
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e312e302f32342d3234203d3e2039333431.roa
File: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: Tgez0mY6SPOTnuCIKB3HlrvFNAAadTv4QI32lWtN/DI=
Subject key identifier: 5C:53:39:8D:A9:49:A5:60:71:CC:C5:80:C6:AC:17:AB:98:FE:95:41
Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53
Certificate serial: 379BFDDEE3F122E9BD14FD2318F4FE6F141D1687
Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e312e302f32342d3234203d3e2039333431.roa
Signing time: Sun 03 May 2026 02:26:46 +0000
ROA not before: Sun 03 May 2026 02:21:46 +0000
ROA not after: Sun 02 May 2027 02:26:46 +0000
asID: 9341
IP address blocks: 103.180.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl
rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 06:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:9b:fd:de:e3:f1:22:e9:bd:14:fd:23:18:f4:fe:6f:14:1d:16:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53
Validity
Not Before: May 3 02:21:46 2026 GMT
Not After : May 2 02:26:46 2027 GMT
Subject: CN=5C53398DA949A56071CCC580C6AC17AB98FE9541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:96:e4:c8:ed:f1:b3:bb:24:ab:13:4a:a3:
07:a9:bd:b1:79:29:f1:18:20:25:42:e0:f8:ef:4a:
31:df:d4:85:5e:2e:9a:69:0f:11:50:d2:f2:91:d2:
c8:e9:34:36:07:11:00:ab:a2:f8:72:08:89:b4:58:
4c:88:b8:96:98:4f:8a:cf:9a:44:5e:dc:55:c1:83:
e2:ac:69:fc:eb:4d:aa:73:f3:46:27:a2:52:64:a9:
71:ff:13:3b:ee:26:9b:8d:9e:99:58:ab:d4:aa:b5:
58:b3:1e:71:9c:63:88:ab:1a:ed:56:15:a5:7c:0f:
f8:e7:d1:44:fd:4c:88:99:d2:ed:28:01:8c:ad:ea:
63:8b:bb:9a:ed:85:52:6a:2c:36:7b:4d:0d:41:57:
b6:0b:ba:b4:8f:5e:24:fb:02:fa:14:b7:da:be:37:
0c:ba:9e:9f:02:b6:44:c6:f2:0a:c7:9e:30:7b:a1:
f5:1e:69:c0:c8:ff:3e:6d:9e:4b:53:bf:2e:6f:6a:
1d:eb:1c:2f:8c:47:ef:64:41:1c:8e:c2:c6:f0:c7:
37:61:2f:0f:93:22:c2:00:a4:52:1c:0f:71:c8:fb:
6a:ba:79:ea:1d:a3:04:d5:fd:11:5f:ee:87:62:a5:
c6:47:10:cc:cc:ed:f3:3c:b3:d3:8f:57:6b:a5:32:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:53:39:8D:A9:49:A5:60:71:CC:C5:80:C6:AC:17:AB:98:FE:95:41
X509v3 Authority Key Identifier:
keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e312e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0e:bf:3e:a4:32:3b:f6:b6:ec:cd:cb:8d:9a:d7:75:8f:2c:
c4:62:59:b6:9c:ba:2f:3f:90:bc:5c:f6:78:80:69:87:88:d6:
e6:40:06:09:d4:13:07:d1:b6:12:ba:51:a8:c7:32:80:db:da:
b6:63:ad:97:54:55:a4:c6:07:80:ba:ad:28:b5:07:37:c8:e6:
76:7d:7c:ef:d8:27:e6:ea:e4:5f:0c:20:16:84:de:07:88:c5:
2c:90:5a:c1:81:92:d5:3a:18:59:77:75:56:56:e7:63:b0:63:
88:ec:9a:ea:21:bc:72:a7:1c:7c:36:e9:ad:fc:d9:ee:ad:4c:
62:f3:30:a7:5c:a6:e2:5d:e1:a8:20:15:42:b0:4f:d9:13:d5:
f2:28:dc:97:62:16:0b:45:ea:52:59:29:e9:41:61:ac:c2:e1:
8d:d4:12:a4:f8:ae:89:c7:f9:d4:b3:2f:57:e4:08:99:77:52:
c6:cc:71:a2:ad:8d:1e:01:67:9f:45:fe:8b:90:03:48:7d:3a:
75:d7:2d:13:08:51:a2:77:69:15:49:1a:27:d7:51:ba:49:57:
c9:7b:13:ed:62:4b:62:e7:da:f2:02:0c:53:11:ed:a5:cc:99:
fc:12:a2:b0:c4:fa:77:bc:49:56:f1:86:2a:e4:fd:ee:85:7c:
81:01:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:27:26 2026 by rpki-client