
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa
File: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (raw, json)
Hash identifier: S2eBAP9psfFve56U+XIjYmGJD4nxxtKRtJXVgPJ07vw=
Subject key identifier: 8E:38:0C:3B:C5:B9:AD:67:74:F4:AE:F6:BE:83:D1:6F:23:8F:45:5A
Certificate issuer: /CN=13A93ABF25B29F4F42FB718CCE181B65D3B54BCB
Certificate serial: 76B38CB710ED03C557468015E9B841B6984D3B2A
Authority key identifier: 13:A9:3A:BF:25:B2:9F:4F:42:FB:71:8C:CE:18:1B:65:D3:B5:4B:CB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa
Signing time: Sun 03 May 2026 03:01:06 +0000
ROA not before: Sun 03 May 2026 02:56:06 +0000
ROA not after: Sun 02 May 2027 03:01:06 +0000
asID: 138886
IP address blocks: 103.13.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.crl
rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 13:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b3:8c:b7:10:ed:03:c5:57:46:80:15:e9:b8:41:b6:98:4d:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13A93ABF25B29F4F42FB718CCE181B65D3B54BCB
Validity
Not Before: May 3 02:56:06 2026 GMT
Not After : May 2 03:01:06 2027 GMT
Subject: CN=8E380C3BC5B9AD6774F4AEF6BE83D16F238F455A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:69:d7:b8:fb:6d:a2:f2:2a:c8:34:11:f1:
b5:b6:43:06:05:67:45:b0:4a:b6:21:fb:bf:8b:e9:
b0:ff:a2:36:a6:9b:61:68:67:12:6b:78:37:9e:c2:
e2:bb:fd:20:b3:30:18:df:44:6b:ea:4a:9c:ac:ac:
d4:ca:b2:68:b2:c6:29:5d:1c:5e:7e:e9:15:de:07:
b7:92:3f:fc:c0:34:84:a5:e6:e4:ad:2b:d6:2c:7b:
08:20:24:5d:55:8d:10:3d:f5:0d:ee:3e:e8:c9:38:
00:d7:76:00:e4:d6:8b:bf:01:17:95:14:a6:70:e4:
41:59:e6:5c:cc:0f:e8:37:05:87:c9:a7:76:aa:34:
d3:63:45:73:70:2b:48:24:8e:c2:5d:52:81:ec:f7:
e4:ad:e3:21:3f:5a:9b:98:83:a9:f9:b0:4a:9f:22:
13:46:62:be:e1:09:bf:43:38:8f:06:d9:95:ac:c3:
e2:c7:18:92:16:f2:a9:e9:a5:9b:11:24:41:11:dd:
4f:6b:a7:70:57:63:04:9f:96:f9:29:30:00:3e:fb:
53:b0:98:26:c6:06:1d:80:ca:78:e6:84:c4:c6:6d:
a0:2c:82:80:b1:d3:10:db:80:f0:5f:a0:84:7a:c7:
4e:d9:54:2e:19:a5:6d:f6:bc:3d:e9:d1:36:34:c2:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:38:0C:3B:C5:B9:AD:67:74:F4:AE:F6:BE:83:D1:6F:23:8F:45:5A
X509v3 Authority Key Identifier:
keyid:13:A9:3A:BF:25:B2:9F:4F:42:FB:71:8C:CE:18:1B:65:D3:B5:4B:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:5c:ab:5e:6e:b1:27:78:8d:96:ce:68:b0:6a:46:ef:4f:53:
cc:d9:ad:88:f3:32:60:36:c9:d1:bc:38:5f:ee:e8:e6:31:8d:
4d:ef:03:5e:e8:5d:e2:d4:7e:aa:ae:e9:5f:0d:8b:fb:1d:e9:
db:ab:b1:2c:98:6e:62:51:91:ca:a4:57:07:03:4c:e5:b1:c2:
66:c9:d4:ae:59:0d:44:af:13:dc:1a:4d:2d:58:65:fd:78:da:
58:c2:1f:4a:5e:04:b9:a2:eb:9f:4b:83:8f:b4:59:2c:67:b8:
26:cb:76:7a:fc:be:d3:77:c1:73:64:4b:c6:9d:29:fb:91:e1:
65:42:8f:11:49:c4:81:da:8d:c4:17:ed:28:17:50:0c:70:e6:
2e:ac:f8:9c:56:a9:50:8e:ab:b4:1d:ab:66:ef:7c:ae:ef:b0:
93:36:7d:90:1b:25:8e:28:27:0b:dd:5c:1c:1e:59:16:7a:59:
71:a9:0a:ea:7b:35:7e:d6:02:b3:65:ef:22:3b:64:33:15:4e:
f1:d3:eb:05:63:e6:1b:fb:e7:d5:28:1f:d0:be:72:37:a7:db:
aa:46:bb:51:cb:99:fb:ca:82:5f:96:76:fd:a8:af:08:68:d5:
81:4b:78:f2:b2:5e:1a:6d:21:cd:bf:63:70:2d:10:01:72:b6:
ff:fb:41:72
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdrOMtxDtA8VXRoAV6bhBtphNOyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNBOTNBQkYyNUIyOUY0RjQyRkI3MThDQ0UxODFCNjVE
M0I1NEJDQjAeFw0yNjA1MDMwMjU2MDZaFw0yNzA1MDIwMzAxMDZaMDMxMTAvBgNV
BAMTKDhFMzgwQzNCQzVCOUFENjc3NEY0QUVGNkJFODNEMTZGMjM4RjQ1NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7V2nXuPttovIqyDQR8bW2QwYF
Z0WwSrYh+7+L6bD/ojamm2FoZxJreDeewuK7/SCzMBjfRGvqSpysrNTKsmiyxild
HF5+6RXeB7eSP/zANISl5uStK9YsewggJF1VjRA99Q3uPujJOADXdgDk1ou/AReV
FKZw5EFZ5lzMD+g3BYfJp3aqNNNjRXNwK0gkjsJdUoHs9+St4yE/WpuYg6n5sEqf
IhNGYr7hCb9DOI8G2ZWsw+LHGJIW8qnppZsRJEER3U9rp3BXYwSflvkpMAA++1Ow
mCbGBh2AynjmhMTGbaAsgoCx0xDbgPBfoIR6x07ZVC4ZpW32vD3p0TY0wnxlAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUjjgMO8W5rWd09K72voPRbyOPRVowHwYDVR0j
BBgwFoAUE6k6vyWyn09C+3GMzhgbZdO1S8swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjU1YWY4YWYtYTQwZi00MmM3LTlmNGMtMThlMGNhNWNkNDdlLzAvMTNBOTNBQkYy
NUIyOUY0RjQyRkI3MThDQ0UxODFCNjVEM0I1NEJDQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xM0E5M0FCRjI1QjI5RjRGNDJGQjcxOENDRTE4MUI2NUQzQjU0
QkNCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I1NWFmOGFmLWE0MGYtNDJjNy05
ZjRjLTE4ZTBjYTVjZDQ3ZS8wLzMxMzAzMzJlMzEzMzJlMzEzMzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZw2JMA0GCSqG
SIb3DQEBCwUAA4IBAQAsXKtebrEneI2WzmiwakbvT1PM2a2I8zJgNsnRvDhf7ujm
MY1N7wNe6F3i1H6qrulfDYv7Henbq7EsmG5iUZHKpFcHA0zlscJmydSuWQ1ErxPc
Gk0tWGX9eNpYwh9KXgS5ouufS4OPtFksZ7gmy3Z6/L7Td8FzZEvGnSn7keFlQo8R
ScSB2o3EF+0oF1AMcOYurPicVqlQjqu0Hatm73yu77CTNn2QGyWOKCcL3VwcHlkW
ellxqQrqezV+1gKzZe8iO2QzFU7x0+sFY+Yb++fVKB/QvnI3p9uqRrtRy5n7yoJf
lnb9qK8IaNWBS3jysl4abSHNv2NwLRABcrb/+0Fy
-----END CERTIFICATE-----
Generated at Tue May 5 16:49:29 2026 by rpki-client