
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/3130332e3138352e34352e302f32342d3234203d3e20313339343536.roa
File: 3130332e3138352e34352e302f32342d3234203d3e20313339343536.roa (raw, json)
Hash identifier: 5P1W95x+b+VcAeWv+Uihp1cvRwss8nuTjkrW2k6u0F4=
Subject key identifier: 6D:7C:17:B8:12:7F:13:CA:F8:FA:53:42:DE:A7:83:76:97:34:DF:B1
Certificate issuer: /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35
Certificate serial: 3A43D9CD30AE04C7A41B81DED47C8C32ECA145D0
Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/3130332e3138352e34352e302f32342d3234203d3e20313339343536.roa
Signing time: Mon 10 Aug 2026 15:00:32 +0000
ROA not before: Mon 10 Aug 2026 14:55:32 +0000
ROA not after: Mon 09 Aug 2027 15:00:32 +0000
asID: 139456
IP address blocks: 103.185.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl
rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 12:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:43:d9:cd:30:ae:04:c7:a4:1b:81:de:d4:7c:8c:32:ec:a1:45:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35
Validity
Not Before: Aug 10 14:55:32 2026 GMT
Not After : Aug 9 15:00:32 2027 GMT
Subject: CN=6D7C17B8127F13CAF8FA5342DEA783769734DFB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:d5:7c:24:78:e8:fa:f5:29:37:6c:23:6f:
fb:ca:dd:ad:82:de:90:86:5a:80:6a:cf:55:a7:37:
51:18:c1:37:2b:57:c2:fb:1e:37:71:dc:25:ba:18:
eb:d6:cc:8f:56:1a:a4:e9:4e:a3:3a:69:41:bc:38:
6e:03:17:f2:04:76:ce:eb:1a:45:0d:9f:d6:07:81:
5f:65:ff:e8:fa:8d:cf:a2:1b:56:f4:dd:5d:0a:a6:
15:9d:d0:e6:98:d0:dc:17:bd:34:fc:62:4e:09:e4:
d6:18:5e:03:70:72:47:ec:34:43:89:39:bb:89:e6:
96:5b:25:66:04:f9:ed:2a:6f:e2:08:64:26:57:2b:
48:c2:a7:0c:bb:0e:82:a2:e5:25:66:35:3d:74:f3:
32:f0:31:ca:a2:8a:72:1a:3b:f2:a9:57:cc:06:ba:
2d:b6:47:0e:d7:c0:99:b1:31:10:89:68:9d:f9:c4:
bb:6d:23:c6:0a:57:c2:cf:38:24:5a:2e:3e:67:27:
96:ea:bf:32:b0:8e:19:26:12:5b:04:f1:be:0f:42:
19:9d:a0:77:6b:55:93:c6:e3:64:36:71:2d:fc:58:
76:2b:74:b3:62:43:9e:27:7c:d4:39:c6:6f:56:21:
c4:6d:68:57:5d:7f:9d:36:8b:73:e7:0d:26:99:48:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7C:17:B8:12:7F:13:CA:F8:FA:53:42:DE:A7:83:76:97:34:DF:B1
X509v3 Authority Key Identifier:
keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/3130332e3138352e34352e302f32342d3234203d3e20313339343536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.45.0/24
Signature Algorithm: sha256WithRSAEncryption
02:eb:2c:a4:d7:cb:1d:5d:f2:42:6b:8d:60:48:30:3d:9d:59:
0f:78:f1:88:f9:af:46:c4:67:3f:45:aa:ae:3c:ec:a7:51:53:
6e:4e:86:d2:7f:24:32:92:b4:e4:e5:bb:29:39:c1:96:95:2d:
b6:83:2b:8b:39:8d:7a:f0:90:eb:60:61:95:a3:03:21:8b:08:
69:1d:80:ec:64:9b:94:ad:b4:af:96:94:32:5c:70:da:be:87:
64:aa:d7:9c:2c:bb:75:48:17:2f:09:7a:69:0c:5d:36:84:97:
aa:e0:0c:8e:bb:a9:68:dc:9f:00:52:06:26:9b:35:f3:58:ed:
85:95:3d:c4:4a:5f:d2:ea:74:d0:9a:3e:67:63:e6:42:d4:e7:
db:e6:0e:be:b9:1e:8a:69:ed:b9:4e:97:35:52:a7:78:a4:b1:
84:15:17:1a:0d:20:1c:3d:55:eb:7a:80:77:4c:7e:8e:d9:b6:
18:f0:89:db:69:2f:09:46:fd:e4:9d:55:ee:70:90:37:93:d9:
8f:e9:fb:1e:7a:2c:b8:2c:d7:76:55:a1:f0:43:e9:1a:c0:e2:
aa:d9:10:fd:a4:11:af:40:18:53:9d:de:cd:2c:78:eb:83:a6:
b6:fa:a4:4a:23:2e:7b:d5:57:65:a3:c8:f9:c3:57:b2:69:19:
d7:b7:75:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:20 2026 by rpki-client