
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa
File: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (raw, json)
Hash identifier: L4o9uZCSJCtTiGzmDyncLujPwn9u+0cj/bmMr7mpke0=
Subject key identifier: 3B:29:95:8C:5C:14:F8:E7:A6:0A:53:39:A3:5F:62:E8:EB:C8:D6:03
Certificate issuer: /CN=BACDD9DBC696965384EE99739EB6991320966120
Certificate serial: 66F936264B1A8E41082A9412F6F7E92845633075
Authority key identifier: BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa
Signing time: Sun 03 May 2026 03:16:25 +0000
ROA not before: Sun 03 May 2026 03:11:25 +0000
ROA not after: Sun 02 May 2027 03:16:25 +0000
asID: 149696
IP address blocks: 103.186.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl
rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f9:36:26:4b:1a:8e:41:08:2a:94:12:f6:f7:e9:28:45:63:30:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BACDD9DBC696965384EE99739EB6991320966120
Validity
Not Before: May 3 03:11:25 2026 GMT
Not After : May 2 03:16:25 2027 GMT
Subject: CN=3B29958C5C14F8E7A60A5339A35F62E8EBC8D603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7e:f4:f2:fe:b8:4f:bf:31:c4:62:76:49:be:
58:0c:b7:01:e8:40:12:8d:f7:a2:7f:3c:d8:48:21:
51:8a:2c:0e:7c:3d:4b:c8:a0:9f:49:fb:07:1b:2f:
f6:19:51:6b:03:1e:de:92:ec:ab:6b:62:05:96:af:
70:1f:66:12:84:36:bc:a7:27:22:9f:1e:a8:23:5f:
cb:67:72:e7:58:37:f3:f8:c8:88:7b:74:45:f9:1d:
77:58:2b:05:61:68:94:fa:e8:61:b1:cc:50:3f:41:
2d:c5:87:32:75:b6:b5:34:4c:88:d2:44:e8:81:3f:
c5:f3:33:f1:d0:d0:f0:bb:14:b3:c8:af:41:26:d4:
54:2d:e7:20:50:df:68:46:e3:16:54:e5:e4:0a:0f:
08:8f:12:37:7c:b8:77:bc:8e:46:ae:4f:8f:b3:aa:
e4:9a:f8:4d:25:87:b5:bc:71:9f:4f:02:d7:b0:da:
a3:08:45:bf:a2:ed:aa:86:bf:94:71:05:85:55:5e:
06:82:07:18:b0:f0:6d:b7:d3:30:f4:6c:ed:dc:58:
88:a2:cc:15:70:82:47:ff:3c:bb:8e:70:6d:14:a3:
47:b5:fa:70:a6:87:7c:8f:45:db:3a:c4:ac:60:11:
a7:8b:50:f8:c6:42:4a:cb:1d:42:d8:61:ea:6a:77:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:29:95:8C:5C:14:F8:E7:A6:0A:53:39:A3:5F:62:E8:EB:C8:D6:03
X509v3 Authority Key Identifier:
keyid:BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.98.0/24
Signature Algorithm: sha256WithRSAEncryption
19:cb:b1:c4:65:37:53:ac:57:7b:dd:dd:a6:b2:69:41:87:25:
e0:2c:e9:2a:ab:93:11:f6:4a:d4:5b:e7:96:5f:2b:66:16:e8:
d2:6a:be:2a:09:dc:c2:52:86:78:3f:c0:a8:b3:97:ce:c2:71:
fc:8b:ec:e3:66:6e:bb:5e:e3:4e:d6:1a:4e:a8:f8:3e:4c:2f:
22:ec:96:77:df:79:3a:fe:0e:c0:7c:5c:cb:5e:48:0c:5c:95:
04:ec:07:9b:07:7d:64:c4:82:6a:8c:02:cb:2f:fc:83:d8:57:
4c:fd:05:ed:33:3a:fa:e4:2a:f3:61:c9:5b:4c:c8:dd:8a:b4:
a0:bd:20:c2:cc:e8:d2:8a:5b:e0:72:40:50:a7:92:00:4a:90:
f7:4e:06:28:a7:bf:74:20:06:91:db:c2:e9:e6:6b:4e:fe:5d:
98:9e:75:dc:56:19:a1:da:06:48:19:21:9a:ed:98:aa:2a:5f:
55:d6:c4:41:2a:cb:d7:d5:ec:54:0d:c6:c1:6c:81:04:dd:df:
b8:44:ed:65:58:6b:25:d5:dc:e7:bd:07:07:5a:91:3d:34:c2:
6f:e7:7f:d4:c0:b8:3d:81:e5:98:5d:f1:0b:83:a6:cf:48:1b:
d5:0f:72:5f:5c:4d:b0:f5:ee:5b:1e:4f:cc:1a:3e:37:1b:f0:
5f:8f:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:48 2026 by rpki-client