
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa
File: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (raw, json)
Hash identifier: +bc1aSBLcX6ZQm4jECmlMCivSavxhqXkBTLrz820pWg=
Subject key identifier: 4B:04:58:1D:0E:98:1A:D9:D2:A3:18:88:2C:AD:B2:3A:A9:13:B6:D6
Certificate issuer: /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Certificate serial: 71CFCF43F402DE25F8C99C2C1B262F5D74F394E6
Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa
Signing time: Sun 03 May 2026 03:09:09 +0000
ROA not before: Sun 03 May 2026 03:04:09 +0000
ROA not after: Sun 02 May 2027 03:09:09 +0000
asID: 136869
IP address blocks: 103.104.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:cf:cf:43:f4:02:de:25:f8:c9:9c:2c:1b:26:2f:5d:74:f3:94:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Validity
Not Before: May 3 03:04:09 2026 GMT
Not After : May 2 03:09:09 2027 GMT
Subject: CN=4B04581D0E981AD9D2A318882CADB23AA913B6D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:56:0e:1b:4a:88:2c:65:76:68:d4:fc:f1:
cf:9f:42:c0:78:34:2f:2c:91:da:a4:14:00:62:3d:
aa:64:b0:03:db:4b:c8:d4:f7:c4:4c:9d:ca:fa:92:
62:bf:a5:b1:a8:74:2a:14:74:c3:7a:bf:3a:86:f3:
db:07:84:c1:66:75:51:a0:9d:cf:6c:7c:ab:f9:ac:
e1:3c:93:e9:5a:ba:72:92:68:b5:f2:59:e7:83:25:
09:ef:53:4d:fc:d0:8b:fb:50:d3:db:b8:e4:16:f1:
f7:34:a2:bb:d6:b8:6f:93:63:79:33:cc:66:30:a6:
dc:25:99:5d:d6:8a:52:99:af:84:52:e1:ac:46:61:
65:27:e2:70:a8:43:f4:a8:6d:ec:89:93:28:64:84:
cb:68:22:c5:6e:90:e0:4a:d1:f2:94:6e:d5:b6:98:
d9:ab:87:b0:79:07:e0:be:6a:4d:18:26:c7:a6:8e:
6b:63:11:73:1d:92:b4:ab:19:29:d1:0c:c9:06:9d:
71:6b:f9:66:6d:74:d0:43:1a:4a:14:e0:50:9a:52:
a5:c7:63:63:8e:34:8a:1c:43:3b:97:58:79:1c:b3:
16:91:09:41:dc:c0:ca:99:3e:12:83:91:a0:49:00:
34:7b:8d:e9:b6:7a:65:09:12:8b:90:5a:ea:aa:8c:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:04:58:1D:0E:98:1A:D9:D2:A3:18:88:2C:AD:B2:3A:A9:13:B6:D6
X509v3 Authority Key Identifier:
keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.104.205.0/24
Signature Algorithm: sha256WithRSAEncryption
06:02:fa:0a:8e:94:86:f6:37:50:89:49:0f:8c:10:86:5f:39:
ee:70:4a:0c:41:6e:ad:b6:ba:16:7b:30:1b:4b:66:dd:f9:39:
38:e3:d8:3d:62:55:5c:11:2c:3b:8e:91:a7:be:e4:dc:3f:09:
6e:35:29:60:8d:46:c7:46:ca:e3:1c:d7:ff:40:64:4c:83:37:
88:01:22:3a:82:fb:3e:eb:e9:44:41:6d:cd:fd:2e:5c:b6:bc:
00:26:6d:c9:62:1d:27:e6:22:bd:f6:ea:11:89:28:74:09:41:
93:4b:28:68:44:15:f0:59:ae:f1:ab:c8:e8:bd:2b:ce:30:4f:
00:d0:2c:03:00:52:62:6b:fc:16:03:3e:f5:70:49:82:73:10:
2d:4c:e0:38:cd:7c:d1:88:e6:bc:b7:c9:bf:a9:f3:77:72:6e:
b1:b7:af:57:04:fe:6b:ce:3d:b8:f7:01:d7:34:2b:7c:1c:fc:
e4:18:a8:7d:33:dd:2b:69:a3:d0:eb:13:a1:54:05:c2:3b:d5:
d3:9a:f0:bf:54:f0:5e:01:33:03:8b:ba:d5:96:a9:de:3a:da:
eb:99:d3:5c:47:bb:1c:36:53:5d:27:43:ad:b9:78:38:66:27:
23:eb:7a:0d:d0:d3:66:0f:ba:06:ab:5e:2d:d1:0c:a9:f7:8b:
6a:5a:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:26 2026 by rpki-client