
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa
File: 3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa (raw, json)
Hash identifier: edEAW4h3zbE7MKZHtZXXXR5NtAdbIO3xMx03a9fE7lA=
Subject key identifier: DF:DB:01:1B:EC:7E:9B:0A:39:77:64:6D:84:68:B3:6F:D8:4E:12:C4
Certificate issuer: /CN=79E35332A362A778D03F32FD5C6A865996E2D53B
Certificate serial: 4DBCCF2BBF95E68A5178AB5BD5D0B2CEB7A521D7
Authority key identifier: 79:E3:53:32:A3:62:A7:78:D0:3F:32:FD:5C:6A:86:59:96:E2:D5:3B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79E35332A362A778D03F32FD5C6A865996E2D53B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa
Signing time: Sun 03 May 2026 02:12:38 +0000
ROA not before: Sun 03 May 2026 02:07:38 +0000
ROA not after: Sun 02 May 2027 02:12:38 +0000
asID: 149742
IP address blocks: 103.189.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/79E35332A362A778D03F32FD5C6A865996E2D53B.crl
rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/79E35332A362A778D03F32FD5C6A865996E2D53B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79E35332A362A778D03F32FD5C6A865996E2D53B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:bc:cf:2b:bf:95:e6:8a:51:78:ab:5b:d5:d0:b2:ce:b7:a5:21:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79E35332A362A778D03F32FD5C6A865996E2D53B
Validity
Not Before: May 3 02:07:38 2026 GMT
Not After : May 2 02:12:38 2027 GMT
Subject: CN=DFDB011BEC7E9B0A3977646D8468B36FD84E12C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:aa:d4:ce:f7:0e:18:50:23:03:71:ae:42:
25:06:7c:e5:9c:0c:95:88:33:b4:b4:e4:23:a9:03:
1c:a3:9f:69:ff:89:f6:98:0d:58:77:42:22:33:b7:
fa:d5:66:81:3e:b2:1a:16:22:21:a8:1b:3b:3a:43:
0e:4d:32:ef:99:13:2c:f8:ea:50:7d:cf:a0:42:c5:
3f:36:ae:e2:34:3c:88:62:a8:7d:c2:d8:2a:d3:3a:
8f:d9:c0:29:53:83:cc:0c:cd:18:b9:74:47:5a:c9:
bb:1b:3e:af:68:a8:38:91:2d:93:24:0c:4a:25:e7:
39:cb:f2:35:a0:04:41:31:08:5e:13:a5:00:7d:17:
38:a2:4c:61:b4:e6:58:e9:49:a0:07:09:39:42:63:
e6:ae:fe:fa:12:7c:cf:c3:22:86:6b:0e:87:68:d1:
a0:a9:99:81:ef:e3:8f:cc:92:a5:ec:9b:ca:1d:6b:
6e:e9:1c:e2:02:ec:d3:8a:0c:48:72:47:cc:39:8f:
66:e1:ab:22:9b:62:53:66:0d:00:7e:8b:8b:02:e2:
b9:8c:8e:6e:99:f3:fa:51:22:07:ae:3e:0e:ba:9e:
a3:52:89:f4:00:7e:9c:06:c4:bd:8a:e2:cb:dc:73:
53:94:f1:d4:3f:23:5a:39:e9:11:d6:7a:b6:c7:d7:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DB:01:1B:EC:7E:9B:0A:39:77:64:6D:84:68:B3:6F:D8:4E:12:C4
X509v3 Authority Key Identifier:
keyid:79:E3:53:32:A3:62:A7:78:D0:3F:32:FD:5C:6A:86:59:96:E2:D5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/79E35332A362A778D03F32FD5C6A865996E2D53B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79E35332A362A778D03F32FD5C6A865996E2D53B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.60.0/23
Signature Algorithm: sha256WithRSAEncryption
05:b5:ea:71:2f:14:35:a5:f9:fd:cb:3f:73:7f:b5:79:c2:e7:
10:ce:eb:e1:3f:fd:98:16:b9:a3:ad:96:78:52:02:36:d7:82:
5b:5c:ac:51:a6:50:2e:be:ef:11:e9:48:17:1f:fb:33:3e:6f:
10:d3:27:ef:85:21:13:73:e8:a0:a8:e7:0b:3d:db:51:b0:7a:
f8:96:84:ee:fc:c2:68:e8:87:54:43:fa:48:e0:31:bd:31:2b:
73:8c:a9:bc:d7:6b:aa:16:33:61:10:bc:55:66:c6:cf:65:8b:
a2:81:75:f7:da:d6:6f:28:73:a8:23:7d:72:8f:77:e0:a7:cb:
b4:66:4d:c7:3e:d8:d4:72:68:43:f2:3c:27:91:a5:3b:8a:47:
64:9b:dd:e6:e1:9d:11:32:54:cd:69:95:57:4f:80:30:51:5f:
91:3d:d6:2f:6e:e3:ce:f2:89:f6:69:75:1c:cd:2c:ad:c5:7d:
fe:4a:7c:f7:b4:1f:00:23:74:61:fc:17:41:9c:7d:ec:02:c6:
d7:32:44:bc:e6:69:e6:9e:2c:df:17:1d:fe:68:a0:1c:2b:a2:
54:0c:a1:e0:8c:1a:88:f0:bb:14:db:43:40:02:88:35:a8:65:
6b:a6:7f:97:32:b7:9c:ad:43:6f:eb:fe:6d:40:f5:8f:15:a2:
75:96:0e:ad
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTbzPK7+V5opReKtb1dCyzrelIdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlFMzUzMzJBMzYyQTc3OEQwM0YzMkZENUM2QTg2NTk5
NkUyRDUzQjAeFw0yNjA1MDMwMjA3MzhaFw0yNzA1MDIwMjEyMzhaMDMxMTAvBgNV
BAMTKERGREIwMTFCRUM3RTlCMEEzOTc3NjQ2RDg0NjhCMzZGRDg0RTEyQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwKrUzvcOGFAjA3GuQiUGfOWc
DJWIM7S05COpAxyjn2n/ifaYDVh3QiIzt/rVZoE+shoWIiGoGzs6Qw5NMu+ZEyz4
6lB9z6BCxT82ruI0PIhiqH3C2CrTOo/ZwClTg8wMzRi5dEdaybsbPq9oqDiRLZMk
DEol5znL8jWgBEExCF4TpQB9FziiTGG05ljpSaAHCTlCY+au/voSfM/DIoZrDodo
0aCpmYHv44/MkqXsm8oda27pHOIC7NOKDEhyR8w5j2bhqyKbYlNmDQB+i4sC4rmM
jm6Z8/pRIgeuPg66nqNSifQAfpwGxL2K4svcc1OU8dQ/I1o56RHWerbH12mBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU39sBG+x+mwo5d2RthGizb9hOEsQwHwYDVR0j
BBgwFoAUeeNTMqNip3jQPzL9XGqGWZbi1TswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGFkM2NjOGEtOTczOC00NTFiLWE3OTgtN2I3NmIwOTQwYjRiLzAvNzlFMzUzMzJB
MzYyQTc3OEQwM0YzMkZENUM2QTg2NTk5NkUyRDUzQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83OUUzNTMzMkEzNjJBNzc4RDAzRjMyRkQ1QzZBODY1OTk2RTJE
NTNCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBhZDNjYzhhLTk3MzgtNDUxYi1h
Nzk4LTdiNzZiMDk0MGI0Yi8wLzMxMzAzMzJlMzEzODM5MmUzNjMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzczNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ708MA0GCSqG
SIb3DQEBCwUAA4IBAQAFtepxLxQ1pfn9yz9zf7V5wucQzuvhP/2YFrmjrZZ4UgI2
14JbXKxRplAuvu8R6UgXH/szPm8Q0yfvhSETc+igqOcLPdtRsHr4loTu/MJo6IdU
Q/pI4DG9MStzjKm812uqFjNhELxVZsbPZYuigXX32tZvKHOoI31yj3fgp8u0Zk3H
PtjUcmhD8jwnkaU7ikdkm93m4Z0RMlTNaZVXT4AwUV+RPdYvbuPO8on2aXUczSyt
xX3+Snz3tB8AI3Rh/BdBnH3sAsbXMkS85mnmnizfFx3+aKAcK6JUDKHgjBqI8LsU
20NAAog1qGVrpn+XMrecrUNv6/5tQPWPFaJ1lg6t
-----END CERTIFICATE-----
Generated at Wed May 13 05:57:16 2026 by rpki-client