
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa
File: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier: nMOG+6n+KLcdsuMUUFRu80+hEtB8VuNBpV2dkQOcKbY=
Subject key identifier: BC:60:E3:90:C7:24:1B:09:23:2B:BF:AE:36:94:86:5F:12:29:BE:20
Certificate issuer: /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial: 79B25E0AA6D1819D2BBF9FA1D6379B3ECD077E36
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa
Signing time: Sun 03 May 2026 02:57:46 +0000
ROA not before: Sun 03 May 2026 02:52:46 +0000
ROA not after: Sun 02 May 2027 02:57:46 +0000
asID: 59282
IP address blocks: 103.228.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 12:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b2:5e:0a:a6:d1:81:9d:2b:bf:9f:a1:d6:37:9b:3e:cd:07:7e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Validity
Not Before: May 3 02:52:46 2026 GMT
Not After : May 2 02:57:46 2027 GMT
Subject: CN=BC60E390C7241B09232BBFAE3694865F1229BE20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:d8:68:a0:96:b4:58:27:58:94:6c:62:33:
8e:4f:56:5b:21:8a:23:ff:eb:ee:96:62:e9:e2:41:
91:db:20:3c:70:33:f6:68:4a:2d:9e:5b:bf:f1:d8:
63:13:3f:e5:8e:23:74:82:b1:86:fb:59:14:fc:50:
9a:99:ae:bf:2a:78:03:e0:20:63:da:e7:c3:74:1c:
9a:7b:77:74:14:49:01:76:ee:bb:34:84:b5:88:3b:
8b:ef:26:3a:a0:c4:86:41:2a:90:3f:70:e1:04:2d:
eb:2b:85:a2:d2:ba:7c:ac:85:6e:2d:83:2f:db:fe:
ea:cc:41:e3:eb:2d:de:30:a0:ad:97:d0:40:9d:c3:
4f:4f:90:09:78:24:3e:2a:f5:ff:56:26:c0:63:1c:
d9:16:9f:1b:25:d1:fd:25:1c:03:17:a0:96:ae:ca:
36:6e:bf:76:26:37:72:56:e7:4b:18:65:6f:54:bf:
d0:7a:7e:05:43:b6:dd:45:65:52:92:17:c8:e8:3c:
e4:cc:30:03:db:8c:c4:50:25:5e:6f:96:e4:a3:ea:
db:49:80:59:7f:37:81:4f:1f:56:01:e1:6f:d2:e8:
c9:74:06:f6:39:32:86:0c:bb:44:9c:73:18:50:02:
a5:c8:df:72:46:5f:0a:e1:db:3e:8b:16:3a:f0:e3:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:60:E3:90:C7:24:1B:09:23:2B:BF:AE:36:94:86:5F:12:29:BE:20
X509v3 Authority Key Identifier:
keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.228.246.0/24
Signature Algorithm: sha256WithRSAEncryption
36:7a:50:d7:4c:4a:6f:e0:f9:ce:99:24:85:24:51:2e:b7:15:
98:cf:eb:16:16:71:34:48:54:be:c9:ab:1a:f0:b0:f1:27:77:
f4:16:5e:5d:8e:01:cb:57:59:ab:64:23:db:f2:af:ae:bd:26:
1e:d7:5c:62:89:a4:ec:8d:56:92:3a:54:9d:de:e4:15:9b:b9:
83:3a:a7:30:94:60:25:73:6c:21:49:48:29:ea:96:df:a0:04:
8d:01:6d:68:4a:24:09:d7:72:ec:b5:51:ef:40:36:f4:ee:57:
6e:01:82:7c:a0:63:3e:fd:eb:cf:e3:2f:1b:c7:e1:7b:cb:3c:
7b:c3:6f:00:70:4e:3c:e5:7e:e6:41:3a:65:30:f3:c1:9b:72:
ed:64:90:7e:f5:b8:9e:df:78:a9:ce:00:2c:73:c0:32:12:15:
67:16:18:e1:d1:ad:74:3b:b8:15:4d:b5:de:24:a3:69:1b:cc:
32:b0:69:43:00:7e:66:25:84:c3:d4:a1:20:96:d3:25:b1:69:
8e:75:6c:cb:a4:c7:c0:7b:51:c4:21:01:c6:a5:4b:b7:a4:a5:
eb:63:d4:18:17:a0:0b:92:a2:65:6c:f0:d7:ed:39:6a:05:71:
86:9c:a5:5c:98:61:9b:07:8f:85:8d:67:b3:dd:65:f6:b8:0a:
2d:b7:77:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:04:59 2026 by rpki-client