
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33392e302f32342d3234203d3e20313339343536.roa
File: 3130332e3138352e33392e302f32342d3234203d3e20313339343536.roa (raw, json)
Hash identifier: uW+IVxfV8f87IsoKQJA75zmndKbl8xC3CzJnrp9BN1Q=
Subject key identifier: 78:37:68:EE:BF:82:C0:B5:FB:6F:1D:4E:36:D0:D9:AC:F6:03:C6:D2
Certificate issuer: /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15
Certificate serial: 294D1662D8024C5B9FC18CB17F23F095FEE04E7F
Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33392e302f32342d3234203d3e20313339343536.roa
Signing time: Sun 09 Aug 2026 08:40:36 +0000
ROA not before: Sun 09 Aug 2026 08:35:36 +0000
ROA not after: Sun 08 Aug 2027 08:40:36 +0000
asID: 139456
IP address blocks: 103.185.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl
rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 12:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4d:16:62:d8:02:4c:5b:9f:c1:8c:b1:7f:23:f0:95:fe:e0:4e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15
Validity
Not Before: Aug 9 08:35:36 2026 GMT
Not After : Aug 8 08:40:36 2027 GMT
Subject: CN=783768EEBF82C0B5FB6F1D4E36D0D9ACF603C6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:02:c8:6a:e9:17:5e:9c:43:13:f3:65:db:
b2:d2:cf:ac:fe:9b:d8:d6:df:43:af:3a:4b:50:43:
90:ff:38:24:62:92:23:6c:08:6e:39:aa:fa:a1:60:
b1:55:30:ee:77:4f:84:88:c3:d4:10:15:a8:6d:cb:
c7:08:fe:af:59:cb:c0:c3:3f:5a:0b:71:72:40:71:
0c:2e:f0:aa:e0:46:d5:7c:4d:8c:c5:b6:ea:38:bf:
34:ca:d0:69:c9:43:b0:92:97:a1:1b:66:ad:f2:90:
bf:a6:c7:4c:35:53:5f:75:06:41:09:8d:9c:12:cc:
3f:25:b3:fb:f3:95:17:75:77:59:b2:42:bc:69:e0:
3d:d2:67:6f:d8:cf:8b:95:66:0b:a2:6f:0c:79:62:
a3:4c:6b:e1:ba:5c:2a:3d:57:2c:38:99:44:ea:68:
2e:82:d2:ab:5c:59:48:f7:06:f3:dd:9d:dc:25:1a:
66:9f:48:b1:76:51:3e:32:18:1c:79:82:d1:d2:43:
cc:59:b3:92:fd:d5:85:99:3c:ea:29:69:de:2c:f0:
c0:ea:94:91:22:20:3b:d1:01:7b:8f:d3:a1:61:f9:
78:b0:b1:42:a1:8c:11:d8:3b:0d:35:78:3c:a8:ab:
11:54:b6:41:5d:7c:c0:1a:5b:ee:86:3d:22:be:1f:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:37:68:EE:BF:82:C0:B5:FB:6F:1D:4E:36:D0:D9:AC:F6:03:C6:D2
X509v3 Authority Key Identifier:
keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/3130332e3138352e33392e302f32342d3234203d3e20313339343536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:91:fb:80:91:43:e6:39:e1:df:98:21:00:32:be:4e:a4:ce:
c7:4e:b3:45:a1:4e:bb:3a:ec:5d:d3:aa:c5:45:c3:d7:e7:26:
bf:dd:9c:c8:c1:2f:16:c3:f5:41:cd:07:f7:b3:c9:98:b0:31:
54:0b:71:6b:f7:1b:15:b6:0c:42:7f:9e:8d:45:e7:15:9a:0a:
1b:2c:5a:d7:f5:b5:cc:8c:fe:1c:f5:60:53:7a:9e:63:fd:a4:
3a:1e:3d:f4:bf:76:fc:3f:2f:68:fe:ec:f1:22:4b:93:7d:cf:
60:26:9e:71:05:45:21:d4:aa:cc:3a:35:8e:e9:16:5c:b9:a5:
02:bb:39:5e:0d:75:54:db:a0:93:58:ea:b4:66:7d:c9:27:1a:
3c:40:56:cd:e9:de:da:c9:a0:06:ca:81:96:e7:68:75:a4:2f:
24:6f:8a:8f:cd:8a:ba:17:f8:d5:02:7d:d3:67:30:df:b4:7f:
b9:e3:6a:fa:fc:89:b8:87:1e:d6:7b:cd:0c:eb:06:12:01:71:
b8:88:c1:96:74:7b:e6:20:0e:d5:22:41:6b:a7:e9:99:e5:ee:
31:ec:d0:8e:93:b5:5a:41:25:54:df:54:f7:51:e6:59:6e:1d:
48:50:ee:ae:33:a1:61:3c:b1:4c:ca:1c:a9:ad:08:5a:79:9d:
3a:ff:ce:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:21 2026 by rpki-client