
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa
File: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (raw, json)
Hash identifier: oJrAXv58oZDMk40W9JRPwNDx1VF9IQdEUdgQPzLFkmg=
Subject key identifier: 3C:B8:9D:9B:DB:4A:8A:F9:3F:C8:54:10:13:A6:7F:29:9F:93:9F:1F
Certificate issuer: /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial: 5809FFB83A3C09C185A2D619BA8848646C400569
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa
Signing time: Sun 03 May 2026 02:17:40 +0000
ROA not before: Sun 03 May 2026 02:12:40 +0000
ROA not after: Sun 02 May 2027 02:17:40 +0000
asID: 139381
IP address blocks: 103.142.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:09:ff:b8:3a:3c:09:c1:85:a2:d6:19:ba:88:48:64:6c:40:05:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Validity
Not Before: May 3 02:12:40 2026 GMT
Not After : May 2 02:17:40 2027 GMT
Subject: CN=3CB89D9BDB4A8AF93FC8541013A67F299F939F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:c8:df:c4:7e:49:4b:34:56:a9:10:a0:07:
64:4b:dd:dd:3d:10:b8:ec:70:e6:b1:e3:18:50:fa:
73:18:db:ba:62:ab:cd:bc:4a:c0:01:d2:e3:8d:8c:
3c:8f:09:69:df:64:3f:e5:d5:df:af:c1:3d:ef:29:
08:39:11:d7:f3:d6:f3:04:12:93:6d:fa:e2:fe:1d:
22:97:5e:5a:96:a2:fc:83:99:24:8e:f7:14:37:be:
90:8b:b3:f8:15:6b:76:b1:aa:91:5b:c6:85:c3:0a:
70:f6:ff:f0:07:04:fb:4b:2e:16:64:30:57:cc:71:
1e:28:6f:36:e0:53:9f:46:e0:91:f3:5a:96:32:56:
9c:ad:b0:bc:4d:06:12:63:5e:31:fa:b0:76:7f:7c:
67:25:ff:f2:ff:34:3d:6c:3f:cb:e4:89:3c:12:f4:
34:02:41:3d:64:14:62:db:9e:db:1c:36:76:82:0f:
c3:23:e9:1a:14:91:07:d9:8c:c0:d2:fc:2a:5b:2b:
a6:95:24:56:6a:68:09:c4:38:98:b0:e7:7b:ef:44:
45:db:b9:de:8b:f2:b5:63:d8:c4:8f:98:2b:af:4e:
22:94:2d:be:5f:58:1a:a1:ee:b2:ef:10:03:f0:77:
ec:ba:e9:72:7f:d3:57:21:2d:86:53:58:e4:5d:90:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B8:9D:9B:DB:4A:8A:F9:3F:C8:54:10:13:A6:7F:29:9F:93:9F:1F
X509v3 Authority Key Identifier:
keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.142.254.0/24
Signature Algorithm: sha256WithRSAEncryption
69:59:a6:d4:a8:3a:d5:ce:c9:0d:cb:a1:3e:60:48:34:59:3f:
a4:40:83:59:a6:14:e2:9b:b5:0c:78:97:93:5c:3c:11:08:7c:
2b:dd:82:5a:70:97:13:ea:2e:cd:c3:80:cd:42:51:af:e5:f4:
ee:6b:f7:d8:ec:67:1e:5a:bb:9a:91:ca:13:35:a6:6e:c4:7e:
f1:a2:14:d2:42:6f:f2:7d:c2:52:16:e8:b8:ea:a2:5b:16:7c:
76:e6:15:ce:55:5f:3f:8c:ab:f1:da:18:2b:cd:a2:41:74:23:
27:15:6a:52:24:04:d8:7b:2e:aa:c8:de:bb:0e:ef:fa:96:b9:
d4:99:a8:16:fb:d0:8a:ba:51:c3:5e:be:47:d0:d9:f8:1a:f9:
36:6b:73:3b:7f:19:3d:67:4b:0f:7b:ad:a0:2d:af:a0:bf:b7:
f9:ba:93:f1:65:76:df:a0:e0:8d:b8:79:1c:4d:b9:77:5d:91:
69:00:00:a6:f1:01:a0:f5:5c:a3:a8:8c:fb:04:9d:2c:f6:60:
12:a5:bd:16:5a:79:92:37:15:ea:a8:96:96:ce:01:f2:17:41:
24:21:02:0b:19:99:ab:d6:21:42:f5:46:de:b2:be:3b:5a:8f:
88:ff:fa:cd:03:05:c4:5a:c0:98:79:61:2e:33:b1:b0:7c:ae:
5e:c2:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:07 2026 by rpki-client