
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32322e302f32342d3234203d3e20313530353537.roa
File: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (raw, json)
Hash identifier: UmfUI05XEmk9hWgPXOd+povgJcvWbtg+6u6rN6Z8bBg=
Subject key identifier: C8:96:B9:54:21:51:D1:2D:16:50:AB:83:FA:24:C5:6C:DB:94:47:AE
Certificate issuer: /CN=2FE1FA7D4DD3388355BABAD73020013D485C168C
Certificate serial: 6A35B426EAE7AF2929BF2C18F0AFA5818F2B2F45
Authority key identifier: 2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32322e302f32342d3234203d3e20313530353537.roa
Signing time: Sun 03 May 2026 03:12:16 +0000
ROA not before: Sun 03 May 2026 03:07:16 +0000
ROA not after: Sun 02 May 2027 03:12:16 +0000
asID: 150557
IP address blocks: 103.95.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl
rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:35:b4:26:ea:e7:af:29:29:bf:2c:18:f0:af:a5:81:8f:2b:2f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FE1FA7D4DD3388355BABAD73020013D485C168C
Validity
Not Before: May 3 03:07:16 2026 GMT
Not After : May 2 03:12:16 2027 GMT
Subject: CN=C896B9542151D12D1650AB83FA24C56CDB9447AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:82:be:d7:12:99:42:75:c0:19:33:ec:65:
d3:41:6a:f6:b0:0d:c9:90:e2:15:da:38:dd:c9:24:
6d:7a:c9:be:68:74:9a:cd:93:77:22:60:b9:cf:81:
28:8e:05:45:47:96:92:67:5d:72:98:9c:65:51:14:
10:b0:57:b1:2c:26:26:2c:ac:51:5f:5e:be:fc:58:
ab:f5:db:40:9b:63:7d:fb:a2:f8:9f:16:ee:f3:11:
27:bf:3a:c6:02:12:f3:7a:73:8f:2e:20:92:f5:28:
4d:7a:29:65:2d:2f:bc:97:3b:78:76:d0:42:23:74:
2d:3d:49:17:b2:91:e6:af:76:79:a3:62:3a:0e:e1:
73:e0:79:78:e0:c8:92:49:9a:59:8b:0a:21:f1:96:
31:77:94:39:9d:39:d7:60:20:12:f2:6d:9d:5a:da:
e2:76:03:cb:b5:36:0e:2f:75:4b:70:24:0d:f1:52:
ac:a9:ed:bc:3b:bd:be:39:fc:2f:cc:dc:d8:30:f0:
90:42:e1:a9:e5:c2:13:43:72:05:fb:16:3e:47:7d:
7d:ee:15:41:71:96:6e:6e:c4:bd:38:42:26:6f:d6:
76:f5:cf:cb:55:db:cd:5f:df:68:1a:7c:ee:7e:16:
17:8f:9d:95:96:a2:db:12:fc:92:90:7a:0d:7e:cf:
a1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:96:B9:54:21:51:D1:2D:16:50:AB:83:FA:24:C5:6C:DB:94:47:AE
X509v3 Authority Key Identifier:
keyid:2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32322e302f32342d3234203d3e20313530353537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.95.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6e:61:fc:4b:c5:fb:90:eb:4d:ae:b7:fd:e8:f9:dc:0f:17:
75:6e:c4:67:c5:f9:b8:8d:39:92:50:3f:12:a8:5d:ac:a7:e5:
32:5b:60:51:74:e5:04:a7:6a:d3:da:a5:ec:0d:c0:a8:a9:c3:
8c:cd:8a:06:cf:6a:2e:88:75:b9:fd:60:4a:d7:2d:6f:25:f6:
e6:74:83:58:b7:16:a3:26:0f:1a:39:5d:e3:35:09:11:d6:8d:
70:23:fc:38:2a:90:ba:e6:23:99:dc:ef:52:af:35:bc:d0:dd:
52:b2:6f:fe:e5:5d:b3:4b:47:6a:44:11:7c:3a:12:34:69:c1:
37:b7:3b:3c:fe:50:bc:10:43:f3:38:33:43:b8:4e:92:7a:20:
d8:a6:dd:be:29:76:a0:b9:50:03:17:1c:81:23:c2:5b:78:07:
b0:14:c9:eb:7f:e6:3b:af:54:ce:bd:16:6b:fb:b0:85:ec:1c:
08:26:8e:90:c8:bb:9d:37:08:9b:2c:44:25:ce:ba:05:97:e6:
da:0c:36:e6:53:e8:5c:1c:4c:58:84:9b:4c:fc:24:80:05:3e:
eb:ee:f1:9f:8e:bd:fc:c2:14:94:13:cd:89:c7:17:7b:ea:9f:
c4:c5:0c:ee:32:cf:25:17:e2:0d:4f:bd:05:69:56:fb:06:e0:
18:2e:61:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:04 2026 by rpki-client