
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa
File: 3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa (raw, json)
Hash identifier: 1nDbB6+AlusMuURwAYqPorAzAwV73/N5BpxeWl1cVko=
Subject key identifier: C2:7E:59:88:42:55:F8:2C:1D:AC:84:9C:8C:8A:DD:83:A7:F3:3E:5D
Certificate issuer: /CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1
Certificate serial: 0ADA02E03112189EA3591F96921D219271D8902D
Authority key identifier: 42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa
Signing time: Sun 03 May 2026 02:12:52 +0000
ROA not before: Sun 03 May 2026 02:07:52 +0000
ROA not after: Sun 02 May 2027 02:12:52 +0000
asID: 151043
IP address blocks: 103.112.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl
rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:da:02:e0:31:12:18:9e:a3:59:1f:96:92:1d:21:92:71:d8:90:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1
Validity
Not Before: May 3 02:07:52 2026 GMT
Not After : May 2 02:12:52 2027 GMT
Subject: CN=C27E59884255F82C1DAC849C8C8ADD83A7F33E5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:08:99:74:e6:04:eb:6f:a3:1b:73:68:d7:
a0:dd:03:f6:99:dd:e6:7c:dd:54:57:6a:e9:90:d4:
09:c8:e8:50:2e:04:26:4a:85:c5:9e:f9:ca:57:1a:
5a:01:6a:bb:ca:eb:06:87:ab:f9:12:29:44:16:39:
de:c8:70:a1:9d:d6:6f:ad:6c:60:19:95:bd:0d:c9:
7b:21:2b:ea:6a:52:ec:c4:39:84:a6:db:fa:fa:15:
77:99:38:5f:08:fa:d5:a7:89:bd:37:cf:4d:e7:3c:
b6:85:1b:cb:7b:2d:60:58:9d:1d:fb:9a:54:20:3b:
61:2f:b6:e6:11:54:ea:b4:76:97:52:47:2f:9e:94:
3f:d6:c3:47:8d:4c:29:52:33:53:b0:72:f9:08:ea:
56:d7:c8:d0:b5:b3:fa:b6:c1:76:b5:da:37:bd:9e:
13:32:71:be:57:22:33:8e:ee:b8:8c:60:1e:93:2f:
a4:61:19:e8:6b:56:4f:67:7a:f2:2d:8a:c4:b5:28:
3d:e5:35:85:3f:c6:fa:af:a9:18:0d:e0:ae:1a:df:
a9:1c:88:aa:ab:23:17:20:a0:f0:19:6e:46:65:be:
fc:e4:ce:82:c3:22:54:06:20:bb:1a:88:83:07:be:
6d:f2:e0:3b:f2:b6:82:c1:95:53:29:33:68:89:9a:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7E:59:88:42:55:F8:2C:1D:AC:84:9C:8C:8A:DD:83:A7:F3:3E:5D
X509v3 Authority Key Identifier:
keyid:42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.138.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:cf:b1:da:2c:a5:b2:b7:f6:ae:e0:5d:e4:d2:1f:99:a1:76:
72:4e:13:cd:7c:db:ba:24:b5:f6:6b:c5:5e:3c:55:27:14:22:
01:56:76:49:05:27:7c:12:f8:e7:52:e3:aa:de:3d:a4:ea:f3:
e3:93:79:3e:b3:25:5e:00:4c:28:34:cd:4c:f3:66:ce:c1:f9:
09:0f:e2:18:d9:be:96:ba:79:10:1d:d4:92:aa:42:0e:d9:dd:
5f:2b:24:77:c1:a3:f2:04:aa:07:b6:e6:f2:f8:85:ad:f0:b4:
1d:00:ff:55:6f:2f:6e:c8:a3:f7:e9:da:77:00:b3:93:f9:8d:
79:25:c9:5a:15:cf:de:3f:da:f3:ab:e9:6a:03:f6:8d:f4:3a:
54:2a:1d:ae:e9:e7:8d:5e:36:19:54:da:17:c1:b8:d6:7d:f2:
9a:96:4e:d9:65:d3:a0:6b:45:b9:f6:ed:be:40:66:35:96:7e:
94:e1:9e:af:22:b1:77:40:f3:ec:03:2b:b7:b1:fc:4b:33:d1:
17:7f:09:b9:b0:84:1d:fc:f5:6c:9c:1f:4c:bb:53:6a:c2:f2:
5b:72:e5:b3:08:8a:c9:17:c6:41:0d:a8:85:92:ae:e2:6c:7f:
36:89:1d:10:c2:bc:0b:d3:61:9c:ea:a6:22:04:81:5d:11:4f:
13:e8:73:b6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUCtoC4DESGJ6jWR+Wkh0hknHYkC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJCQ0M5M0MxNUFDNEQxODUxQTIyNDBDOUY3QkUyRjlD
OUY1MUVGMTAeFw0yNjA1MDMwMjA3NTJaFw0yNzA1MDIwMjEyNTJaMDMxMTAvBgNV
BAMTKEMyN0U1OTg4NDI1NUY4MkMxREFDODQ5QzhDOEFERDgzQTdGMzNFNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9giZdOYE62+jG3No16DdA/aZ
3eZ83VRXaumQ1AnI6FAuBCZKhcWe+cpXGloBarvK6waHq/kSKUQWOd7IcKGd1m+t
bGAZlb0NyXshK+pqUuzEOYSm2/r6FXeZOF8I+tWnib03z03nPLaFG8t7LWBYnR37
mlQgO2EvtuYRVOq0dpdSRy+elD/Ww0eNTClSM1OwcvkI6lbXyNC1s/q2wXa12je9
nhMycb5XIjOO7riMYB6TL6RhGehrVk9nevItisS1KD3lNYU/xvqvqRgN4K4a36kc
iKqrIxcgoPAZbkZlvvzkzoLDIlQGILsaiIMHvm3y4DvytoLBlVMpM2iJmjwnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUwn5ZiEJV+CwdrIScjIrdg6fzPl0wHwYDVR0j
BBgwFoAUQrzJPBWsTRhRoiQMn3vi+cn1HvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGMzNGZmMDgtZDIxZi00MjBiLTg3ZGYtNTMxMDNiNmRjMjUzLzAvNDJCQ0M5M0Mx
NUFDNEQxODUxQTIyNDBDOUY3QkUyRjlDOUY1MUVGMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MkJDQzkzQzE1QUM0RDE4NTFBMjI0MEM5RjdCRTJGOUM5RjUx
RUYxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04
N2RmLTUzMTAzYjZkYzI1My8wLzMxMzAzMzJlMzEzMTMyMmUzMTMzMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzMDM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABncIowDQYJ
KoZIhvcNAQELBQADggEBABrPsdospbK39q7gXeTSH5mhdnJOE81827oktfZrxV48
VScUIgFWdkkFJ3wS+OdS46rePaTq8+OTeT6zJV4ATCg0zUzzZs7B+QkP4hjZvpa6
eRAd1JKqQg7Z3V8rJHfBo/IEqge25vL4ha3wtB0A/1VvL27Io/fp2ncAs5P5jXkl
yVoVz94/2vOr6WoD9o30OlQqHa7p541eNhlU2hfBuNZ98pqWTtll06BrRbn27b5A
ZjWWfpThnq8isXdA8+wDK7ex/Esz0Rd/CbmwhB389WycH0y7U2rC8lty5bMIiskX
xkENqIWSruJsfzaJHRDCvAvTYZzqpiIEgV0RTxPoc7Y=
-----END CERTIFICATE-----
Generated at Wed May 13 08:39:09 2026 by rpki-client