
$ rpki-client -vvf rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa
File: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (raw, json)
Hash identifier: Tdrs/9MxQFRJ04JmOuNBrPQeJZxfkO1jdYAYtxuEviE=
Subject key identifier: E3:6F:47:F2:53:3A:19:E7:1C:E2:ED:5B:11:50:BC:18:A5:60:7E:CC
Certificate issuer: /CN=09F1FCE71540608DD361D20037B585CA6313B714
Certificate serial: 3B13259499612EACB941D4D652D82EF5E8A307E0
Authority key identifier: 09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa
Signing time: Sun 03 May 2026 03:02:54 +0000
ROA not before: Sun 03 May 2026 02:57:54 +0000
ROA not after: Sun 02 May 2027 03:02:54 +0000
asID: 138142
IP address blocks: 103.134.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl
rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:13:25:94:99:61:2e:ac:b9:41:d4:d6:52:d8:2e:f5:e8:a3:07:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09F1FCE71540608DD361D20037B585CA6313B714
Validity
Not Before: May 3 02:57:54 2026 GMT
Not After : May 2 03:02:54 2027 GMT
Subject: CN=E36F47F2533A19E71CE2ED5B1150BC18A5607ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:26:24:49:7a:5b:e9:0e:af:b5:80:b8:d2:
5a:0d:4c:e2:e5:5e:c0:c8:2f:1c:d3:67:1c:25:a5:
ab:e5:0e:2a:14:0e:d3:15:8b:f8:63:62:31:a4:93:
ca:e8:58:6a:d2:d1:e5:da:24:a4:47:c6:11:e1:73:
cb:1e:04:60:8e:54:35:8d:05:47:df:8b:3a:5d:92:
90:0f:37:95:2e:6b:7a:3d:8e:e6:a3:97:7c:c5:ce:
f4:b1:2b:3a:36:02:9f:64:94:bf:e5:fc:47:3c:4a:
6d:d2:e6:38:b9:9b:5c:54:f3:58:1b:22:7c:be:33:
e9:1a:59:a4:f7:02:e0:9f:bb:40:df:67:74:c2:d9:
1f:23:83:dc:43:2f:ba:f2:53:d2:1d:49:2a:bb:1d:
e7:03:da:0f:29:89:f5:48:80:3f:55:df:a3:62:9b:
f1:ae:43:84:97:57:97:ef:67:30:dd:36:08:80:0e:
14:28:34:f7:ec:10:1b:0e:05:3b:ab:b9:ae:4a:15:
ac:0c:63:c3:63:d3:bb:d3:a5:bd:ed:3b:74:f0:a1:
49:94:74:76:4b:f5:86:95:ef:2a:41:dd:59:13:5b:
6b:f8:4d:30:ca:e6:de:97:72:55:78:d7:eb:7c:03:
c9:21:2c:d7:18:11:66:fd:13:53:3d:d0:60:f7:a3:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6F:47:F2:53:3A:19:E7:1C:E2:ED:5B:11:50:BC:18:A5:60:7E:CC
X509v3 Authority Key Identifier:
keyid:09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.16.0/24
Signature Algorithm: sha256WithRSAEncryption
64:72:d9:82:da:da:ca:9a:3b:ea:e0:5d:2b:56:1d:7f:17:6f:
8e:63:e6:53:81:78:af:6f:11:44:bd:d4:8c:7a:52:8e:e8:37:
65:5c:5d:df:42:2d:a2:06:fe:9a:8f:19:8b:78:d3:44:ec:bb:
92:95:60:ee:de:63:d9:b4:80:8f:70:05:71:bf:c7:54:99:36:
73:62:4c:a9:7d:8a:d3:f8:6a:5c:20:6a:b6:5b:cd:18:75:5b:
de:ec:15:56:8a:7b:eb:e6:b0:31:47:07:d6:b8:e2:7e:08:36:
be:73:9d:cb:df:a2:da:31:58:c7:0c:8b:ef:ef:73:a3:82:a5:
74:33:ec:f1:74:38:f9:3d:d7:85:d2:c6:45:ca:22:71:c5:16:
28:0b:33:63:f3:e8:ca:af:60:e5:7d:a2:a4:0e:63:ba:0f:7e:
2b:0c:18:62:a3:64:e7:2b:e1:5d:62:c9:45:91:c9:4b:c1:0c:
41:aa:60:48:6f:3e:78:a4:ac:af:df:65:24:d3:e7:cb:45:1b:
b1:1b:62:d1:58:5b:ff:77:ee:33:d0:6b:2b:0a:db:80:05:4b:
66:fa:21:55:1c:ff:ba:f9:32:c4:46:3b:d2:23:34:9a:94:09:
ad:f9:db:ea:88:5e:25:7d:b3:ec:d6:de:88:09:6b:29:fd:0c:
f1:84:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:06 2026 by rpki-client