
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa
File: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (raw, json)
Hash identifier: xmNTgE8NlEgdxtkyZzmV8vhuvBfxhNKdp0Qma8cQHQ4=
Subject key identifier: 6C:EC:0D:95:6B:95:79:C5:DD:34:1F:30:A8:61:01:84:89:AF:79:A9
Certificate issuer: /CN=EA69EE1870C74C4198176D679D2040962AA65EE5
Certificate serial: 34E1CB8535D2B21AF042B4A1DCDBC7ADCCF24747
Authority key identifier: EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa
Signing time: Sun 03 May 2026 03:00:54 +0000
ROA not before: Sun 03 May 2026 02:55:54 +0000
ROA not after: Sun 02 May 2027 03:00:54 +0000
asID: 140028
IP address blocks: 103.146.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl
rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e1:cb:85:35:d2:b2:1a:f0:42:b4:a1:dc:db:c7:ad:cc:f2:47:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA69EE1870C74C4198176D679D2040962AA65EE5
Validity
Not Before: May 3 02:55:54 2026 GMT
Not After : May 2 03:00:54 2027 GMT
Subject: CN=6CEC0D956B9579C5DD341F30A861018489AF79A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:23:21:6b:cf:e9:8c:a3:49:67:01:6b:2d:8a:
b7:e7:09:f8:33:e4:ec:c3:b8:b1:f1:3f:96:2e:a1:
71:1f:f4:64:21:cf:a6:81:6f:c5:20:c0:00:8a:6a:
6d:31:ea:b4:39:b8:78:a2:de:d2:7a:f3:f6:77:19:
de:e1:78:54:7d:40:3a:36:61:1f:66:ea:61:06:48:
e8:26:4a:6c:79:90:5e:88:db:22:2e:5e:ef:5d:26:
dd:0a:db:37:cc:65:28:f1:21:53:6c:48:1e:63:f1:
4e:ff:a7:2c:b7:1a:f6:5e:5e:3f:b8:f8:2c:22:b2:
6f:ee:8f:36:c5:47:10:f0:ae:3f:36:82:0d:8a:c5:
e3:03:d3:9d:fa:2f:98:99:aa:ec:23:40:ad:2e:f6:
1d:00:0a:6d:fc:f4:29:a1:6a:3b:59:f9:ee:97:04:
d4:ff:6c:eb:f1:05:23:92:6a:a0:4e:31:c9:69:83:
ca:db:22:37:00:4e:80:5b:89:91:1b:50:02:b1:b9:
93:7f:09:0e:eb:eb:fe:e1:ef:78:ab:07:d4:0d:17:
cf:82:6f:0e:64:2b:b3:76:1c:c1:1a:9a:57:ad:bc:
2e:f5:08:07:e2:19:42:d6:7d:71:73:8b:fc:83:66:
b0:93:a7:7f:c8:9d:c8:9e:5f:8d:da:a5:46:f2:1b:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EC:0D:95:6B:95:79:C5:DD:34:1F:30:A8:61:01:84:89:AF:79:A9
X509v3 Authority Key Identifier:
keyid:EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.128.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e3:91:0d:7a:d5:43:f9:e0:65:aa:86:bb:f1:80:49:b3:1a:
1f:58:51:03:8e:17:8b:0d:26:ca:8a:6d:58:fe:60:20:6a:5d:
ad:20:7c:81:d4:32:e7:79:96:59:c8:f7:2a:7e:b7:b4:41:ad:
7d:bf:71:57:b3:49:1a:b6:0b:6b:e4:98:96:45:cb:18:e6:ab:
b5:25:58:4f:9e:cc:a9:f5:40:17:9d:b4:d2:bb:26:43:14:f4:
1c:83:f8:e5:57:81:62:66:51:9b:32:e8:b6:f4:73:3a:a2:04:
37:e7:fd:c5:c4:a9:f7:e4:ff:a4:08:b3:5e:5b:8e:de:6c:bd:
99:f0:d9:2d:b6:4d:fd:7d:0e:dc:e7:18:fa:c7:30:a9:02:f4:
40:f6:56:32:0b:a5:01:84:d0:ca:33:c7:68:ed:68:63:41:45:
e4:f7:00:2c:2b:16:b5:3f:51:9b:7b:a8:eb:35:dd:f8:ac:49:
c8:01:f9:86:38:81:ad:57:bc:52:e9:e7:07:a4:3d:a8:57:49:
12:b2:6d:0a:eb:93:5c:b7:4c:81:a2:b4:e1:46:9d:a6:f9:a4:
0c:30:b1:10:27:af:24:fc:e3:ce:3a:c7:eb:46:d1:59:0e:57:
3a:e2:43:a4:b4:c5:d2:fe:59:8d:fb:59:e1:34:aa:d3:b1:2c:
c0:42:dd:10
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNOHLhTXSshrwQrSh3NvHrczyR0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE2OUVFMTg3MEM3NEM0MTk4MTc2RDY3OUQyMDQwOTYy
QUE2NUVFNTAeFw0yNjA1MDMwMjU1NTRaFw0yNzA1MDIwMzAwNTRaMDMxMTAvBgNV
BAMTKDZDRUMwRDk1NkI5NTc5QzVERDM0MUYzMEE4NjEwMTg0ODlBRjc5QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3IyFrz+mMo0lnAWstirfnCfgz
5OzDuLHxP5YuoXEf9GQhz6aBb8UgwACKam0x6rQ5uHii3tJ68/Z3Gd7heFR9QDo2
YR9m6mEGSOgmSmx5kF6I2yIuXu9dJt0K2zfMZSjxIVNsSB5j8U7/pyy3GvZeXj+4
+Cwism/ujzbFRxDwrj82gg2KxeMD0536L5iZquwjQK0u9h0ACm389CmhajtZ+e6X
BNT/bOvxBSOSaqBOMclpg8rbIjcAToBbiZEbUAKxuZN/CQ7r6/7h73irB9QNF8+C
bw5kK7N2HMEamletvC71CAfiGULWfXFzi/yDZrCTp3/IncieX43apUbyG4QrAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUbOwNlWuVecXdNB8wqGEBhImveakwHwYDVR0j
BBgwFoAU6mnuGHDHTEGYF21nnSBAliqmXuUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjQyYWEwYTktNDU4OC00Zjg3LWFiODktZjNiOWRjNjEwN2I2LzAvRUE2OUVFMTg3
MEM3NEM0MTk4MTc2RDY3OUQyMDQwOTYyQUE2NUVFNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQTY5RUUxODcwQzc0QzQxOTgxNzZENjc5RDIwNDA5NjJBQTY1
RUU1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I0MmFhMGE5LTQ1ODgtNGY4Ny1h
Yjg5LWYzYjlkYzYxMDdiNi8wLzMxMzAzMzJlMzEzNDM2MmUzMTMyMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMyMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkoAwDQYJ
KoZIhvcNAQELBQADggEBALXjkQ161UP54GWqhrvxgEmzGh9YUQOOF4sNJsqKbVj+
YCBqXa0gfIHUMud5llnI9yp+t7RBrX2/cVezSRq2C2vkmJZFyxjmq7UlWE+ezKn1
QBedtNK7JkMU9ByD+OVXgWJmUZsy6Lb0czqiBDfn/cXEqffk/6QIs15bjt5svZnw
2S22Tf19DtznGPrHMKkC9ED2VjILpQGE0Mozx2jtaGNBReT3ACwrFrU/UZt7qOs1
3fisScgB+YY4ga1XvFLp5wekPahXSRKybQrrk1y3TIGitOFGnab5pAwwsRAnryT8
4846x+tG0VkOVzriQ6S0xdL+WY37WeE0qtOxLMBC3RA=
-----END CERTIFICATE-----
Generated at Wed May 13 14:58:47 2026 by rpki-client