
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39352e302f32342d3234203d3e203435323935.roa
File: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (raw, json)
Hash identifier: d2NngQ1ClG3KccosIUCvHr+xZx4Rn0+Y8+h4km4ecJk=
Subject key identifier: FC:87:27:8A:05:4C:3A:B7:39:A6:B2:E6:4D:71:3D:6B:CA:54:08:A0
Certificate issuer: /CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D
Certificate serial: 756D7AAAADC16BC31A53423A745E4827BD806C31
Authority key identifier: ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39352e302f32342d3234203d3e203435323935.roa
Signing time: Sun 03 May 2026 03:16:06 +0000
ROA not before: Sun 03 May 2026 03:11:06 +0000
ROA not after: Sun 02 May 2027 03:16:06 +0000
asID: 45295
IP address blocks: 103.21.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl
rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6d:7a:aa:ad:c1:6b:c3:1a:53:42:3a:74:5e:48:27:bd:80:6c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D
Validity
Not Before: May 3 03:11:06 2026 GMT
Not After : May 2 03:16:06 2027 GMT
Subject: CN=FC87278A054C3AB739A6B2E64D713D6BCA5408A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:eb:c3:8b:9b:f0:09:8d:80:e4:f8:55:38:
b0:dd:9d:ab:3f:db:70:63:36:91:a4:5c:a7:cf:cc:
71:eb:7c:2f:e4:8d:97:c8:c0:46:b5:56:b0:57:39:
62:1b:73:50:33:c6:a5:26:80:76:d6:d0:d1:c3:3d:
6d:d7:1e:f8:fd:56:ec:ce:68:22:b5:9d:38:6f:10:
b8:94:ed:18:e5:ec:8d:75:0d:0a:50:ed:f7:ea:12:
87:f8:76:fd:4c:d6:4c:2a:6b:fc:fc:d6:a9:8f:2a:
35:81:16:1e:d4:76:ce:8e:cb:8b:6a:a3:69:0d:77:
1e:b1:f3:74:a0:d7:c9:56:fe:56:d0:f5:3b:4c:8f:
88:70:2e:5e:74:7b:e6:7d:0c:47:6d:71:1c:cf:af:
74:eb:d6:50:59:19:04:64:82:75:d8:88:3e:b5:b9:
3b:75:2d:e0:af:ae:4e:12:5e:88:4c:e1:6b:74:6c:
ae:f7:bd:ab:1a:68:01:27:9b:0f:2b:e2:92:ab:d3:
2a:57:9f:d4:3e:b7:ba:f5:3c:b1:73:75:59:3f:cf:
c1:2b:f7:1a:e1:fe:88:d1:ec:6d:b1:57:ea:c3:6c:
32:ef:a8:9c:38:f2:0c:cb:4d:6e:29:cb:ee:3a:9d:
55:6e:21:60:51:0b:79:1d:ef:b7:ed:e0:4f:89:59:
b3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:87:27:8A:05:4C:3A:B7:39:A6:B2:E6:4D:71:3D:6B:CA:54:08:A0
X509v3 Authority Key Identifier:
keyid:ED:30:57:EE:DE:F9:F9:9D:6D:10:EA:A0:F4:7E:4D:10:99:7C:1E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED3057EEDEF9F99D6D10EAA0F47E4D10997C1E6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39352e302f32342d3234203d3e203435323935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.95.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f5:96:18:70:1d:d9:52:83:26:84:3c:69:c9:c7:7d:15:64:
cf:26:2f:4d:37:07:b7:35:25:4b:eb:f8:cf:e3:53:cb:80:30:
1c:17:db:3e:96:d9:02:c6:99:9d:80:f4:de:4e:fb:a8:6f:a7:
4d:f0:8c:49:04:5b:06:8c:d1:37:81:40:ed:f5:cb:cd:37:4f:
c3:ba:43:2c:f8:b1:dd:ee:ce:55:49:0e:d2:7a:77:86:e2:bb:
1d:37:37:da:4b:ae:37:83:8e:3e:0e:42:16:08:2b:a5:f1:2e:
bf:8d:bc:e4:a4:27:e9:22:e0:c1:e0:67:56:3e:c1:4b:45:d5:
e1:94:31:af:fe:3b:8c:b8:1e:c7:dc:5f:26:96:eb:b4:d8:ef:
ba:aa:74:71:1d:3f:76:4b:05:00:d8:01:3b:9d:c1:1f:6c:97:
11:fb:1b:90:29:93:17:db:de:2b:17:2b:f7:73:62:40:79:f6:
39:75:1a:c3:93:f0:c8:cd:52:0a:14:e0:bd:bb:bc:f4:26:c2:
32:65:e5:ca:6c:99:eb:32:8b:3c:be:8c:02:f5:c8:1e:b8:26:
70:3c:4d:8c:01:6a:5a:33:09:a9:66:69:6b:c9:48:dc:9a:d2:
ea:15:70:2d:de:75:2e:1f:dc:19:3e:d8:b8:8b:ce:5d:14:a5:
f2:21:e2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:43 2026 by rpki-client