
$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa
File: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (raw, json)
Hash identifier: zrBSW8GC94FsmSWPx82P8/uTVF2HgCkoo/2hN3b+4hM=
Subject key identifier: CE:74:3E:45:F4:A9:86:37:1C:9D:65:82:99:F1:AE:13:A0:D0:60:18
Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial: 3105D8DDB24A265C3E269CEBC4D6B5AEBA51C0EA
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa
Signing time: Sun 03 May 2026 02:23:42 +0000
ROA not before: Sun 03 May 2026 02:18:42 +0000
ROA not after: Sun 02 May 2027 02:23:42 +0000
asID: 131749
IP address blocks: 103.31.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 13:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:05:d8:dd:b2:4a:26:5c:3e:26:9c:eb:c4:d6:b5:ae:ba:51:c0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Validity
Not Before: May 3 02:18:42 2026 GMT
Not After : May 2 02:23:42 2027 GMT
Subject: CN=CE743E45F4A986371C9D658299F1AE13A0D06018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:c6:44:45:4e:7b:fe:89:ac:ff:a8:3a:22:
7e:03:80:58:a8:f9:c7:13:9e:f3:12:dc:72:39:b7:
b5:0e:55:97:19:8c:59:02:6a:71:0d:a3:ac:8d:2e:
6c:f0:6a:bc:56:8c:e5:e3:c4:21:57:24:7f:3d:49:
81:3d:c0:72:b6:94:03:e2:af:df:2c:cb:e4:e5:f7:
49:7b:d9:18:5d:52:5e:dd:51:56:16:4c:07:10:d3:
f9:70:66:82:61:08:b0:0f:26:ee:19:cc:61:8f:bd:
1c:58:de:32:79:88:d5:86:a7:f6:25:12:6b:52:90:
e3:2a:92:b4:d7:a5:0a:3c:1b:b1:77:31:91:c3:30:
6b:66:81:7f:26:6f:f0:e1:f3:f4:2c:0d:a6:52:21:
c1:66:c5:5e:2c:59:c6:aa:d1:c1:87:2c:94:52:b4:
92:66:d4:9a:ae:f8:e2:11:58:ab:ad:29:f6:60:ce:
72:a0:6f:0d:6e:54:04:e7:1c:ce:41:eb:78:b1:2f:
5a:4a:d4:76:73:23:3a:cb:3e:14:7c:6e:92:64:8a:
31:de:67:86:70:c6:41:92:16:fa:49:d5:1d:e0:a3:
c8:ac:bf:28:29:5b:4e:ac:1e:d8:f7:a4:39:e9:a8:
32:5c:bb:b9:de:ca:78:eb:51:c7:a1:4f:f7:43:1b:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:3E:45:F4:A9:86:37:1C:9D:65:82:99:F1:AE:13:A0:D0:60:18
X509v3 Authority Key Identifier:
keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.132.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:dd:58:41:91:df:80:52:f3:3a:1d:7c:69:19:2e:c8:65:c0:
69:c0:0a:72:1c:34:c5:46:95:a4:58:e9:f8:70:11:b0:24:de:
30:e7:e6:83:75:58:2f:c6:11:6c:35:86:aa:0c:21:10:bb:e3:
9d:a2:d2:9b:5b:59:af:0e:82:fa:48:09:fd:91:6e:09:69:6a:
e6:da:3c:7c:cb:36:09:9f:9e:bd:ea:34:bb:0d:54:be:93:8b:
1f:8b:f5:83:98:ec:52:56:46:ae:6d:1a:ae:ab:db:aa:2f:ad:
5b:5a:01:3a:74:e9:a5:75:34:1a:ee:c5:5f:67:d7:dd:63:db:
4f:01:fc:d3:f8:5d:28:cc:9d:64:c0:9a:00:b2:fc:4b:f2:3a:
c2:27:d3:94:c0:2e:74:f7:f6:31:96:b9:14:5f:a4:ff:9d:a9:
b9:e0:a2:5a:0a:d5:87:16:ed:5b:78:72:5d:c8:fd:f0:2f:14:
8f:5d:3f:03:60:5d:11:28:3e:f2:97:a2:b0:bd:03:87:0a:14:
f2:36:a6:e9:5a:db:ab:92:03:ba:b5:8c:a8:6f:fc:58:9b:c6:
90:59:d8:f6:23:17:dc:c3:8e:3f:b3:8b:47:51:ac:49:5a:bf:
c1:87:35:98:b3:ae:e9:82:12:31:b1:6c:34:9c:8d:bf:3e:9c:
d9:25:a7:81
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMQXY3bJKJlw+JpzrxNa1rrpRwOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMxODA4
NkE4MzJDOTAeFw0yNjA1MDMwMjE4NDJaFw0yNzA1MDIwMjIzNDJaMDMxMTAvBgNV
BAMTKENFNzQzRTQ1RjRBOTg2MzcxQzlENjU4Mjk5RjFBRTEzQTBEMDYwMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI28ZERU57/oms/6g6In4DgFio
+ccTnvMS3HI5t7UOVZcZjFkCanENo6yNLmzwarxWjOXjxCFXJH89SYE9wHK2lAPi
r98sy+Tl90l72RhdUl7dUVYWTAcQ0/lwZoJhCLAPJu4ZzGGPvRxY3jJ5iNWGp/Yl
EmtSkOMqkrTXpQo8G7F3MZHDMGtmgX8mb/Dh8/QsDaZSIcFmxV4sWcaq0cGHLJRS
tJJm1Jqu+OIRWKutKfZgznKgbw1uVATnHM5B63ixL1pK1HZzIzrLPhR8bpJkijHe
Z4ZwxkGSFvpJ1R3go8isvygpW06sHtj3pDnpqDJcu7neynjrUcehT/dDGxZBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUznQ+RfSphjccnWWCmfGuE6DQYBgwHwYDVR0j
BBgwFoAU+OtvTpHd1H+o4EgbYNTBgIaoMskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzAwZjRmMzctYzdmYi00N2QwLThhODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5
MURERDQ3RkE4RTA0ODFCNjBENEMxODA4NkE4MzJDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOEVCNkY0RTkxRERENDdGQThFMDQ4MUI2MEQ0QzE4MDg2QTgz
MkM5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04
YTg1LWVjZmQxMmI5MTVmNS8wLzMxMzAzMzJlMzMzMTJlMzEzMzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx+EMA0GCSqG
SIb3DQEBCwUAA4IBAQCu3VhBkd+AUvM6HXxpGS7IZcBpwApyHDTFRpWkWOn4cBGw
JN4w5+aDdVgvxhFsNYaqDCEQu+OdotKbW1mvDoL6SAn9kW4JaWrm2jx8yzYJn569
6jS7DVS+k4sfi/WDmOxSVkaubRquq9uqL61bWgE6dOmldTQa7sVfZ9fdY9tPAfzT
+F0ozJ1kwJoAsvxL8jrCJ9OUwC509/YxlrkUX6T/nam54KJaCtWHFu1beHJdyP3w
LxSPXT8DYF0RKD7yl6KwvQOHChTyNqbpWturkgO6tYyob/xYm8aQWdj2Ixfcw44/
s4tHUaxJWr/BhzWYs67pghIxsWw0nI2/PpzZJaeB
-----END CERTIFICATE-----
Generated at Fri May 8 07:10:39 2026 by rpki-client