
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa
File: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (raw, json)
Hash identifier: uuP3mIBEEQQRdZDqxBE2OXZk3Oekoj4K3r/fRqZFmeA=
Subject key identifier: 69:E8:12:92:C0:2D:71:B8:0A:B8:7E:B1:FC:2B:01:5E:A5:BF:46:33
Certificate issuer: /CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36
Certificate serial: 13EA85CF4115D71F1571DAB3DC8783E7E154F9C5
Authority key identifier: FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa
Signing time: Sun 03 May 2026 02:54:17 +0000
ROA not before: Sun 03 May 2026 02:49:17 +0000
ROA not after: Sun 02 May 2027 02:54:17 +0000
asID: 149737
IP address blocks: 103.188.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl
rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ea:85:cf:41:15:d7:1f:15:71:da:b3:dc:87:83:e7:e1:54:f9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36
Validity
Not Before: May 3 02:49:17 2026 GMT
Not After : May 2 02:54:17 2027 GMT
Subject: CN=69E81292C02D71B80AB87EB1FC2B015EA5BF4633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:11:7b:00:aa:f7:6e:0e:15:fc:ec:4c:69:5f:
e4:e0:d1:50:2f:57:12:df:7f:04:77:fb:9b:5f:18:
ed:65:4e:89:6d:0a:8f:b1:40:d8:ba:61:7a:b6:fd:
f1:b2:d0:79:66:e7:bc:dc:f0:c7:5c:76:7d:0f:58:
23:54:0d:79:16:35:9c:57:9a:2e:bb:0e:45:63:df:
f4:ce:c8:4e:d1:dd:ac:60:dd:ca:48:e2:6a:22:70:
e2:6a:c1:24:e4:38:22:17:39:1b:51:04:08:d0:ee:
78:01:9d:b4:2d:61:d4:e0:a5:72:d5:b3:f8:b7:60:
6d:54:1b:ad:b3:ba:4c:44:9a:66:28:c7:6a:cf:01:
d2:9d:1e:b5:cd:9f:33:00:e9:e4:17:ff:61:6e:e6:
d3:5f:20:40:b5:8f:90:94:5a:87:14:74:72:65:fa:
c8:3d:06:c4:02:0d:f9:4c:df:23:db:6a:69:f7:29:
ed:2e:ed:a4:01:11:82:d0:b6:5a:6b:22:e8:dd:81:
78:54:34:b3:56:48:ef:a4:58:af:ab:14:bd:cc:3e:
3e:60:6b:8a:19:27:c4:15:2f:33:71:62:2c:5d:00:
42:2a:a4:15:15:8d:4b:83:b1:d3:61:03:d4:95:bd:
d0:40:55:d7:e0:17:23:a2:b6:f8:ca:cc:5c:6c:1e:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E8:12:92:C0:2D:71:B8:0A:B8:7E:B1:FC:2B:01:5E:A5:BF:46:33
X509v3 Authority Key Identifier:
keyid:FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.253.0/24
Signature Algorithm: sha256WithRSAEncryption
53:45:2b:ba:46:35:9c:46:a3:7d:46:22:59:6a:43:76:b4:e2:
77:9c:ee:e2:05:4a:89:2a:23:47:44:b9:5e:24:10:83:95:f8:
91:0a:fd:32:0b:24:a2:87:a8:c6:8a:d4:e5:02:16:a8:2e:76:
fc:25:54:f8:32:b7:63:34:3c:d0:46:68:10:e2:10:8f:d2:fd:
d1:1d:e9:c4:79:8c:1b:25:8e:51:98:5a:9b:e1:40:41:f3:ab:
31:20:ef:a1:8a:5a:8a:4b:86:72:35:59:c4:b6:95:dc:ec:c0:
16:a6:2a:9e:4c:26:e3:42:0c:60:be:94:aa:4d:a1:21:0a:38:
cb:27:f0:90:b4:24:71:08:dc:8d:c6:37:d0:dd:52:d3:e8:0c:
64:d1:10:de:ef:2a:e3:94:4b:ed:e8:a6:d2:ec:1e:33:ac:73:
8a:fa:9a:2e:07:6d:8f:ed:07:06:bf:49:0f:95:07:19:35:2f:
b9:95:21:00:40:e6:f0:ea:c9:09:72:43:60:0c:c7:b1:a9:e5:
b5:09:87:56:5e:d2:80:dd:c8:da:be:4a:b1:01:0c:ad:27:4d:
91:65:18:de:65:7f:00:2b:f5:4e:84:5a:16:78:bb:34:60:50:
6e:e3:f6:ff:10:c1:b6:76:62:84:35:3d:7c:6f:56:46:df:ce:
ec:f7:16:7b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUE+qFz0EV1x8Vcdqz3IeD5+FU+cUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYx
RkQ0NkEzNjAeFw0yNjA1MDMwMjQ5MTdaFw0yNzA1MDIwMjU0MTdaMDMxMTAvBgNV
BAMTKDY5RTgxMjkyQzAyRDcxQjgwQUI4N0VCMUZDMkIwMTVFQTVCRjQ2MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfEXsAqvduDhX87ExpX+Tg0VAv
VxLffwR3+5tfGO1lToltCo+xQNi6YXq2/fGy0Hlm57zc8Mdcdn0PWCNUDXkWNZxX
mi67DkVj3/TOyE7R3axg3cpI4moicOJqwSTkOCIXORtRBAjQ7ngBnbQtYdTgpXLV
s/i3YG1UG62zukxEmmYox2rPAdKdHrXNnzMA6eQX/2Fu5tNfIEC1j5CUWocUdHJl
+sg9BsQCDflM3yPbamn3Ke0u7aQBEYLQtlprIujdgXhUNLNWSO+kWK+rFL3MPj5g
a4oZJ8QVLzNxYixdAEIqpBUVjUuDsdNhA9SVvdBAVdfgFyOitvjKzFxsHsSZAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUaegSksAtcbgKuH6x/CsBXqW/RjMwHwYDVR0j
BBgwFoAU+kL8ihsXJlkU8VIaEHnTXx/UajYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWFlZDA5OGItNDliMS00ZjUzLWI3NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEEx
QjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYxRkQ0NkEzNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQTQyRkM4QTFCMTcyNjU5MTRGMTUyMUExMDc5RDM1RjFGRDQ2
QTM2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzlhZWQwOThiLTQ5YjEtNGY1My1i
NzVhLTI3M2UxMWMyNTE0OS8wLzMxMzAzMzJlMzEzODM4MmUzMjM1MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMzMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvP0wDQYJ
KoZIhvcNAQELBQADggEBAFNFK7pGNZxGo31GIllqQ3a04nec7uIFSokqI0dEuV4k
EIOV+JEK/TILJKKHqMaK1OUCFqgudvwlVPgyt2M0PNBGaBDiEI/S/dEd6cR5jBsl
jlGYWpvhQEHzqzEg76GKWopLhnI1WcS2ldzswBamKp5MJuNCDGC+lKpNoSEKOMsn
8JC0JHEI3I3GN9DdUtPoDGTREN7vKuOUS+3optLsHjOsc4r6mi4HbY/tBwa/SQ+V
Bxk1L7mVIQBA5vDqyQlyQ2AMx7Gp5bUJh1Ze0oDdyNq+SrEBDK0nTZFlGN5lfwAr
9U6EWhZ4uzRgUG7j9v8QwbZ2YoQ1PXxvVkbfzuz3Fns=
-----END CERTIFICATE-----
Generated at Wed May 13 12:05:50 2026 by rpki-client