
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/3130332e32322e39382e302f32342d3234203d3e20313530323433.roa
File: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (raw, json)
Hash identifier: u+2M/bTSruaNYmfOr6yekhQrDfOBud5yonvhzBxXBPo=
Subject key identifier: 03:4A:24:78:5D:FD:D5:7E:38:3C:44:51:25:C8:55:C7:92:F8:7E:03
Certificate issuer: /CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE
Certificate serial: 3B6130A8837AB520C5BCED3C16DD80169590908D
Authority key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/3130332e32322e39382e302f32342d3234203d3e20313530323433.roa
Signing time: Sun 03 May 2026 03:10:02 +0000
ROA not before: Sun 03 May 2026 03:05:02 +0000
ROA not after: Sun 02 May 2027 03:10:02 +0000
asID: 150243
IP address blocks: 103.22.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl
rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:61:30:a8:83:7a:b5:20:c5:bc:ed:3c:16:dd:80:16:95:90:90:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE
Validity
Not Before: May 3 03:05:02 2026 GMT
Not After : May 2 03:10:02 2027 GMT
Subject: CN=034A24785DFDD57E383C445125C855C792F87E03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:1d:37:84:d5:92:e2:ef:9b:30:80:b3:cc:
7d:db:a2:46:e6:9b:23:30:7e:a3:02:8b:48:3f:8b:
51:5f:d4:c3:d3:87:c4:5b:6d:e4:a4:05:c7:2a:99:
39:7b:e3:d7:b0:c7:73:99:10:eb:7c:df:38:0e:0c:
6d:ba:ea:a9:2c:fd:be:46:d8:1d:68:73:48:4e:85:
c2:0c:7c:f1:94:da:63:d3:80:26:e2:c4:9f:ce:9b:
c8:13:cd:77:ea:34:0c:df:2f:ca:36:a5:2e:98:54:
59:6c:7f:55:85:b8:b1:07:47:5d:0f:76:c2:a7:d0:
00:7e:64:21:e8:5f:23:6b:42:83:13:29:c4:cc:26:
b4:2c:89:d0:11:b0:17:b1:35:b3:7a:4a:55:81:5c:
ea:70:03:b2:6d:fe:4d:12:c8:de:49:2b:3c:66:2a:
df:18:a3:c8:0c:c5:d7:9a:a6:fd:6a:57:d3:21:51:
17:8a:ad:bb:d4:fc:44:38:d2:62:43:16:64:52:db:
84:b4:0f:24:98:f1:88:e1:8a:a8:e0:98:4c:db:6a:
bc:99:00:93:42:02:4e:a7:e6:c2:6c:59:43:31:c7:
29:1b:99:c8:b5:eb:74:e5:4f:17:39:20:98:99:2b:
75:46:c6:cc:f5:31:6b:a2:ea:42:a9:1e:33:f9:68:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4A:24:78:5D:FD:D5:7E:38:3C:44:51:25:C8:55:C7:92:F8:7E:03
X509v3 Authority Key Identifier:
keyid:BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/3130332e32322e39382e302f32342d3234203d3e20313530323433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f7:30:b1:d2:51:47:67:40:f4:49:63:50:ce:b2:cf:a0:af:
d5:a2:2b:c9:17:17:8b:3a:40:c9:af:35:aa:f7:75:6a:90:77:
a6:c4:f9:e0:11:d8:84:18:24:17:5b:c4:3a:b0:d5:88:44:20:
9f:1d:2f:fc:74:3d:2a:2c:28:6f:bd:1b:a1:1d:e0:45:64:ae:
fe:34:19:c7:5f:e6:67:38:35:33:7c:9c:63:ff:f2:f0:73:03:
ed:d6:72:ea:ff:39:52:b8:2e:be:c6:cd:a0:a3:b0:e2:17:6f:
7e:8d:01:03:02:d1:94:a2:ec:e3:7f:43:61:6d:94:61:3a:6b:
d1:8a:55:c6:36:cc:93:be:4a:50:4b:df:cc:35:ef:f6:dc:35:
d2:f3:27:22:90:22:1f:54:87:aa:24:d2:16:0b:e7:06:9d:af:
67:81:12:84:9a:3b:4a:f2:6a:b3:41:85:f2:bc:47:6b:af:93:
54:fa:7f:31:6b:12:b5:fb:0b:df:21:74:46:59:b3:b1:47:8b:
ad:1a:26:3b:bf:cc:05:c2:a7:b7:93:a5:67:63:f8:55:13:34:
ec:9c:3b:8f:0b:5d:1a:65:11:f1:0a:d1:e6:81:81:32:7d:21:
1c:61:c1:4d:1d:dc:b8:7a:e3:53:28:42:c1:e5:03:e2:fe:a7:
71:5c:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:27 2026 by rpki-client