
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa
File: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (raw, json)
Hash identifier: P3rNCMyzAiokg7rVA737lP8Lovb0gWKaIdt9sIaalEY=
Subject key identifier: 1F:C0:90:4C:33:8C:88:8F:93:14:43:DD:39:46:55:11:DC:82:5D:DB
Certificate issuer: /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial: 2C509092B5ED673A5431BFF5CBD5EF4106314BC1
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa
Signing time: Sun 03 May 2026 02:17:41 +0000
ROA not before: Sun 03 May 2026 02:12:41 +0000
ROA not after: Sun 02 May 2027 02:17:41 +0000
asID: 139381
IP address blocks: 103.142.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:50:90:92:b5:ed:67:3a:54:31:bf:f5:cb:d5:ef:41:06:31:4b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Validity
Not Before: May 3 02:12:41 2026 GMT
Not After : May 2 02:17:41 2027 GMT
Subject: CN=1FC0904C338C888F931443DD39465511DC825DDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:3a:29:92:5d:a7:98:af:d4:4a:81:7d:07:
2d:b2:e9:9f:e9:bd:a7:e6:92:ec:22:16:a6:b6:a2:
38:89:3f:3a:2e:cb:0d:ad:9b:23:7f:3c:4c:8c:1d:
6a:56:b8:1a:97:6c:96:0b:0c:88:76:b3:68:49:f8:
6c:be:8d:98:97:26:ac:60:b1:07:63:ce:8d:3b:56:
db:86:2b:ac:f2:d4:f0:aa:9a:c8:b3:95:0e:2a:b9:
1f:b3:4a:b9:0b:8a:71:55:79:4e:86:30:16:04:dc:
b6:99:16:32:de:74:50:07:81:3d:b3:73:2b:fb:62:
f6:69:09:c8:c7:a9:41:de:2c:cc:f6:33:47:16:43:
b8:66:67:94:da:a2:c7:25:b3:c0:16:91:c7:1e:df:
ac:ce:0b:fb:19:c3:f3:dd:57:77:59:53:fa:44:ad:
f1:88:91:76:6a:90:fd:16:43:ce:bd:1b:f6:b6:80:
8a:34:df:45:92:76:74:7c:2f:28:5d:fc:e0:93:ac:
66:48:80:3e:7c:50:8e:43:f3:a9:fc:29:55:ff:37:
29:26:9c:0e:54:ef:34:bd:e6:7d:b7:dd:97:db:d5:
49:dc:d2:d5:39:d1:28:88:e2:a0:36:4a:a3:3c:22:
a5:35:87:f5:8a:4c:e9:52:6e:28:cd:b2:13:71:07:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C0:90:4C:33:8C:88:8F:93:14:43:DD:39:46:55:11:DC:82:5D:DB
X509v3 Authority Key Identifier:
keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.142.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:03:b0:73:40:f9:b2:18:53:f1:70:35:21:9d:27:07:ec:0f:
b6:ce:a9:2c:20:5a:a4:0c:4b:db:fd:73:84:33:0e:4f:6c:09:
8d:22:d4:b8:f7:ca:98:d1:5a:23:be:0d:f5:77:2c:79:4e:93:
41:27:3e:d6:41:3c:10:c0:54:0e:1d:c8:0f:4d:81:2d:a8:61:
38:f3:35:9b:6d:11:b1:bb:25:00:49:a2:82:2f:c5:58:ea:80:
76:4c:67:af:2c:f3:62:02:73:b5:7f:d7:c0:22:18:e2:3a:f3:
b4:1a:f5:02:e0:8a:dd:ef:67:93:46:d3:d1:24:f2:63:a3:52:
17:79:31:9c:70:97:ee:ef:67:84:d3:34:9c:3a:97:c1:84:ea:
87:40:a9:4c:14:c2:3a:b8:a7:96:03:e2:7e:f1:f4:86:91:ef:
47:65:60:cd:81:e4:55:ca:86:e1:3c:a6:5a:bb:b1:72:21:1d:
1b:2e:4e:83:e7:72:ef:df:00:01:ac:2a:a8:71:f9:4d:e0:c1:
c2:9c:54:00:08:4f:2b:96:9a:59:c7:42:1c:78:c7:33:94:6d:
3e:76:6b:10:ae:16:c2:30:12:ba:6e:f8:7b:9a:ea:3c:f1:01:
cb:94:0c:ae:76:65:72:db:3c:6a:66:1e:f5:9a:f0:72:af:ce:
2f:a0:df:d6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIULFCQkrXtZzpUMb/1y9XvQQYxS8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY2NjkzNTVFQkIwRkUzQUU2QzA2QzhERjdBOTE3QkVC
NDg4NDlBMDAeFw0yNjA1MDMwMjEyNDFaFw0yNzA1MDIwMjE3NDFaMDMxMTAvBgNV
BAMTKDFGQzA5MDRDMzM4Qzg4OEY5MzE0NDNERDM5NDY1NTExREM4MjVEREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YTopkl2nmK/USoF9By2y6Z/p
vafmkuwiFqa2ojiJPzouyw2tmyN/PEyMHWpWuBqXbJYLDIh2s2hJ+Gy+jZiXJqxg
sQdjzo07VtuGK6zy1PCqmsizlQ4quR+zSrkLinFVeU6GMBYE3LaZFjLedFAHgT2z
cyv7YvZpCcjHqUHeLMz2M0cWQ7hmZ5Taoscls8AWkcce36zOC/sZw/PdV3dZU/pE
rfGIkXZqkP0WQ869G/a2gIo030WSdnR8Lyhd/OCTrGZIgD58UI5D86n8KVX/Nykm
nA5U7zS95n233Zfb1Unc0tU50SiI4qA2SqM8IqU1h/WKTOlSbijNshNxB+pnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUH8CQTDOMiI+TFEPdOUZVEdyCXdswHwYDVR0j
BBgwFoAURmaTVeuw/jrmwGyN96kXvrSISaAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWRkYzFkZDgtNmQyNS00N2M3LWFhYTQtYmRkZjFiOWQ2NzdlLzAvNDY2NjkzNTVF
QkIwRkUzQUU2QzA2QzhERjdBOTE3QkVCNDg4NDlBMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NjY2OTM1NUVCQjBGRTNBRTZDMDZDOERGN0E5MTdCRUI0ODg0
OUEwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZGMxZGQ4LTZkMjUtNDdjNy1h
YWE0LWJkZGYxYjlkNjc3ZS8wLzMxMzAzMzJlMzEzNDMyMmUzMjM1MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjv8wDQYJ
KoZIhvcNAQELBQADggEBAA0DsHNA+bIYU/FwNSGdJwfsD7bOqSwgWqQMS9v9c4Qz
Dk9sCY0i1Lj3ypjRWiO+DfV3LHlOk0EnPtZBPBDAVA4dyA9NgS2oYTjzNZttEbG7
JQBJooIvxVjqgHZMZ68s82ICc7V/18AiGOI687Qa9QLgit3vZ5NG09Ek8mOjUhd5
MZxwl+7vZ4TTNJw6l8GE6odAqUwUwjq4p5YD4n7x9IaR70dlYM2B5FXKhuE8plq7
sXIhHRsuToPncu/fAAGsKqhx+U3gwcKcVAAITyuWmlnHQhx4xzOUbT52axCuFsIw
Erpu+Hua6jzxAcuUDK52ZXLbPGpmHvWa8HKvzi+g39Y=
-----END CERTIFICATE-----
Generated at Wed May 13 05:47:27 2026 by rpki-client