
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa
File: 3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa (raw, json)
Hash identifier: ipxVmEqkSY/rUg/MEVdJsexLgVL9kwLODWYNxKifMEM=
Subject key identifier: 1D:95:6D:8E:4A:74:26:17:D4:11:11:1B:2A:F7:9E:6B:9F:4E:23:B3
Certificate issuer: /CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1
Certificate serial: 71C09F7E5E2FF8560391917AD65D8A35A771AFD4
Authority key identifier: 42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa
Signing time: Sun 03 May 2026 02:12:58 +0000
ROA not before: Sun 03 May 2026 02:07:58 +0000
ROA not after: Sun 02 May 2027 02:12:58 +0000
asID: 137330
IP address blocks: 103.112.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl
rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c0:9f:7e:5e:2f:f8:56:03:91:91:7a:d6:5d:8a:35:a7:71:af:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1
Validity
Not Before: May 3 02:07:58 2026 GMT
Not After : May 2 02:12:58 2027 GMT
Subject: CN=1D956D8E4A742617D411111B2AF79E6B9F4E23B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:b0:3d:64:f9:e7:e1:2b:32:f4:55:c4:45:
d2:63:5a:6b:59:07:c1:de:50:6e:a9:d1:17:b0:de:
24:de:05:45:27:4a:e2:70:60:56:3f:3b:00:27:a9:
b7:08:9a:86:63:33:8e:90:3e:4e:11:63:65:2a:10:
94:07:9c:88:d2:3f:67:ce:d6:4e:08:e6:fb:63:ba:
69:cf:20:42:c7:bc:04:d9:98:1a:a1:d8:78:78:60:
19:95:90:6c:e1:b0:10:5b:55:1c:e1:82:bd:48:c1:
07:d4:90:2a:cb:69:70:70:68:73:d4:66:a0:20:bf:
6e:c4:6d:0e:02:15:57:b8:90:b3:54:b9:3a:34:e4:
96:ef:2e:a0:ae:5e:ee:d7:d7:4b:57:7e:3b:31:b9:
ae:49:28:88:60:79:b1:fd:a3:9d:c1:61:bf:6d:14:
9c:d7:78:9c:76:f7:bd:34:0e:ff:0f:b0:37:40:14:
b8:06:97:9e:af:e1:b6:f4:ee:35:f1:97:d7:26:fb:
e9:94:58:f6:af:d1:82:fe:92:7c:79:4b:1c:db:2e:
db:72:04:e5:86:75:f0:b4:0a:54:ef:96:87:ee:9a:
9c:9b:ec:05:07:c7:c6:03:46:29:0d:47:9e:bb:fa:
ef:c7:a4:e7:f1:fd:9a:14:1c:4f:d9:2b:cc:8d:a9:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:95:6D:8E:4A:74:26:17:D4:11:11:1B:2A:F7:9E:6B:9F:4E:23:B3
X509v3 Authority Key Identifier:
keyid:42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.136.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:0a:b5:2f:e3:93:2c:03:27:7d:d9:0d:e7:cb:d4:35:04:73:
a0:e9:07:cb:51:b0:7b:5b:56:04:66:12:e5:9b:33:ff:d9:76:
40:e4:b0:09:a6:fd:87:53:72:a8:c1:88:c5:49:c0:ac:ec:8e:
2e:a8:ad:d7:06:e3:53:3e:54:40:92:a6:b0:32:19:a4:05:d7:
37:96:83:ee:1c:ef:d2:3c:b6:2d:37:d8:24:cc:17:1e:44:2b:
f4:db:58:22:4b:b2:57:9b:c9:75:b7:41:90:58:dd:b7:05:bc:
4e:23:1b:49:e7:58:b1:9a:88:12:e9:b0:19:64:ea:0c:5d:31:
ac:65:73:92:8b:35:f0:21:ef:e8:e6:00:66:a3:5c:d4:d9:75:
74:b9:d5:ff:b0:e6:ad:90:b1:b7:3d:e2:e7:1a:2f:ba:3a:25:
f7:61:e6:7b:11:35:5b:44:9e:69:28:ca:83:a1:1a:e3:78:bc:
db:c4:7a:d7:e8:d8:9c:a9:79:b4:05:35:27:c4:88:ea:14:6c:
cb:9f:fd:be:d6:81:ce:6a:2b:75:ae:e3:d0:51:70:01:11:48:
57:f3:42:50:6f:21:92:3a:ee:15:a8:63:90:ef:ec:9a:ea:d0:
f1:d3:ef:0e:67:a8:f0:d0:30:61:7e:6c:8d:50:91:3c:0e:77:
5a:a8:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:16 2026 by rpki-client