d1:f3:9d:94:4c:8c:c7:4c:1f:
7a:c4:30:a1:60:eb:60:a1:d6:83:16:d2:45:6c:fa:
54:58:1c:2a:18:b5:8b:09:bc:aa:95:14:46:67:92:
ff:28:97:2a:8c:29:b5:c9:ad:07:ae:c5:97:4b:f8:
f1:60:da:db:1b:7e:97:e6:38:ed:9c:46:4c:7e:4c:
f9:e8:6c:74:88:31:04:6d:e5:af:d0:5f:c8:8b:b0:
9f:9f:bf:df:5f:57:f8:4a:e4:5a:2c:66:b1:1c:cc:
90:50:ae:b0:fc:2e:c1:20:20:06:c5:7e:e1:ea:66:
58:54:06:fa:5b:ed:29:44:b2:d8:85:de:a5:ab:f5:
7f:3c:86:03:1f:fe:6d:39:4b:71:5f:d9:1b:ae:5b:
a7:f3:aa:d7:48:80:ef:20:7b:a1:e1:2b:57:8a:c4:
43:91:fc:e4:7d:98:8b:5d:71:e1:a9:21:51:82:f8:
41:e9:6a:91:7c:ca:7c:ad:aa:b7:01:3d:bb:8e:b8:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:44:98:95:09:95:A7:4F:D7:0C:2C:55:FF:F2:10:FF:74:F5:DA:0F
X509v3 Authority Key Identifier:
keyid:2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e3:e7:c6:da:00:fb:97:8c:e9:f5:56:8b:60:11:7f:6f:ea:
7c:8e:fe:43:4d:81:09:93:ac:19:d8:14:2e:b1:f2:d9:51:8c:
1b:61:a2:7d:8b:20:54:ba:e1:74:c0:34:10:f7:87:93:72:e7:
c4:cd:a7:0b:09:15:00:ca:1c:2b:51:be:d2:29:42:16:4c:a1:
bd:9b:3c:5f:36:22:64:25:0c:25:6b:56:02:af:4e:c4:d7:1a:
ff:e8:28:c4:2b:69:60:11:fb:73:8b:1d:8f:6c:b6:7b:94:e9:
eb:71:9e:ab:d5:98:d4:15:75:5b:7e:06:f4:1a:df:76:88:81:
db:ea:8d:ff:0a:2d:dd:70:bc:a0:6d:be:cd:91:be:a5:81:92:
c3:d6:01:95:3b:34:e0:3f:bf:c0:58:a4:fa:61:a0:37:fc:eb:
fe:e6:2f:93:a1:95:63:61:e0:ea:e0:20:20:ee:55:d9:85:86:
bb:e5:73:4f:ef:20:7a:12:b5:5d:4b:9c:f1:73:09:a3:5e:d8:
3b:c4:6b:3b:cc:ad:05:9b:ad:db:3d:ca:8a:db:b7:84:86:12:
67:0e:38:e9:10:00:61:cb:ee:58:db:b5:20:22:f5:38:3c:ca:
fc:28:e0:29:d4:92:69:13:51:8a:1a:cf:81:5a:75:48:f9:49:
9b:2b:d6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:19 2026 by rpki-client