
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa
File: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier: JRz0AikjKf8Hdwl6cjt7jaFDxGE4945L1g49NYJWAso=
Subject key identifier: A0:F7:67:1E:3B:CA:FB:3B:6D:28:86:F1:D4:B2:E7:BC:0D:3C:B6:DE
Certificate issuer: /CN=2224681B90D457DB106C5BD5E5518DFF52C87334
Certificate serial: 2501724313FF64E887B88B5CA8AC4CAF64E38F2C
Authority key identifier: 22:24:68:1B:90:D4:57:DB:10:6C:5B:D5:E5:51:8D:FF:52:C8:73:34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2224681B90D457DB106C5BD5E5518DFF52C87334.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa
Signing time: Sun 03 May 2026 02:16:05 +0000
ROA not before: Sun 03 May 2026 02:11:05 +0000
ROA not after: Sun 02 May 2027 02:16:05 +0000
asID: 45325
IP address blocks: 103.169.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.crl
rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2224681B90D457DB106C5BD5E5518DFF52C87334.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:01:72:43:13:ff:64:e8:87:b8:8b:5c:a8:ac:4c:af:64:e3:8f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224681B90D457DB106C5BD5E5518DFF52C87334
Validity
Not Before: May 3 02:11:05 2026 GMT
Not After : May 2 02:16:05 2027 GMT
Subject: CN=A0F7671E3BCAFB3B6D2886F1D4B2E7BC0D3CB6DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:21:f2:49:ad:8b:9b:d1:a5:5f:51:10:ff:
59:ab:dc:e2:11:f4:2e:ce:27:71:2c:2e:84:f4:7d:
00:23:e7:7c:46:a5:8d:38:2c:9e:dd:df:56:57:b5:
a6:bb:92:93:1d:c9:53:1d:f2:6e:c8:8b:f4:24:d1:
70:b7:96:91:47:6d:ff:85:54:2a:03:8c:2c:40:9a:
3a:d1:82:a4:da:37:97:22:42:34:2f:92:bd:0e:24:
a3:be:19:17:14:f4:38:d8:ef:a6:3d:7a:ad:79:04:
4c:ce:cc:d3:ec:b4:0b:3f:84:58:10:84:0c:fe:d6:
e3:ff:a1:64:01:7f:75:d1:d3:72:08:e5:ed:dc:03:
a5:ba:0c:8b:24:c9:38:36:52:e5:60:30:f1:11:59:
20:fa:9e:e3:13:85:a0:b2:2f:a7:c7:3b:3e:2d:90:
0a:3b:cd:40:20:10:69:28:e2:48:79:d7:1e:4d:9d:
4c:5b:67:71:66:16:1a:1f:2a:9b:3e:29:4b:0b:20:
fa:a0:2d:05:a9:a9:49:ea:f6:97:66:bd:b0:80:46:
46:57:1e:77:39:48:44:9e:58:a1:d8:64:32:d3:f0:
d6:e1:dc:10:a9:be:d4:dd:00:c3:bc:eb:c6:d7:eb:
7d:ff:b8:57:63:1c:1f:15:1d:84:cd:7b:f7:3c:53:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F7:67:1E:3B:CA:FB:3B:6D:28:86:F1:D4:B2:E7:BC:0D:3C:B6:DE
X509v3 Authority Key Identifier:
keyid:22:24:68:1B:90:D4:57:DB:10:6C:5B:D5:E5:51:8D:FF:52:C8:73:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2224681B90D457DB106C5BD5E5518DFF52C87334.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:18:01:9e:81:44:06:20:ea:ee:4a:f7:13:ae:9f:68:85:1b:
4e:7e:49:05:a2:d5:45:37:61:99:5c:c7:55:09:e0:16:32:32:
a1:e0:d9:5f:7a:8a:7c:d4:fe:48:4e:3b:b2:98:6e:33:ab:4d:
8f:e5:df:5e:b4:2b:86:00:a3:26:6d:65:1a:b1:d6:96:82:75:
84:ea:22:c8:47:76:8c:d9:72:54:c5:dd:6a:09:88:9f:44:79:
9f:27:57:1c:1a:39:18:a7:6a:ba:12:13:74:31:66:c6:cc:e0:
54:ca:66:6e:68:79:e7:4f:f1:85:db:aa:a7:ef:09:f9:20:7c:
28:e0:53:65:5d:84:bf:e8:e4:31:d6:df:6c:6b:a6:18:41:ce:
35:e9:f0:ab:af:e4:7c:10:b8:5f:df:0e:70:95:02:ad:0d:23:
0d:f9:fc:bb:7a:c7:96:0a:c3:09:5b:a7:0b:60:8b:70:d7:23:
3c:7d:e8:aa:bb:15:2b:01:81:a5:c9:8a:e0:11:1e:46:8c:f6:
23:df:3c:76:f3:41:3f:e9:c1:3f:bf:f0:7f:42:53:4e:90:95:
e8:f5:06:d5:3a:1c:1e:dc:b2:a4:ee:bb:93:2f:66:66:f3:de:
90:34:9f:4c:85:7d:17:d5:0f:8b:b3:5a:2a:5c:89:7f:a2:91:
15:6d:3e:19
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJQFyQxP/ZOiHuItcqKxMr2TjjywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIyNDY4MUI5MEQ0NTdEQjEwNkM1QkQ1RTU1MThERkY1
MkM4NzMzNDAeFw0yNjA1MDMwMjExMDVaFw0yNzA1MDIwMjE2MDVaMDMxMTAvBgNV
BAMTKEEwRjc2NzFFM0JDQUZCM0I2RDI4ODZGMUQ0QjJFN0JDMEQzQ0I2REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYQiHySa2Lm9GlX1EQ/1mr3OIR
9C7OJ3EsLoT0fQAj53xGpY04LJ7d31ZXtaa7kpMdyVMd8m7Ii/Qk0XC3lpFHbf+F
VCoDjCxAmjrRgqTaN5ciQjQvkr0OJKO+GRcU9DjY76Y9eq15BEzOzNPstAs/hFgQ
hAz+1uP/oWQBf3XR03II5e3cA6W6DIskyTg2UuVgMPERWSD6nuMThaCyL6fHOz4t
kAo7zUAgEGko4kh51x5NnUxbZ3FmFhofKps+KUsLIPqgLQWpqUnq9pdmvbCARkZX
Hnc5SESeWKHYZDLT8Nbh3BCpvtTdAMO868bX633/uFdjHB8VHYTNe/c8Uym9AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUoPdnHjvK+zttKIbx1LLnvA08tt4wHwYDVR0j
BBgwFoAUIiRoG5DUV9sQbFvV5VGN/1LIczQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTdmNzM3ODAtMDkyNS00YjRhLWJjYTctYTFlN2VkM2ZmNDJhLzAvMjIyNDY4MUI5
MEQ0NTdEQjEwNkM1QkQ1RTU1MThERkY1MkM4NzMzNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yMjI0NjgxQjkwRDQ1N0RCMTA2QzVCRDVFNTUxOERGRjUyQzg3
MzM0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3ZjczNzgwLTA5MjUtNGI0YS1i
Y2E3LWExZTdlZDNmZjQyYS8wLzMxMzAzMzJlMzEzNjM5MmUzMjMwMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6nOMA0GCSqG
SIb3DQEBCwUAA4IBAQBvGAGegUQGIOruSvcTrp9ohRtOfkkFotVFN2GZXMdVCeAW
MjKh4Nlfeop81P5ITjuymG4zq02P5d9etCuGAKMmbWUasdaWgnWE6iLIR3aM2XJU
xd1qCYifRHmfJ1ccGjkYp2q6EhN0MWbGzOBUymZuaHnnT/GF26qn7wn5IHwo4FNl
XYS/6OQx1t9sa6YYQc416fCrr+R8ELhf3w5wlQKtDSMN+fy7eseWCsMJW6cLYItw
1yM8feiquxUrAYGlyYrgER5GjPYj3zx280E/6cE/v/B/QlNOkJXo9QbVOhwe3LKk
7ruTL2Zm896QNJ9MhX0X1Q+Ls1oqXIl/opEVbT4Z
-----END CERTIFICATE-----
Generated at Wed May 13 05:47:03 2026 by rpki-client