
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/3130332e3137302e3139382e302f32342d3234203d3e20313531353736.roa
File: 3130332e3137302e3139382e302f32342d3234203d3e20313531353736.roa (raw, json)
Hash identifier: GdBTBf+CQyZI9w590qaRyTxxIiNifYfBvTxGa3o07RE=
Subject key identifier: 91:A4:F1:FF:86:7D:F1:CD:AA:AF:D7:9D:EC:C4:E6:CE:B7:BD:9A:37
Certificate issuer: /CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA
Certificate serial: 491D3F2F65894D314655CECF3A16C2ED7A76A5EB
Authority key identifier: EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/3130332e3137302e3139382e302f32342d3234203d3e20313531353736.roa
Signing time: Wed 21 Oct 2026 16:02:29 +0000
ROA not before: Wed 21 Oct 2026 15:57:29 +0000
ROA not after: Wed 20 Oct 2027 16:02:29 +0000
asID: 151576
IP address blocks: 103.170.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl
rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 08:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:1d:3f:2f:65:89:4d:31:46:55:ce:cf:3a:16:c2:ed:7a:76:a5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA
Validity
Not Before: Oct 21 15:57:29 2026 GMT
Not After : Oct 20 16:02:29 2027 GMT
Subject: CN=91A4F1FF867DF1CDAAAFD79DECC4E6CEB7BD9A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:2a:3e:a8:f8:10:af:fd:25:17:eb:e1:06:
fa:86:20:38:30:16:fc:02:2d:3d:ff:90:6c:5a:17:
90:f6:fa:41:24:5d:01:9c:89:4d:e0:69:99:06:f8:
be:70:28:e4:12:84:3f:1c:d8:61:07:92:cd:a6:03:
5b:ec:49:5b:10:54:f1:59:b7:ff:a2:1b:1a:f2:17:
54:91:f9:0c:9a:68:1a:ea:83:e4:88:ba:50:64:d9:
08:bc:ee:90:05:7e:1d:02:c9:95:83:e4:5a:e8:9e:
e9:53:cc:ad:d5:c9:e0:29:55:de:79:7c:3d:e1:d9:
82:a9:88:e1:73:25:9a:e7:e2:21:39:e0:20:cd:82:
1e:4d:26:90:88:c6:40:fb:a3:ea:2d:d0:5e:5d:0c:
d7:19:8d:38:36:db:29:97:cb:75:31:64:f0:8a:ff:
fe:42:be:78:c4:4f:86:41:19:9b:79:9c:a4:4e:f5:
38:87:98:d6:09:0d:db:76:cf:a8:53:63:aa:42:7f:
3a:70:1d:b6:7f:29:c1:1e:00:88:01:d8:d0:a2:a6:
ff:8a:9f:d8:76:28:e4:31:16:73:f6:1f:f7:ed:9d:
8e:c3:fe:a6:b1:54:26:fd:ce:25:36:10:49:fb:e2:
d1:28:9d:8b:b6:c4:94:9b:fe:8d:9e:d4:db:98:b5:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:F1:FF:86:7D:F1:CD:AA:AF:D7:9D:EC:C4:E6:CE:B7:BD:9A:37
X509v3 Authority Key Identifier:
keyid:EC:37:43:E1:96:2B:A6:6D:28:18:EC:E8:EA:B3:62:CE:14:FE:F9:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC3743E1962BA66D2818ECE8EAB362CE14FEF9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/3130332e3137302e3139382e302f32342d3234203d3e20313531353736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.198.0/24
Signature Algorithm: sha256WithRSAEncryption
20:15:55:d1:80:86:58:3b:dc:ef:e8:52:97:2a:61:bf:cc:f4:
a2:e7:2a:56:42:46:2d:e6:38:cc:9b:87:e8:c9:59:d6:89:dc:
c5:ae:39:a0:b6:59:fc:30:6c:06:5e:b8:bd:42:13:67:ea:e6:
fe:53:40:87:0f:59:48:64:78:5d:98:1f:2b:74:c0:ea:62:52:
9e:11:f8:1c:df:a0:eb:77:6b:3e:ea:da:8c:24:ec:bb:8d:52:
18:70:68:09:21:7d:e4:b0:00:ba:44:d8:08:7b:7f:9f:54:53:
e1:e8:9b:70:67:02:35:4a:17:d9:9e:6b:4f:85:36:2b:1a:40:
a9:fe:2f:b8:55:11:fa:b1:62:70:62:07:99:0c:83:40:cc:56:
9f:83:94:2d:c0:86:55:9f:5e:72:10:aa:ec:2f:e7:25:19:ad:
cb:22:ea:ab:d0:60:04:70:40:25:47:88:97:e5:88:ba:50:16:
e6:23:1d:b5:22:84:48:e3:b5:ce:41:ca:5f:0e:59:59:3e:f2:
cf:0c:17:01:6a:f9:35:e6:8e:17:8e:a7:7a:c2:7a:4b:84:8c:
69:92:11:1b:b6:0a:47:7f:4b:08:ee:06:ab:c3:74:c9:1d:ff:
dd:4b:3e:0e:94:ee:c4:35:58:8b:7a:74:72:79:b4:89:ab:91:
1f:ff:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:53:02 2026 by rpki-client