
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa
File: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (raw, json)
Hash identifier: f/dM7QAxBhLE+nmzvOko9oggYTcGzBvx5hlqw5xdlCY=
Subject key identifier: 5B:D9:8E:30:5D:24:53:54:F0:4D:68:80:30:69:D3:3E:F0:C4:88:2B
Certificate issuer: /CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5
Certificate serial: 2508D7DF2031FD0E6DA3D07513310DD6546776A9
Authority key identifier: 69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa
Signing time: Sun 03 May 2026 03:15:40 +0000
ROA not before: Sun 03 May 2026 03:10:40 +0000
ROA not after: Sun 02 May 2027 03:15:40 +0000
asID: 149752
IP address blocks: 103.189.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl
rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:08:d7:df:20:31:fd:0e:6d:a3:d0:75:13:31:0d:d6:54:67:76:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5
Validity
Not Before: May 3 03:10:40 2026 GMT
Not After : May 2 03:15:40 2027 GMT
Subject: CN=5BD98E305D245354F04D68803069D33EF0C4882B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:8a:32:e5:21:cf:c1:dd:c0:4c:14:24:fc:
ab:3d:81:f4:87:9b:89:54:ea:2b:db:4f:47:e0:e1:
9b:eb:0c:bd:17:ba:f0:d7:ce:24:67:91:ac:93:e8:
f3:63:11:e2:00:c7:57:c6:6d:92:a1:a2:23:9f:b8:
ae:54:21:e1:80:d8:9a:94:11:33:50:5c:6e:99:ab:
7e:f9:69:93:09:74:81:ab:5f:d5:03:02:47:2b:0c:
fe:8c:c5:ae:68:2c:21:13:61:19:af:2e:9a:71:8b:
04:e9:13:80:92:0d:35:70:22:5b:53:4f:56:6d:b8:
70:f7:7d:c0:bf:3a:b1:a1:05:ea:e4:be:b0:28:b8:
3c:a5:fc:31:0c:80:06:f6:eb:73:10:32:a5:26:2f:
c8:63:19:fd:7d:17:b6:f1:5d:29:bd:9c:0b:0e:ad:
a9:34:19:35:a2:f9:7b:ba:52:89:36:50:df:07:38:
5d:0e:5f:cc:3f:21:50:3b:53:a9:6b:f4:3a:64:f9:
97:1b:85:32:68:25:cf:5e:fe:ef:9a:86:3e:76:50:
04:3f:bc:00:2c:9e:1d:7b:0a:0b:19:05:58:c1:4f:
25:91:74:5f:4f:74:a1:02:fd:ea:e5:22:63:1f:bb:
eb:d4:23:41:4b:3f:8b:b7:fb:f2:e5:73:ff:58:59:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D9:8E:30:5D:24:53:54:F0:4D:68:80:30:69:D3:3E:F0:C4:88:2B
X509v3 Authority Key Identifier:
keyid:69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.139.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c5:b1:de:f0:d1:a9:a7:16:fb:3f:a4:8a:dc:d3:75:a9:00:
b6:ea:98:44:4a:eb:2e:a3:92:83:b9:5e:3c:74:c1:dd:1d:31:
27:d7:87:45:5f:35:76:1e:a1:d7:70:c6:fa:27:57:24:69:4c:
5b:de:77:dc:df:d4:f3:0e:8b:dd:49:f2:20:75:b5:a9:f4:23:
79:90:ce:ce:cc:0f:57:89:d0:e4:30:a5:73:e5:6a:a8:77:31:
51:d5:92:3c:bd:58:cc:0f:f6:7d:8e:f6:2d:50:a0:04:b8:52:
6c:6a:f0:15:64:61:3e:5b:09:3e:69:a8:42:65:12:fd:7d:54:
25:73:a3:8f:5e:b0:e3:c9:ae:3a:e7:9a:6d:a9:66:00:40:ef:
0a:0b:35:1c:83:cd:99:a5:09:aa:58:f1:97:ef:b0:32:f8:91:
69:7d:31:64:91:2a:99:01:a2:df:97:04:7a:08:d7:85:29:c0:
06:8e:9d:3f:e2:a6:24:9f:72:06:28:a4:1a:7e:41:a0:f6:ca:
e3:5d:0d:d7:2b:d3:2e:bd:9f:61:88:a1:39:a5:07:72:20:0d:
1d:62:43:a6:46:06:cb:c0:9f:25:5f:eb:98:fe:82:af:cc:b6:
5c:c6:12:a9:70:e5:49:f1:4d:91:82:82:bb:10:72:8b:f5:99:
4f:b9:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:44 2026 by rpki-client