
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa
File: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (raw, json)
Hash identifier: LFwbkJ+ntBwxqtVdCPUurrC+Hhb3oO3C1dGEk8iDIYc=
Subject key identifier: EE:36:21:D8:AB:BA:C7:9F:C8:62:86:74:86:5E:5D:EF:79:34:4D:C7
Certificate issuer: /CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
Certificate serial: 42DCC9F1E127417BE5B6432DD36F848553C08072
Authority key identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa
Signing time: Sun 03 May 2026 02:32:21 +0000
ROA not before: Sun 03 May 2026 02:27:21 +0000
ROA not after: Sun 02 May 2027 02:32:21 +0000
asID: 141968
IP address blocks: 103.42.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl
rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:dc:c9:f1:e1:27:41:7b:e5:b6:43:2d:d3:6f:84:85:53:c0:80:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
Validity
Not Before: May 3 02:27:21 2026 GMT
Not After : May 2 02:32:21 2027 GMT
Subject: CN=EE3621D8ABBAC79FC8628674865E5DEF79344DC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:36:17:21:3b:07:e8:bf:4e:81:23:80:23:
41:72:2d:9d:11:c2:b7:56:16:93:93:f5:98:53:fe:
b3:90:de:9b:83:c4:f5:6e:33:3e:20:27:c2:23:d0:
90:27:cd:98:10:c0:ee:dd:bc:d2:78:11:a3:dd:62:
f7:54:47:2c:d4:08:70:de:7a:80:c6:79:89:f5:52:
20:0b:f1:61:c4:61:8e:fc:d8:67:30:b6:89:d3:40:
75:9f:1c:4a:e1:c5:64:19:b7:56:5b:19:69:d6:c5:
01:b9:81:19:18:be:45:60:ea:7a:4d:68:f4:d4:96:
1d:1a:c9:40:7e:c6:cd:0f:65:90:25:d4:cc:12:e4:
a2:3b:d5:10:41:3a:64:32:c3:e2:95:98:5d:69:b5:
71:65:13:3f:11:3b:b4:ef:23:7a:57:7f:2f:13:61:
3d:cf:7f:4f:f3:78:a0:2c:aa:3e:78:3d:e8:de:98:
c1:6b:1e:e7:dc:66:18:17:67:b2:88:59:bb:14:84:
f7:2b:e4:57:70:e4:40:ce:22:b9:0d:e5:3d:d6:6e:
58:1b:fa:3c:74:1c:86:3d:62:95:28:25:4a:1d:21:
6f:ba:53:a6:28:3b:3b:0b:0e:cb:72:11:82:da:28:
bc:8c:2e:75:7e:37:bb:c2:d8:53:63:30:7e:03:09:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:36:21:D8:AB:BA:C7:9F:C8:62:86:74:86:5E:5D:EF:79:34:4D:C7
X509v3 Authority Key Identifier:
keyid:B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.116.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:86:be:45:58:cb:f1:44:94:5a:87:79:91:7a:c9:57:64:73:
95:ea:a2:d6:47:50:33:86:3f:cc:02:45:07:79:3f:9a:94:1e:
4d:1a:31:fc:04:52:ac:20:c4:be:75:fb:48:bc:55:61:0d:3e:
77:3c:95:ec:f8:44:40:81:cf:d0:a9:4d:6b:e1:ce:44:c3:69:
bd:41:d7:40:d4:38:be:ca:fa:78:e3:e7:2b:87:bf:2b:8e:97:
67:46:d4:17:49:0a:ae:6a:fb:c0:46:f4:32:30:62:15:e1:14:
6c:04:d0:d5:3f:98:ad:36:3a:ca:6b:07:00:ca:92:6d:c2:ad:
ef:58:b6:51:5f:ac:c8:dd:6c:78:b4:75:66:c4:54:3f:0c:6e:
92:c1:15:5a:1e:be:8c:3f:8c:08:8c:4c:ca:6c:84:b4:4b:12:
7c:0e:ee:61:3a:8b:b3:15:4c:83:0e:3b:25:6c:34:0e:e7:af:
29:0b:44:01:1a:69:90:0b:53:de:79:2b:c8:4f:fa:0f:51:96:
cf:5d:8d:e5:33:d3:24:e2:ea:a7:51:81:f3:88:15:10:ce:dc:
2d:a1:e2:7c:f7:ac:f7:45:dc:27:e8:24:8d:df:05:39:0a:89:
84:03:02:bb:38:b2:40:19:64:f3:1a:c4:21:d0:ae:33:79:8c:
61:5c:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:17:02 2026 by rpki-client