
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa
File: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (raw, json)
Hash identifier: jccZCiZqanCMuer6DeJWWqbD0FyYnO8bjfTBGy1Zc5I=
Subject key identifier: 3F:62:5B:C8:EF:99:80:1B:87:13:03:42:E7:FE:82:2F:A5:65:27:55
Certificate issuer: /CN=BACDD9DBC696965384EE99739EB6991320966120
Certificate serial: 12F06653DE6A6E1ACEEFB16F8DB5165D56D5DD34
Authority key identifier: BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa
Signing time: Sun 03 May 2026 03:16:26 +0000
ROA not before: Sun 03 May 2026 03:11:26 +0000
ROA not after: Sun 02 May 2027 03:16:26 +0000
asID: 149696
IP address blocks: 103.186.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl
rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f0:66:53:de:6a:6e:1a:ce:ef:b1:6f:8d:b5:16:5d:56:d5:dd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BACDD9DBC696965384EE99739EB6991320966120
Validity
Not Before: May 3 03:11:26 2026 GMT
Not After : May 2 03:16:26 2027 GMT
Subject: CN=3F625BC8EF99801B87130342E7FE822FA5652755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:8f:75:4d:34:d7:de:4a:9f:d3:a9:45:8c:
68:1a:ae:79:dd:4b:e6:cb:fd:77:9b:d8:29:90:9c:
02:fd:72:82:6a:f0:c0:58:fe:5c:4d:12:5e:59:1a:
15:b8:74:b9:22:0e:10:77:27:a7:d9:85:d7:b0:de:
ac:be:42:ee:d6:af:d1:2c:25:18:a0:16:10:8f:05:
7f:eb:d4:b0:28:e2:b6:04:7f:ed:6f:5d:23:00:d3:
4b:3c:78:12:2a:89:5c:50:29:8c:81:d8:d0:17:9e:
70:90:90:8d:14:64:a4:85:79:ac:5a:0f:b2:c5:66:
83:31:88:d0:37:58:6f:39:72:42:3a:b3:19:c5:3a:
6d:d9:d4:23:d3:62:bb:2e:ae:c1:26:0b:cc:9e:c5:
40:f9:22:ae:6c:a4:28:7a:93:82:e9:de:27:aa:25:
d4:b3:ae:1d:f7:5a:d8:65:56:93:74:e5:e5:c4:d5:
e1:ac:5b:cc:f5:17:1b:58:a2:aa:63:30:a1:9f:3c:
d6:30:4a:0e:71:8c:8c:de:e2:75:f0:fe:e7:4c:c5:
ae:d0:05:12:aa:c7:7b:49:79:5b:03:66:f9:a8:12:
01:e1:ac:7d:22:2e:e0:34:e4:c4:79:4d:78:6f:92:
a3:9f:be:00:96:a9:7c:ad:5f:c6:42:01:36:1c:90:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:62:5B:C8:EF:99:80:1B:87:13:03:42:E7:FE:82:2F:A5:65:27:55
X509v3 Authority Key Identifier:
keyid:BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:cb:65:35:b4:17:1e:fd:98:97:60:c8:5f:56:32:4e:80:02:
4b:7a:9d:61:fe:71:f4:06:14:52:7e:9d:73:32:ec:12:f5:92:
c2:c8:a1:a6:a5:ca:83:01:42:0f:6c:74:a3:ed:56:d9:9c:29:
24:58:76:7d:b5:51:79:c3:84:dc:58:2b:c6:19:2d:ce:c7:81:
eb:62:b4:ed:6f:7e:3a:76:a6:56:49:18:fe:97:0c:e3:aa:57:
39:2a:2b:3b:0f:03:b2:96:13:9a:58:10:2b:d7:1e:2a:2d:2a:
46:10:55:27:3a:d0:56:b3:fb:ea:15:f2:c7:ac:88:32:35:20:
3b:f5:40:61:0e:c2:e6:d8:fe:f9:9a:b0:9c:3c:c9:74:aa:d0:
42:01:37:ae:7d:49:2d:0c:63:52:b7:5a:f9:51:51:ba:6d:78:
d1:d8:81:1e:d5:cb:9a:02:48:8f:2d:49:f5:5a:87:2a:8a:9f:
3a:b1:1c:5a:8e:e7:0c:a4:c6:69:16:9f:59:e2:80:36:9d:21:
e6:77:83:b8:f4:01:8b:a5:06:6e:d4:01:84:a9:a8:b1:91:61:
71:b2:a6:b8:54:86:ea:40:21:3b:88:a6:26:86:86:9d:97:bc:
39:19:1c:3f:60:73:34:e7:c9:5f:b4:e2:3b:03:20:e4:52:cf:
8d:2c:bd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:54:48 2026 by rpki-client