
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa
File: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (raw, json)
Hash identifier: guj2wYIy2OeBYkQ4ioJGOVZvTeDH758uPYwCniNJbeE=
Subject key identifier: A8:4C:0B:DC:E1:79:71:9B:D7:AF:63:35:84:0D:F3:3F:ED:D5:8B:73
Certificate issuer: /CN=12099D13750CE0704F5D87C255E4B056E703B28D
Certificate serial: 100DE91E14FEA7D91C73AA070D780779DA321FFE
Authority key identifier: 12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa
Signing time: Sun 03 May 2026 03:18:22 +0000
ROA not before: Sun 03 May 2026 03:13:22 +0000
ROA not after: Sun 02 May 2027 03:18:22 +0000
asID: 151537
IP address blocks: 103.247.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl
rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:0d:e9:1e:14:fe:a7:d9:1c:73:aa:07:0d:78:07:79:da:32:1f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12099D13750CE0704F5D87C255E4B056E703B28D
Validity
Not Before: May 3 03:13:22 2026 GMT
Not After : May 2 03:18:22 2027 GMT
Subject: CN=A84C0BDCE179719BD7AF6335840DF33FEDD58B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:75:67:09:74:e0:3e:e3:43:19:77:ed:88:
46:2c:b6:95:51:74:cc:43:93:6d:03:2c:09:21:5f:
bc:86:97:8a:a2:fc:fe:55:ef:f4:bb:bf:a1:40:ef:
4f:d7:a1:2d:4c:5d:ae:f6:03:ed:f5:10:b1:29:55:
0d:d9:8f:65:63:ea:07:e8:2f:5a:b0:d6:18:61:72:
0b:42:85:ac:2c:48:3d:e7:8a:0c:0d:03:25:d6:98:
16:5d:9a:ae:30:ef:b2:12:f0:55:ef:f9:fd:da:cc:
9e:8f:9d:a3:fc:3b:e5:62:99:10:b4:92:80:b9:ca:
95:ea:21:f2:0e:79:c5:e0:15:3f:48:98:3b:29:54:
2c:f6:d5:71:7b:9e:a9:64:85:75:e3:7e:60:86:01:
ec:a2:dc:4c:c6:fe:0c:b7:12:9a:ef:17:fc:2e:c5:
35:11:f2:7d:40:1f:c0:16:4b:f6:a0:79:f6:b3:de:
0c:88:aa:93:e2:5c:0f:66:76:c2:71:fe:c7:87:97:
ff:49:3f:a7:9d:ac:f3:9f:15:01:07:72:58:fd:34:
53:46:2f:5d:cc:6a:13:96:82:f3:c9:52:68:08:1c:
94:2a:80:43:2e:cc:49:d6:8e:ad:a4:8d:bf:d3:75:
ce:52:f3:93:14:65:86:bc:cd:17:3d:22:6c:5e:ce:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4C:0B:DC:E1:79:71:9B:D7:AF:63:35:84:0D:F3:3F:ED:D5:8B:73
X509v3 Authority Key Identifier:
keyid:12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.242.0/23
Signature Algorithm: sha256WithRSAEncryption
31:2d:72:52:f2:a4:4b:47:15:29:df:59:95:3d:f6:7b:3d:cb:
50:31:78:0a:80:ef:12:f8:68:84:7b:f9:0f:aa:b6:58:61:6c:
68:83:52:f0:9c:b6:bb:da:7c:a3:de:0f:ba:b9:3b:43:16:e0:
04:41:83:cc:33:ca:b0:a5:1e:58:f1:ca:1f:66:4a:b1:2e:41:
51:b1:7d:58:8e:03:48:c5:b2:52:22:bf:b1:5d:90:d0:9d:5e:
10:f9:c9:61:a7:c9:6c:98:2d:c7:ec:80:5d:a2:59:b9:7f:26:
5f:3d:15:ba:9b:3a:46:8e:5b:c2:90:da:8f:71:37:ae:61:fd:
52:76:1a:3c:4b:b1:0d:22:ed:b9:5a:97:a7:fb:d0:8c:ff:bc:
40:69:9e:3d:18:09:3e:6f:c8:cb:74:49:a3:28:d0:d3:8b:1c:
29:5d:f7:c2:51:37:f6:e4:48:12:c5:bd:91:c4:1e:5c:26:85:
7e:4b:40:38:9a:a0:a0:f0:66:b4:e2:e3:0e:83:3f:a4:0d:79:
21:ca:f1:71:69:70:4b:0d:e8:25:20:7e:de:c1:80:5d:3b:c4:
7f:dc:6c:49:a9:62:92:5f:78:78:6c:87:b2:e1:41:7c:d8:a9:
a9:4c:0a:55:32:52:a2:94:e2:1b:f7:d5:5a:85:52:f8:41:6d:
f0:8f:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:35 2026 by rpki-client