
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37392e302f32342d3234203d3e203438343635.roa
File: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier: oPvC3i/lrZuDzfOmiLwK2jYBsKG2L4fiPPqahjcNpFg=
Subject key identifier: 97:8B:56:D2:E4:F1:9A:41:93:4A:8E:C0:5C:9B:60:EC:6B:6A:03:57
Certificate issuer: /CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3
Certificate serial: 5F0F00C70A27671A4CB4D388D425467E56D1CBB3
Authority key identifier: BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37392e302f32342d3234203d3e203438343635.roa
Signing time: Sun 03 May 2026 03:18:05 +0000
ROA not before: Sun 03 May 2026 03:13:05 +0000
ROA not after: Sun 02 May 2027 03:18:05 +0000
asID: 48465
IP address blocks: 103.140.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl
rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 08:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0f:00:c7:0a:27:67:1a:4c:b4:d3:88:d4:25:46:7e:56:d1:cb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3
Validity
Not Before: May 3 03:13:05 2026 GMT
Not After : May 2 03:18:05 2027 GMT
Subject: CN=978B56D2E4F19A41934A8EC05C9B60EC6B6A0357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5e:42:c6:46:99:34:84:03:ff:7e:9e:3f:5c:
11:34:86:aa:c9:dc:68:af:25:97:40:2b:f7:7b:82:
7b:9e:93:8c:5a:23:ba:4d:47:ba:3b:6b:ea:3c:a7:
ea:df:7c:0e:05:b8:36:33:1f:d8:eb:13:14:33:6f:
e3:37:cd:c5:62:c3:5a:46:43:3d:fe:8e:56:5b:91:
ae:b4:fe:71:b1:10:ef:eb:8e:c2:0b:c8:fb:18:24:
31:bf:14:4a:70:f5:c0:61:af:62:a3:c7:e7:cb:7e:
a2:07:e4:aa:33:d2:59:6d:31:8c:44:cc:14:bb:f9:
37:15:7a:cc:20:17:13:97:22:dd:f6:2b:19:5b:d7:
38:31:c6:27:0e:47:3b:51:af:18:a3:e5:2b:cb:9c:
cc:b6:f0:50:4d:47:6c:19:6d:fa:5d:a3:f8:1b:7e:
d4:71:9e:91:cf:da:19:73:a6:37:70:42:e3:3e:75:
f7:f5:f9:d5:34:e6:89:25:ca:4d:9c:2b:b0:28:a2:
f4:0f:f8:c4:2d:54:f0:fb:c5:0e:46:a8:5d:f8:08:
de:0a:1d:ab:2a:8d:04:a8:4b:7e:7e:50:ef:8d:b9:
f2:61:e8:17:71:ba:41:6d:0e:1d:50:bb:66:94:84:
cd:42:d2:b0:c7:a3:97:30:4b:a8:de:18:da:e2:e7:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8B:56:D2:E4:F1:9A:41:93:4A:8E:C0:5C:9B:60:EC:6B:6A:03:57
X509v3 Authority Key Identifier:
keyid:BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37392e302f32342d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.79.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8d:cd:0d:19:b9:da:a3:8b:80:91:7e:67:d7:87:36:cb:a9:
6c:8c:c0:90:22:38:07:1a:cc:04:c1:fb:50:69:5b:71:21:1c:
64:a7:fa:62:43:77:43:35:f5:6b:29:f1:6c:66:8e:9c:a3:7e:
9c:aa:8a:10:ec:15:a2:fc:67:f8:d6:f4:0c:a9:16:b5:77:18:
b2:f6:fe:db:70:6a:64:4f:47:79:7d:95:b3:eb:4c:e8:b7:d3:
ef:df:be:22:a5:ed:fb:f7:e1:12:92:7a:95:64:05:7d:fe:58:
79:df:07:ad:2e:63:bc:13:fa:6a:01:b7:ec:a9:15:27:50:a9:
27:39:bb:f1:5b:fb:83:a7:ab:5d:0a:64:17:99:37:b7:51:9a:
65:d1:34:cd:76:3f:3b:25:8b:93:ba:6c:cc:d5:78:cf:5f:10:
44:9b:e5:88:b0:f5:41:10:6d:ea:26:5b:8b:c1:a7:09:1b:5d:
b4:59:da:72:d5:15:f0:f1:9a:a4:0e:b7:bc:b6:d6:0f:63:68:
fe:09:10:88:58:c4:fe:43:ac:46:31:d1:57:88:e9:b9:7f:16:
15:3d:ff:98:44:fe:90:e5:b0:75:79:4f:74:1e:d8:96:27:bf:
2a:0d:1b:04:02:d9:92:ec:57:0d:39:61:78:d5:31:75:2a:27:
39:36:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:55:34 2026 by rpki-client