
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34392e302f32342d3234203d3e20313431313334.roa
File: 3130332e3138352e34392e302f32342d3234203d3e20313431313334.roa (raw, json)
Hash identifier: Rc6cjSRalLs+jHagmKOEHXqRw1y1spFca3Cq6N+VYR8=
Subject key identifier: A2:9E:D3:AA:44:F5:9B:E6:87:A2:D5:EE:19:6F:61:4E:EA:5C:22:D0
Certificate issuer: /CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
Certificate serial: 69B6E99699A0C54AD35242DECC94111F1BB3DADF
Authority key identifier: 72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34392e302f32342d3234203d3e20313431313334.roa
Signing time: Thu 17 Sep 2026 07:38:36 +0000
ROA not before: Thu 17 Sep 2026 07:33:36 +0000
ROA not after: Thu 16 Sep 2027 07:38:36 +0000
asID: 141134
IP address blocks: 103.185.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl
rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b6:e9:96:99:a0:c5:4a:d3:52:42:de:cc:94:11:1f:1b:b3:da:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
Validity
Not Before: Sep 17 07:33:36 2026 GMT
Not After : Sep 16 07:38:36 2027 GMT
Subject: CN=A29ED3AA44F59BE687A2D5EE196F614EEA5C22D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:38:e3:52:5d:ea:7f:ca:8e:1f:68:02:61:
ef:17:cc:76:df:44:9b:f6:1e:de:ab:b2:1f:42:1a:
3c:cf:48:da:59:ea:5d:0d:98:88:a2:2c:e0:f4:e9:
cc:e3:c8:e5:c3:04:e8:a5:1c:b3:1b:bd:38:74:a6:
5f:32:02:f5:d7:a5:e4:c2:8a:24:85:6d:64:4b:13:
3d:cc:ab:3f:96:b2:f1:66:35:03:67:7f:6b:7c:d0:
8e:50:c2:4d:b3:fa:26:34:e4:b5:32:6a:f6:cc:ef:
7b:42:6d:48:fe:bc:cf:73:70:7c:d5:26:cc:23:79:
af:a0:d4:28:5b:cb:85:54:41:9b:35:8b:3e:9e:37:
9d:0b:35:f6:7b:44:71:c8:d2:7c:ea:c4:9f:a8:14:
1c:0b:cd:c8:64:da:4c:63:da:ac:30:b7:2e:fc:eb:
77:69:c2:df:f9:98:c8:a7:62:ae:66:e4:69:5d:8c:
d9:86:9c:02:e9:5e:1a:3b:76:20:0e:0e:a5:32:a0:
3f:5c:14:3d:ab:69:d4:ee:bb:83:a7:9f:3d:f8:20:
11:3f:81:73:c1:1f:0e:78:f7:4d:bc:6c:c3:cb:a3:
57:a3:16:57:09:30:17:43:e4:aa:a8:97:60:1d:e8:
e6:4f:75:74:ac:25:58:ce:a2:43:b2:64:61:cc:46:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9E:D3:AA:44:F5:9B:E6:87:A2:D5:EE:19:6F:61:4E:EA:5C:22:D0
X509v3 Authority Key Identifier:
keyid:72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34392e302f32342d3234203d3e20313431313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.49.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ac:d0:91:11:2a:e6:3e:5c:09:c3:72:df:cf:f0:48:4f:f4:
0d:8f:13:84:75:7e:ea:0a:b0:81:f9:3a:f5:c4:55:d6:3e:f7:
e5:14:d7:25:ad:b2:2d:c6:a5:b1:1e:c9:ab:f0:34:14:7e:4e:
ed:94:05:32:13:3d:0b:91:80:ce:bc:ac:c0:63:64:0e:07:94:
69:51:fa:5b:d7:ce:61:2e:56:3e:b7:e6:cd:93:5d:ac:25:2a:
b8:f4:50:4e:a5:5b:8c:56:db:a0:35:f0:b2:82:09:9c:ad:90:
46:71:03:71:64:23:18:24:31:63:b3:24:db:4f:e8:b3:9a:60:
51:f1:07:40:e7:c7:fd:37:ac:3c:c1:50:0c:cc:b5:9f:e1:e5:
5d:98:c7:e8:84:b5:b9:c6:79:b5:0b:21:bd:90:dc:33:72:b1:
4a:00:9f:09:14:b5:e2:48:ee:3e:12:be:2e:17:0d:d0:cd:19:
56:67:09:22:cb:5f:9b:77:21:89:40:27:9d:a5:c8:53:14:ca:
e6:87:ed:79:c1:f8:eb:bd:a5:cc:ac:00:14:97:1a:b2:c4:ad:
f3:3a:f4:0e:f6:89:a9:d1:43:c5:40:38:30:34:c5:3d:56:3a:
7d:cc:0e:c2:b8:22:d3:72:60:b7:4f:76:18:51:ca:de:0c:ad:
7a:4f:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:09:35 2026 by rpki-client