
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/3130332e33362e35322e302f32332d3233203d3e2039333431.roa
File: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: /vHPttEy0S/+L0N0xJZEd760O2VDEp7iklZoHe07g/s=
Subject key identifier: 49:51:F8:51:96:7B:10:1F:FA:89:C9:23:DB:EE:4C:52:90:F1:54:49
Certificate issuer: /CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040
Certificate serial: 481476783D8A25D2DDC3ACAF644583B250158E6E
Authority key identifier: F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/3130332e33362e35322e302f32332d3233203d3e2039333431.roa
Signing time: Sun 03 May 2026 03:07:58 +0000
ROA not before: Sun 03 May 2026 03:02:58 +0000
ROA not after: Sun 02 May 2027 03:07:58 +0000
asID: 9341
IP address blocks: 103.36.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl
rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:14:76:78:3d:8a:25:d2:dd:c3:ac:af:64:45:83:b2:50:15:8e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040
Validity
Not Before: May 3 03:02:58 2026 GMT
Not After : May 2 03:07:58 2027 GMT
Subject: CN=4951F851967B101FFA89C923DBEE4C5290F15449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:51:91:e6:39:fa:c9:b9:e3:f7:c3:ae:49:
41:5f:85:11:5e:50:7e:c6:19:95:c6:85:08:4f:e3:
72:5b:00:32:60:0f:17:39:3b:8b:0e:24:78:81:99:
c1:a5:ac:d2:69:d9:c7:d9:d7:a4:31:5c:8f:87:5c:
50:05:31:ef:5b:4c:6d:8d:65:86:b1:f7:20:52:15:
9f:13:2a:38:cd:84:b6:45:ef:fb:e4:3c:a9:93:e2:
ff:5a:24:89:13:af:8c:1d:25:ee:63:e6:a2:97:da:
9c:5c:8e:51:1d:54:6f:4c:5b:03:43:c1:3e:0f:a9:
df:9a:c6:13:7d:c9:55:ef:cb:77:b4:c6:c9:d7:74:
3a:f4:1b:ee:d9:30:c2:c8:e2:49:85:c7:88:1e:a3:
c6:4c:af:47:57:57:7d:78:f5:13:ca:92:54:68:4c:
58:3f:c4:54:64:7a:82:63:54:69:8f:09:f6:ae:e4:
5d:0f:4b:c3:0f:c7:b4:6d:15:e0:06:6f:de:2c:7b:
1b:ea:f6:d0:7f:94:37:be:14:bb:4c:2d:f6:13:c0:
b9:c8:53:b4:cd:55:60:ce:fe:0d:e0:d4:68:49:96:
cb:ac:83:03:31:32:71:0a:ab:9e:5f:5a:8a:ac:65:
06:c5:47:34:b9:4f:21:96:cf:aa:55:ce:ce:a6:21:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:51:F8:51:96:7B:10:1F:FA:89:C9:23:DB:EE:4C:52:90:F1:54:49
X509v3 Authority Key Identifier:
keyid:F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/3130332e33362e35322e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.52.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ea:84:85:39:ea:b9:03:b6:b4:4e:56:4e:67:a0:95:15:cd:
3d:45:b5:ea:e0:a8:a1:27:de:5f:1d:c5:dd:04:5d:cd:89:76:
2e:3b:90:d6:cf:b3:ee:f7:57:f9:c0:4e:e3:e6:1b:26:d4:f5:
d3:06:7c:25:5d:e7:02:26:f5:2e:bf:c5:90:18:ba:f8:b5:ef:
d5:70:0b:13:ae:e3:e2:f7:98:89:78:77:ad:4e:02:30:83:b4:
16:eb:de:70:eb:05:9a:e0:d0:b3:d8:70:9b:49:95:5e:ea:6a:
0c:0d:9b:10:01:65:3c:8f:35:fa:45:34:5c:26:a9:4b:90:24:
25:4e:7e:9a:10:51:fb:df:5a:7d:f4:00:2a:0d:64:93:44:e1:
9d:1d:94:45:c0:4e:ed:4c:04:76:40:d6:fb:db:bf:42:84:3c:
17:46:46:51:e1:b1:2a:b0:a9:d4:98:ba:5f:51:5a:49:22:a5:
07:89:a1:e8:32:72:8a:e0:e7:f5:a5:79:13:35:9e:96:83:02:
cc:b1:4b:20:0c:e2:b1:5b:c7:4e:05:5a:9b:b5:61:aa:05:a7:
cc:88:0a:b9:46:0a:9c:94:e1:e9:9d:92:1b:0d:e1:01:0d:73:
f4:1e:64:75:31:e0:a0:e4:1a:c6:80:ff:c7:0c:b9:5d:d3:09:
2d:14:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:26:53 2026 by rpki-client