
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa
File: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (raw, json)
Hash identifier: WgEvnA7HrzP4zMt539LVlI9Pa+Gm1+otpgLRC+JlvSQ=
Subject key identifier: BD:D4:88:24:BB:57:7E:D1:0A:89:5C:3B:BB:15:A3:F3:E9:CE:59:27
Certificate issuer: /CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20
Certificate serial: 068DAD5563F66ADF107EDDEED38A0FA705A2FFDC
Authority key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa
Signing time: Sun 03 May 2026 03:11:32 +0000
ROA not before: Sun 03 May 2026 03:06:32 +0000
ROA not after: Sun 02 May 2027 03:11:32 +0000
asID: 141624
IP address blocks: 103.160.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl
rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8d:ad:55:63:f6:6a:df:10:7e:dd:ee:d3:8a:0f:a7:05:a2:ff:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20
Validity
Not Before: May 3 03:06:32 2026 GMT
Not After : May 2 03:11:32 2027 GMT
Subject: CN=BDD48824BB577ED10A895C3BBB15A3F3E9CE5927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:38:69:72:64:2e:b1:20:60:3a:d7:10:62:
d4:98:18:e8:e5:61:8d:40:5b:11:80:a1:d2:6f:cb:
9c:e1:5d:ef:c1:62:e5:5c:08:5f:d9:1c:d9:57:15:
2c:84:63:e6:82:c2:5d:7c:e1:f1:b1:72:83:04:a8:
ea:fe:d9:9b:bd:26:dc:4b:cc:df:2b:4c:03:24:c9:
5d:74:c4:f1:b9:05:ec:f4:19:4b:2d:00:32:ab:29:
b4:27:b4:62:01:08:5c:05:9a:e1:69:65:97:9a:7a:
e9:2e:b1:6b:d7:94:74:bf:5b:2c:83:c7:b4:0b:9e:
9c:a2:5c:7f:dc:77:9d:44:16:54:6b:77:ea:a1:6c:
96:10:36:12:93:ca:dc:54:d4:25:d9:d7:bc:c7:aa:
a5:b4:3b:09:f3:88:3b:3b:35:fb:d2:1f:18:48:a8:
27:bc:c3:9c:f3:89:66:52:4d:81:1b:0f:c8:f1:ec:
13:0c:e4:dc:0e:61:d4:a9:b3:ac:b7:11:16:34:90:
8a:4f:a2:9b:c4:5e:ee:e5:3f:8e:b2:a1:63:6f:2e:
8e:c4:16:74:7e:08:82:5d:c7:5a:d0:fb:5d:98:71:
38:e5:04:dc:79:e9:aa:49:80:a2:d4:30:ce:18:5a:
5a:4c:f5:85:1e:27:28:1f:43:2c:0a:ed:ed:2d:7a:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D4:88:24:BB:57:7E:D1:0A:89:5C:3B:BB:15:A3:F3:E9:CE:59:27
X509v3 Authority Key Identifier:
keyid:7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.18.0/23
Signature Algorithm: sha256WithRSAEncryption
07:17:59:74:04:9d:76:93:b2:92:a4:5c:97:e3:dc:c7:6e:9a:
84:93:68:13:ef:7e:e0:6b:68:ad:62:e7:da:09:0a:fd:21:ad:
c9:db:31:c9:f1:00:94:db:1f:99:a3:e5:52:3c:29:ec:33:9f:
e8:17:04:3a:e9:f8:a4:a1:45:30:dc:7f:64:2a:62:31:78:a1:
f5:4d:51:f8:1d:55:0a:2c:6b:01:d3:5a:05:6b:a8:21:2d:a5:
c0:ed:ad:80:13:d2:72:86:ca:0b:a5:56:26:e6:b4:f2:52:f1:
3f:3c:87:31:2d:c1:ba:4a:f1:a0:e5:ac:55:8c:d6:9c:8e:82:
ff:b8:e7:95:89:71:84:60:06:2e:b2:81:d6:ee:da:01:d5:b3:
a4:56:b5:44:3a:c6:ea:f9:03:a1:91:48:24:56:f5:55:6e:ca:
5b:35:19:10:73:0b:4f:d6:58:c7:e5:d6:e2:49:78:f8:48:45:
14:a6:70:b2:10:04:23:12:98:b1:82:1c:8a:bc:b2:cb:eb:62:
91:4e:63:38:b6:38:ad:f7:b0:c6:da:80:c6:e7:42:65:48:24:
ad:c8:16:a2:3a:a7:dc:63:2e:c8:b5:a2:e5:b3:90:61:14:fd:
e3:b5:3d:85:e1:60:27:be:3a:04:4a:22:39:1f:87:cc:02:bd:
c2:29:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:22 2026 by rpki-client