
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa
File: 3130332e342e3136372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: P6PmEIRs/1t0poM/Kr3TagSBOt31M209kGYVufX9qYQ=
Subject key identifier: 90:2F:A5:70:82:DF:DE:31:0C:0E:AF:1C:86:2C:BE:08:F0:65:01:80
Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial: 491DF3AE3F7734066375DEC3234325AD61113E88
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:15:19 +0000
ROA not before: Sun 03 May 2026 02:10:19 +0000
ROA not after: Sun 02 May 2027 02:15:19 +0000
asID: 58369
IP address blocks: 103.4.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:1d:f3:ae:3f:77:34:06:63:75:de:c3:23:43:25:ad:61:11:3e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Validity
Not Before: May 3 02:10:19 2026 GMT
Not After : May 2 02:15:19 2027 GMT
Subject: CN=902FA57082DFDE310C0EAF1C862CBE08F0650180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:60:b2:61:f4:0f:59:c2:4c:87:af:b5:0c:
7b:ba:36:49:5b:2f:b8:95:d4:37:69:47:86:9f:ac:
99:a8:7d:65:65:80:98:45:19:17:52:f7:06:7f:0e:
c5:39:e9:fb:be:2e:ad:89:8e:94:e0:48:9b:be:e8:
6a:5a:33:93:cf:ed:54:67:d7:9f:9a:4d:e5:19:ee:
28:fc:d6:fa:87:f2:e8:fa:c0:f4:f4:79:77:80:42:
90:b3:6d:ec:af:8e:10:fb:91:32:45:28:24:b0:9c:
ee:ca:c4:12:84:e3:2e:01:bc:4f:19:6e:6b:f9:0f:
7c:60:99:63:11:a6:55:07:be:f3:76:fd:32:3d:69:
82:f1:c2:a8:f9:38:d4:54:59:31:5b:5d:4d:ca:20:
6c:63:53:9b:65:c4:7b:50:43:ec:26:b9:2d:9e:9d:
b7:4b:53:b1:8c:46:33:55:2b:83:57:6f:de:bd:5c:
a8:6e:75:11:a3:16:94:36:50:53:f6:f5:15:17:13:
64:94:4e:90:f9:a7:52:5b:67:77:75:a8:52:6c:c1:
f5:d4:cc:b5:3c:0b:23:b4:f2:65:21:05:54:a0:1a:
fb:d4:6b:58:d0:cf:4d:9d:48:75:c0:44:09:c6:00:
56:f7:50:e0:15:31:cc:63:32:f4:9c:8b:66:2e:a2:
c0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2F:A5:70:82:DF:DE:31:0C:0E:AF:1C:86:2C:BE:08:F0:65:01:80
X509v3 Authority Key Identifier:
keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.4.167.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:bd:84:2a:ef:2b:23:d1:19:7b:5d:f5:d8:dc:24:12:b1:0a:
5d:a8:d3:ef:43:93:4a:82:0a:fa:f4:50:38:9f:d4:fa:65:34:
2b:e6:46:a1:0a:71:f8:79:1d:19:b0:d6:77:ce:56:7b:47:73:
c6:52:51:92:95:ec:2c:de:34:c7:3c:bc:20:fa:c7:eb:40:36:
d1:a2:1b:79:57:28:52:5f:49:b6:a8:fe:ef:72:a4:c7:de:a3:
eb:bd:f6:33:d0:c1:0d:2f:e3:d0:ed:0b:0e:f4:71:d2:5a:95:
1f:9f:ac:9a:d3:83:b3:7f:9e:2f:54:48:5c:a5:66:28:3f:58:
f2:bc:b2:31:af:3a:44:26:64:57:b7:61:3e:c3:38:24:12:04:
94:85:0f:8c:21:69:94:dd:65:6a:dd:25:ad:2b:7d:e3:7d:4b:
57:10:c5:a4:6e:38:30:66:1e:4e:21:97:2b:70:70:1b:d3:b9:
49:9e:2c:fc:c1:05:28:99:3a:37:86:f8:3c:0c:61:6b:67:aa:
c2:ab:1c:55:dd:5b:c7:ac:01:b4:38:e5:77:22:fc:05:bd:64:
bf:54:ec:5a:05:be:35:bc:5e:c9:80:b0:d0:71:ec:2a:19:47:
87:b1:eb:c2:36:d3:bf:fe:55:dc:f3:67:b9:7a:19:4c:22:4c:
38:14:80:92
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUSR3zrj93NAZjdd7DI0MlrWERPogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM1RDUyMzA5NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0
MkY5RDUzNzAeFw0yNjA1MDMwMjEwMTlaFw0yNzA1MDIwMjE1MTlaMDMxMTAvBgNV
BAMTKDkwMkZBNTcwODJERkRFMzEwQzBFQUYxQzg2MkNCRTA4RjA2NTAxODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6mCyYfQPWcJMh6+1DHu6Nklb
L7iV1DdpR4afrJmofWVlgJhFGRdS9wZ/DsU56fu+Lq2JjpTgSJu+6GpaM5PP7VRn
15+aTeUZ7ij81vqH8uj6wPT0eXeAQpCzbeyvjhD7kTJFKCSwnO7KxBKE4y4BvE8Z
bmv5D3xgmWMRplUHvvN2/TI9aYLxwqj5ONRUWTFbXU3KIGxjU5tlxHtQQ+wmuS2e
nbdLU7GMRjNVK4NXb969XKhudRGjFpQ2UFP29RUXE2SUTpD5p1JbZ3d1qFJswfXU
zLU8CyO08mUhBVSgGvvUa1jQz02dSHXARAnGAFb3UOAVMcxjMvSci2YuosBhAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUkC+lcILf3jEMDq8chiy+CPBlAYAwHwYDVR0j
BBgwFoAUTF1SMJcGH9Qg74mHLvVdfUL51TcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTZhODExODItN2NlYi00NjVjLWE1YjUtYTE0ZWM3MzliZjk5LzAvNEM1RDUyMzA5
NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0MkY5RDUzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QzVENTIzMDk3MDYxRkQ0MjBFRjg5ODcyRUY1NUQ3RDQyRjlE
NTM3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzAzMzJlMzQyZTMxMzYzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnBKcwDQYJKoZIhvcN
AQELBQADggEBANe9hCrvKyPRGXtd9djcJBKxCl2o0+9Dk0qCCvr0UDif1PplNCvm
RqEKcfh5HRmw1nfOVntHc8ZSUZKV7CzeNMc8vCD6x+tANtGiG3lXKFJfSbao/u9y
pMfeo+u99jPQwQ0v49DtCw70cdJalR+frJrTg7N/ni9USFylZig/WPK8sjGvOkQm
ZFe3YT7DOCQSBJSFD4whaZTdZWrdJa0rfeN9S1cQxaRuODBmHk4hlytwcBvTuUme
LPzBBSiZOjeG+DwMYWtnqsKrHFXdW8esAbQ45Xci/AW9ZL9U7FoFvjW8XsmAsNBx
7CoZR4ex68I207/+VdzzZ7l6GUwiTDgUgJI=
-----END CERTIFICATE-----
Generated at Wed May 13 04:51:04 2026 by rpki-client