
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa
File: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (raw, json)
Hash identifier: WTrF0cDS2UOT2PvqICS4rHLAPEa2DituaEKy6TilvQo=
Subject key identifier: 6F:47:C5:F2:A6:1C:B6:56:CB:42:48:55:C1:01:09:E0:55:5B:FA:EA
Certificate issuer: /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32
Certificate serial: 2C72BA93FCA63A60183ABB5A48E17E2AFD22F6B3
Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa
Signing time: Sun 03 May 2026 03:09:49 +0000
ROA not before: Sun 03 May 2026 03:04:49 +0000
ROA not after: Sun 02 May 2027 03:09:49 +0000
asID: 139427
IP address blocks: 103.31.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl
rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:72:ba:93:fc:a6:3a:60:18:3a:bb:5a:48:e1:7e:2a:fd:22:f6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32
Validity
Not Before: May 3 03:04:49 2026 GMT
Not After : May 2 03:09:49 2027 GMT
Subject: CN=6F47C5F2A61CB656CB424855C10109E0555BFAEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:47:d9:f4:9e:69:6f:1b:83:c7:50:9a:30:
a5:13:51:d0:91:ad:e4:79:60:de:88:7e:68:1e:8f:
6d:65:98:82:fa:a9:c4:df:c3:b1:dd:53:69:43:13:
ab:30:9e:26:a9:33:2c:7e:c0:33:33:24:e8:96:34:
bf:45:27:db:f4:c4:2c:f6:e2:21:c0:d8:74:4c:10:
a1:89:12:95:cf:46:f9:2f:c7:57:ed:09:9b:89:f0:
10:7b:82:08:9a:82:ca:72:d8:ae:fb:16:0c:be:26:
5d:d6:c8:dd:f6:75:33:04:a4:a4:a0:4a:4e:15:af:
cc:48:9e:4d:3a:94:7e:25:44:00:af:b7:30:08:d5:
4f:71:2f:26:8c:e1:6e:9c:69:bc:24:11:38:bd:ed:
a9:15:b1:d0:a6:3e:a1:3c:26:da:7c:de:ca:be:69:
45:07:fe:8c:39:b3:55:02:39:8d:73:1b:24:97:ec:
74:b8:f8:53:12:09:0f:6a:d0:df:8f:7f:2b:9b:b8:
3b:17:46:b0:10:72:f9:a0:02:22:a4:8b:6f:ab:16:
c8:62:01:f6:7f:17:33:4a:98:fc:8f:c1:90:49:a2:
31:17:43:dd:45:0d:e7:48:d7:3f:86:32:78:f4:d5:
b1:f3:af:e4:25:80:34:f3:84:9c:91:ae:84:94:b6:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:47:C5:F2:A6:1C:B6:56:CB:42:48:55:C1:01:09:E0:55:5B:FA:EA
X509v3 Authority Key Identifier:
keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.248.0/24
Signature Algorithm: sha256WithRSAEncryption
21:46:d2:5a:d2:42:ee:21:2c:ad:bd:5c:6b:53:36:58:7a:5e:
61:2d:f5:e0:ec:09:d1:68:32:c1:75:c9:bd:23:87:64:6a:34:
13:b9:b4:a8:0e:8e:d3:e4:dc:6f:f5:fd:88:c4:3d:34:da:2e:
1c:74:7e:eb:00:71:1f:9b:e8:d4:76:96:10:a6:00:75:b9:d7:
81:12:b8:d7:f6:86:ec:0a:d1:20:e1:98:df:61:70:23:88:60:
b4:f7:e2:69:d6:13:85:a9:c3:e7:09:ef:de:31:44:52:e1:1a:
da:10:ec:7b:3c:20:99:d9:f0:5d:d2:ae:cc:ee:16:c6:e9:78:
f6:ed:ea:1b:b0:32:a8:45:de:68:60:f0:f4:b7:21:9e:7f:b2:
9d:bf:0e:66:a9:ae:73:31:33:b3:c2:31:75:3d:36:b1:5c:c4:
4e:cd:a6:a0:5e:f1:20:cc:af:21:c1:b0:06:9f:24:a1:90:01:
40:d0:ee:da:f4:74:92:ab:7a:8d:b3:67:e0:73:86:7e:01:db:
1a:1e:f8:aa:dc:1b:73:3c:6a:ad:e8:7f:18:00:da:86:13:7b:
0f:6c:f5:3a:c8:46:45:10:d8:2d:f1:11:b5:45:ee:b8:d0:0c:
4e:50:28:35:9d:ad:c3:12:58:1d:5b:a7:17:ae:85:d1:17:bd:
10:5e:ed:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:06 2026 by rpki-client