
$ rpki-client -vvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa
File: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=
Subject key identifier: 7E:7D:C3:87:39:20:92:5E:CE:89:54:BA:29:36:8A:2A:22:A6:B3:22
Certificate issuer: /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242
Certificate serial: 1D0A0F0DAA06902A94C4749F0E5C19F0CEBD53A0
Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa
Signing time: Sun 03 May 2026 02:48:29 +0000
ROA not before: Sun 03 May 2026 02:43:29 +0000
ROA not after: Sun 02 May 2027 02:48:29 +0000
asID: 9341
IP address blocks: 103.181.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl
rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0a:0f:0d:aa:06:90:2a:94:c4:74:9f:0e:5c:19:f0:ce:bd:53:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242
Validity
Not Before: May 3 02:43:29 2026 GMT
Not After : May 2 02:48:29 2027 GMT
Subject: CN=7E7DC3873920925ECE8954BA29368A2A22A6B322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:29:14:b3:f5:92:8e:f3:5e:2d:90:3b:c5:
7f:91:0c:55:c9:a9:fc:b5:a7:d9:46:61:c9:ae:cd:
57:5c:06:d1:de:74:42:e6:1c:f7:59:a5:c1:da:47:
16:7d:a6:cc:7f:40:38:c0:e8:07:45:4c:5d:eb:39:
e5:a8:aa:c5:d2:41:85:5e:1d:af:83:11:23:f8:ec:
30:21:7a:24:ba:b0:9c:b3:62:c3:2c:79:83:ad:d2:
c3:4f:1c:71:f0:eb:ad:cc:17:bc:e4:98:ee:fa:6b:
26:b7:27:a4:41:8c:8c:1b:66:36:0e:6b:0b:fa:67:
69:a1:a9:c8:8e:ac:ba:ef:fc:8a:4a:9f:be:16:ee:
8b:fe:40:9d:01:7b:f4:c8:f9:63:79:c0:9a:29:20:
fb:ea:49:31:39:5d:ed:95:a0:46:a9:d8:e4:b7:01:
95:75:49:3e:af:87:71:24:ad:75:22:04:a5:78:da:
ed:1b:75:27:d8:24:05:87:7f:a6:af:a2:94:2d:d3:
d0:a6:1c:b2:f3:95:ac:e0:82:e8:4e:ec:93:4e:0a:
10:8a:1d:8c:a7:d0:27:81:93:9a:fd:88:cf:45:05:
68:6b:b1:a0:c0:c5:56:05:28:a5:0d:d3:04:b3:c9:
ae:81:e6:bd:c1:51:f4:3e:b4:1a:d9:26:da:a7:69:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7D:C3:87:39:20:92:5E:CE:89:54:BA:29:36:8A:2A:22:A6:B3:22
X509v3 Authority Key Identifier:
keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.136.0/23
Signature Algorithm: sha256WithRSAEncryption
16:76:36:7e:bf:b5:6c:61:bc:68:5f:5a:e3:60:0c:16:02:73:
7a:20:98:9d:50:7a:54:83:9b:cf:6e:4b:3b:a3:a6:69:a1:4f:
f9:31:8a:63:b6:5a:5f:e6:87:71:f2:0f:4d:0e:f8:a3:b3:9d:
0b:1a:68:ae:ff:8c:d3:b0:04:19:19:8d:17:2f:7b:19:a4:96:
b5:d8:b7:aa:97:48:dc:92:39:dc:5e:44:45:eb:80:88:5c:2d:
24:38:41:75:09:80:cb:43:63:60:d7:28:1d:b2:7e:67:4d:9e:
58:28:f6:2f:6e:05:4e:c5:3e:15:d8:dd:3b:24:52:dc:ee:0b:
65:3c:52:d4:25:c4:de:b2:71:98:20:52:49:7e:b0:23:bd:81:
25:ef:09:51:b3:7b:67:93:1f:80:42:47:53:2f:9a:60:78:bf:
18:a0:e1:46:95:2c:15:40:1f:7c:65:fe:1c:19:54:08:c6:93:
67:c2:fa:a4:3b:7c:03:2c:82:2e:c7:77:80:d7:5f:5b:22:a4:
ad:33:ca:63:31:2b:64:4a:2d:bc:99:bb:c6:9f:ad:3a:08:15:
aa:39:f8:a8:af:bf:b4:7b:33:05:85:4c:c8:1a:81:fb:d1:ee:
e0:66:25:be:e8:3b:8b:03:a9:29:69:f5:c7:e1:11:9c:ad:a2:
10:31:a1:82
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHQoPDaoGkCqUxHSfDlwZ8M69U6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0OTg5
NzI5QjI0MjAeFw0yNjA1MDMwMjQzMjlaFw0yNzA1MDIwMjQ4MjlaMDMxMTAvBgNV
BAMTKDdFN0RDMzg3MzkyMDkyNUVDRTg5NTRCQTI5MzY4QTJBMjJBNkIzMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI7ykUs/WSjvNeLZA7xX+RDFXJ
qfy1p9lGYcmuzVdcBtHedELmHPdZpcHaRxZ9psx/QDjA6AdFTF3rOeWoqsXSQYVe
Ha+DESP47DAheiS6sJyzYsMseYOt0sNPHHHw663MF7zkmO76aya3J6RBjIwbZjYO
awv6Z2mhqciOrLrv/IpKn74W7ov+QJ0Be/TI+WN5wJopIPvqSTE5Xe2VoEap2OS3
AZV1ST6vh3EkrXUiBKV42u0bdSfYJAWHf6avopQt09CmHLLzlazgguhO7JNOChCK
HYyn0CeBk5r9iM9FBWhrsaDAxVYFKKUN0wSzya6B5r3BUfQ+tBrZJtqnaVFBAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUfn3Dhzkgkl7OiVS6KTaKKiKmsyIwHwYDVR0j
BBgwFoAUCjI/3+XSgH7CqNd6eFj0mJcpskIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODc2ZmRjNjAtODAyMy00MGNkLWFhYTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZF
NUQyODA3RUMyQThENzdBNzg1OEY0OTg5NzI5QjI0Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTMyM0ZERkU1RDI4MDdFQzJBOEQ3N0E3ODU4RjQ5ODk3MjlC
MjQyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg3NmZkYzYwLTgwMjMtNDBjZC1h
YWE0LWNkNmVkMjJjNGQ0NS8wLzMxMzAzMzJlMzEzODMxMmUzMTMzMzYyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe1iDANBgkqhkiG
9w0BAQsFAAOCAQEAFnY2fr+1bGG8aF9a42AMFgJzeiCYnVB6VIObz25LO6OmaaFP
+TGKY7ZaX+aHcfIPTQ74o7OdCxporv+M07AEGRmNFy97GaSWtdi3qpdI3JI53F5E
ReuAiFwtJDhBdQmAy0NjYNcoHbJ+Z02eWCj2L24FTsU+FdjdOyRS3O4LZTxS1CXE
3rJxmCBSSX6wI72BJe8JUbN7Z5MfgEJHUy+aYHi/GKDhRpUsFUAffGX+HBlUCMaT
Z8L6pDt8AyyCLsd3gNdfWyKkrTPKYzErZEotvJm7xp+tOggVqjn4qK+/tHszBYVM
yBqB+9Hu4GYlvug7iwOpKWn1x+ERnK2iEDGhgg==
-----END CERTIFICATE-----
Generated at Tue May 5 13:26:35 2026 by rpki-client