
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa
File: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (raw, json)
Hash identifier: xOxv8Fz6Tpmz/YRUuUjQ79JRZubX1fq53E188IFgqko=
Subject key identifier: 50:8D:28:95:E8:2A:4B:A0:F5:B7:B8:A7:54:6F:BE:FC:F2:A3:04:B8
Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Certificate serial: 52EF128447B9332377A34A4A4A2D4C208F1F0BDC
Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa
Signing time: Wed 15 Apr 2026 04:00:00 +0000
ROA not before: Wed 15 Apr 2026 03:55:00 +0000
ROA not after: Wed 14 Apr 2027 04:00:00 +0000
asID: 149901
IP address blocks: 103.190.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl
rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 16:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ef:12:84:47:b9:33:23:77:a3:4a:4a:4a:2d:4c:20:8f:1f:0b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Validity
Not Before: Apr 15 03:55:00 2026 GMT
Not After : Apr 14 04:00:00 2027 GMT
Subject: CN=508D2895E82A4BA0F5B7B8A7546FBEFCF2A304B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:71:97:f2:24:47:db:d3:c1:fd:b3:83:68:
bb:0f:56:04:08:6a:d9:8d:c5:19:08:22:58:76:e4:
15:52:92:1c:81:ee:bc:85:39:ec:1b:e0:77:f1:91:
b2:35:15:9d:2f:84:5d:b7:e1:fa:e3:bc:c2:3c:bf:
84:0f:ff:41:eb:f8:8b:81:d9:5d:fe:93:cd:d9:a9:
98:e5:46:19:01:56:75:fe:1f:df:93:88:54:e6:6e:
66:55:e3:11:b9:23:94:9c:52:db:95:ec:9d:64:29:
af:f0:aa:c5:4f:c4:00:ca:75:05:44:63:35:51:83:
cb:2c:98:72:4e:b1:90:eb:47:ac:b0:16:8d:8b:41:
09:96:b6:29:81:34:c4:52:3c:65:74:5b:b5:83:1f:
df:43:30:d0:f1:e2:c4:fc:d7:29:7f:ec:13:11:3b:
fb:ed:27:54:96:36:f3:93:13:04:45:9a:32:e7:65:
17:09:b1:eb:ab:63:70:4d:d4:cd:e3:a5:b4:63:0c:
a1:ef:ea:de:e2:9a:4a:61:10:3b:47:4c:92:7e:bc:
77:cb:19:29:f3:34:7c:f8:09:1c:51:45:3e:1e:20:
bc:fa:b4:8d:5d:98:05:3a:4e:d2:f0:9a:96:cb:15:
23:79:fe:f6:7b:27:d0:2b:41:c3:ff:45:1b:22:ac:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8D:28:95:E8:2A:4B:A0:F5:B7:B8:A7:54:6F:BE:FC:F2:A3:04:B8
X509v3 Authority Key Identifier:
keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.61.0/24
Signature Algorithm: sha256WithRSAEncryption
26:6e:46:6f:17:eb:99:a4:88:1c:8f:91:28:4e:08:a8:1e:94:
f1:e7:9f:af:f3:dd:10:3a:09:86:92:e5:65:d6:dc:bc:1e:f1:
b8:1c:25:8e:28:e6:1b:db:03:20:80:10:89:0d:a3:55:59:23:
04:2a:b0:f5:a3:c5:be:6a:d9:e8:f9:d7:8b:99:27:5e:dc:e8:
c8:39:cc:03:a5:8a:7b:31:13:23:15:0d:fd:a6:d6:85:03:06:
15:1d:28:d4:e4:73:dc:66:e4:3b:19:76:93:5a:24:7f:1e:59:
fe:61:c9:15:c4:65:6f:b4:a5:6a:25:6a:3b:4c:ec:11:89:b3:
ba:94:32:50:d0:14:c2:6f:3f:ba:8a:cf:86:d0:76:5c:ee:33:
e6:8a:1c:6e:c9:2b:52:c9:0c:9d:c0:e6:1d:1f:09:52:9e:76:
c9:57:bb:10:07:d1:b9:a5:f6:f0:22:91:39:64:45:6e:06:67:
c2:ec:95:81:9a:23:8a:b5:23:1c:76:92:82:21:ba:88:4f:87:
30:64:79:85:7b:79:a0:5b:99:dd:63:37:ff:16:eb:a1:01:a2:
85:4c:62:eb:55:81:2b:09:03:00:7e:80:e9:5c:22:6a:04:f5:
1c:91:37:32:c1:1a:a7:1a:2f:8f:9d:4b:35:13:bd:df:9e:44:
50:c9:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:07 2026 by rpki-client