
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa
File: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (raw, json)
Hash identifier: qBRAe7C40tWA04dsJPNXkwqtoGUaunwx7S+rfFhu9ho=
Subject key identifier: 40:7A:D9:42:65:35:75:55:DB:95:9F:FC:D8:A0:9D:EE:D5:D2:F3:03
Certificate issuer: /CN=CD845730E45E4D531071D97C1EDC23DA378D662F
Certificate serial: 248881648944843BB9CD2B9857F03A6B01CC5D03
Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa
Signing time: Sun 03 May 2026 03:08:13 +0000
ROA not before: Sun 03 May 2026 03:03:13 +0000
ROA not after: Sun 02 May 2027 03:08:13 +0000
asID: 137349
IP address blocks: 103.114.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl
rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:88:81:64:89:44:84:3b:b9:cd:2b:98:57:f0:3a:6b:01:cc:5d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F
Validity
Not Before: May 3 03:03:13 2026 GMT
Not After : May 2 03:08:13 2027 GMT
Subject: CN=407AD94265357555DB959FFCD8A09DEED5D2F303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2a:80:6b:d3:37:c5:f3:e1:14:4f:49:40:5f:
ae:ba:74:a0:61:03:d4:ce:2d:f3:b0:e2:62:88:84:
2a:95:9b:da:14:03:3d:03:f4:24:59:74:47:ca:e7:
11:f1:17:fa:6f:60:38:77:56:bf:30:d5:90:ea:d4:
19:2c:26:0f:ac:91:f4:1d:db:c2:40:7d:04:7a:f4:
9b:e6:22:07:66:97:6b:c4:b5:fd:3b:42:53:08:22:
78:45:da:b8:9f:bb:01:39:bd:f2:d3:35:3b:2b:cc:
b5:b9:d1:36:15:34:96:d5:43:14:9c:d1:f4:ee:92:
f3:4c:c2:45:8e:dd:e4:e4:2f:f6:60:7a:16:8a:81:
7a:1f:c3:3d:bf:11:e7:55:4d:19:7b:01:04:49:04:
1c:23:20:58:cb:8b:96:50:92:e0:59:be:97:25:c2:
c6:3f:d6:bd:80:e8:4c:2f:20:bc:2a:e4:b9:25:c5:
27:eb:47:84:6a:15:fc:bb:e5:ee:c5:4e:c8:32:23:
b7:cf:a5:93:c1:7e:50:c3:22:8b:f9:be:3a:64:6f:
90:3b:09:96:94:38:67:b3:7b:a2:32:7e:18:ad:99:
00:2d:e2:40:c7:fb:fc:6f:df:b8:8f:3e:bf:e7:c1:
02:23:aa:65:e4:ab:70:94:e8:ad:b5:96:3b:97:b7:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7A:D9:42:65:35:75:55:DB:95:9F:FC:D8:A0:9D:EE:D5:D2:F3:03
X509v3 Authority Key Identifier:
keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.52.0/24
Signature Algorithm: sha256WithRSAEncryption
72:74:05:fb:05:23:37:56:37:05:44:78:51:41:4d:68:3b:c5:
41:d0:10:0b:02:9f:be:f4:5f:51:75:90:3e:e3:96:47:4a:58:
6e:3c:44:1f:70:1b:76:a3:07:9e:46:81:07:77:56:b5:5c:a6:
10:8f:5e:97:34:2e:9e:b3:c9:61:2c:ce:3e:10:fb:2f:ff:30:
2e:9d:c4:ae:7f:90:de:27:de:c0:c9:25:01:60:c6:6c:a3:77:
52:9d:41:d0:e4:38:9d:5d:87:54:ca:ca:5f:08:61:0f:76:c4:
ae:49:9b:23:4a:4e:7f:0f:bd:91:10:0a:91:b8:15:55:17:73:
1b:4c:bf:cf:b8:a8:bb:df:8f:35:97:b0:9c:8a:b2:62:d6:6e:
18:6b:d4:55:24:c8:5b:3e:86:b0:36:ce:d5:58:a0:ee:b7:83:
b6:08:63:2c:6a:e4:31:1d:47:96:e9:fe:74:63:7e:dd:07:19:
8b:f6:a6:5c:a3:bf:1e:c8:ce:17:20:3a:c1:03:0b:6f:d4:50:
46:92:95:1f:9b:ce:c6:b5:a4:e0:02:09:64:bf:58:91:24:ea:
87:51:40:bf:5c:66:20:5a:3b:3d:1a:f9:06:af:38:65:d1:65:
14:f3:42:ac:97:98:59:04:d6:24:94:51:6f:30:ef:93:61:2e:
a3:40:e1:28
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJIiBZIlEhDu5zSuYV/A6awHMXQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEz
NzhENjYyRjAeFw0yNjA1MDMwMzAzMTNaFw0yNzA1MDIwMzA4MTNaMDMxMTAvBgNV
BAMTKDQwN0FEOTQyNjUzNTc1NTVEQjk1OUZGQ0Q4QTA5REVFRDVEMkYzMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmKoBr0zfF8+EUT0lAX666dKBh
A9TOLfOw4mKIhCqVm9oUAz0D9CRZdEfK5xHxF/pvYDh3Vr8w1ZDq1BksJg+skfQd
28JAfQR69JvmIgdml2vEtf07QlMIInhF2rifuwE5vfLTNTsrzLW50TYVNJbVQxSc
0fTukvNMwkWO3eTkL/ZgehaKgXofwz2/EedVTRl7AQRJBBwjIFjLi5ZQkuBZvpcl
wsY/1r2A6EwvILwq5LklxSfrR4RqFfy75e7FTsgyI7fPpZPBflDDIov5vjpkb5A7
CZaUOGeze6IyfhitmQAt4kDH+/xv37iPPr/nwQIjqmXkq3CU6K21ljuXt56lAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUQHrZQmU1dVXblZ/82KCd7tXS8wMwHwYDVR0j
BBgwFoAUzYRXMOReTVMQcdl8Htwj2jeNZi8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDA5NjJjNmUtNTk1YS00N2M0LWFhN2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBF
NDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEzNzhENjYyRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DRDg0NTczMEU0NUU0RDUzMTA3MUQ5N0MxRURDMjNEQTM3OEQ2
NjJGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QwOTYyYzZlLTU5NWEtNDdjNC1h
YTdjLWVmOGU3N2NhZTY0Mi8wLzMxMzAzMzJlMzEzMTM0MmUzNTMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3I0MA0GCSqG
SIb3DQEBCwUAA4IBAQBydAX7BSM3VjcFRHhRQU1oO8VB0BALAp++9F9RdZA+45ZH
SlhuPEQfcBt2oweeRoEHd1a1XKYQj16XNC6es8lhLM4+EPsv/zAuncSuf5DeJ97A
ySUBYMZso3dSnUHQ5DidXYdUyspfCGEPdsSuSZsjSk5/D72REAqRuBVVF3MbTL/P
uKi73481l7CcirJi1m4Ya9RVJMhbPoawNs7VWKDut4O2CGMsauQxHUeW6f50Y37d
BxmL9qZco78eyM4XIDrBAwtv1FBGkpUfm87GtaTgAglkv1iRJOqHUUC/XGYgWjs9
GvkGrzhl0WUU80Ksl5hZBNYklFFvMO+TYS6jQOEo
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:42 2026 by rpki-client