
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31372e302f32342d3234203d3e203338313635.roa
File: 3130332e3234372e31372e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier: 5amtZ+LM77tqz27nu3gKgm99BvgZZy43q/i93530bY0=
Subject key identifier: D4:F7:0F:CE:40:1E:66:DB:30:B0:FF:D6:28:21:A1:86:92:C0:A8:38
Certificate issuer: /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial: 08682542296FFEFE453FF9DD069C02D6B7107670
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31372e302f32342d3234203d3e203338313635.roa
Signing time: Sun 03 May 2026 03:18:13 +0000
ROA not before: Sun 03 May 2026 03:13:13 +0000
ROA not after: Sun 02 May 2027 03:18:13 +0000
asID: 38165
IP address blocks: 103.247.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:68:25:42:29:6f:fe:fe:45:3f:f9:dd:06:9c:02:d6:b7:10:76:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Validity
Not Before: May 3 03:13:13 2026 GMT
Not After : May 2 03:18:13 2027 GMT
Subject: CN=D4F70FCE401E66DB30B0FFD62821A18692C0A838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:49:3f:f5:9b:ef:43:0a:ee:86:7c:ed:3a:
10:ef:bf:fd:dd:38:01:f1:f5:88:98:cb:e3:e7:3a:
00:b6:e5:26:bf:5b:c5:5d:df:83:57:c1:9d:aa:a4:
cd:92:19:3c:1d:5b:ea:0a:96:16:3d:0e:e7:ff:39:
67:48:01:d9:af:02:d5:15:32:d6:ee:53:4f:e7:a0:
94:5f:66:e1:f6:d7:c6:67:2a:2f:fd:00:3d:96:c4:
8f:3b:2f:86:25:e1:e1:ef:db:a3:18:02:c2:b3:f1:
c2:fb:bd:80:5f:cf:60:c8:68:41:58:a1:5c:09:16:
8c:0d:02:ae:74:07:23:30:05:bf:fd:65:3c:13:b1:
bd:41:ec:41:13:1b:2a:e2:52:ff:26:58:18:54:39:
86:57:ba:7c:36:e2:f0:ab:f9:cc:5b:fd:00:0e:3c:
14:e0:03:cc:c5:de:33:86:a9:08:a9:6f:f0:15:6f:
7a:ce:c6:e1:a0:79:8f:ba:9b:fe:d7:1c:30:7b:d7:
73:76:8d:5a:d2:62:a9:d0:49:91:e1:fd:e5:f8:07:
c3:40:c3:c5:76:78:aa:40:fd:f6:70:af:9a:b4:2c:
ef:26:ac:74:98:1c:e5:d3:30:99:f2:a3:87:a4:2b:
59:7e:e8:a7:e8:da:97:20:76:e1:36:41:36:2f:5f:
5d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F7:0F:CE:40:1E:66:DB:30:B0:FF:D6:28:21:A1:86:92:C0:A8:38
X509v3 Authority Key Identifier:
keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31372e302f32342d3234203d3e203338313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.17.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b7:72:05:70:13:f1:13:84:7a:3b:bd:24:21:c9:5c:ea:10:
92:b4:fb:a1:b5:e3:69:89:d7:2e:90:70:b9:37:b2:d5:6d:95:
ca:dc:da:f6:91:ef:e5:d5:0a:1a:1f:6a:1e:db:5a:20:e3:ad:
e0:c2:bf:12:74:c4:b3:57:84:13:15:aa:65:cd:b8:30:ba:1c:
06:1a:5a:8d:62:ad:70:51:e5:1f:61:f7:ef:b8:44:7f:50:8f:
35:77:1e:1f:78:6e:00:c4:a2:e7:8c:57:1d:e4:1f:c6:c9:93:
50:a3:98:a1:f0:93:79:2c:4f:22:06:be:9a:e6:33:9e:b9:b7:
c8:87:79:e7:7f:fc:bb:19:ef:a4:bb:56:0a:63:97:63:14:45:
90:75:2e:31:05:7d:3a:9a:5d:34:eb:61:15:10:75:8c:f2:b9:
86:9c:a6:71:d9:1f:77:48:1e:52:0d:0e:ec:2d:58:1e:ab:58:
11:9b:0c:bc:09:de:63:ce:f2:3e:6a:3a:08:47:0b:0c:26:d3:
1f:e7:1d:1c:e0:4e:ce:dc:de:77:92:12:cf:aa:db:4f:0f:77:
67:44:16:04:88:cd:f0:08:ca:e8:a6:a2:a4:04:65:e8:15:85:
b2:4a:d5:db:b0:38:8e:fe:0a:bd:68:c3:06:45:e9:f8:c9:10:
79:41:0e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:05 2026 by rpki-client