
$ rpki-client -vvf rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa
File: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (raw, json)
Hash identifier: b0p+aEnGITPNe6S1A1lEh2z0FMf0b3zvYLaeJ0qOUoQ=
Subject key identifier: 5C:F0:F5:5A:EF:2B:D8:07:D8:F3:95:A1:AC:88:60:73:15:D2:B5:AF
Certificate issuer: /CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E
Certificate serial: 08315048109A113EE0EA15D915517C5B0A87ED5E
Authority key identifier: 14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa
Signing time: Sun 03 May 2026 02:16:27 +0000
ROA not before: Sun 03 May 2026 02:11:27 +0000
ROA not after: Sun 02 May 2027 02:16:27 +0000
asID: 149881
IP address blocks: 103.189.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl
rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:31:50:48:10:9a:11:3e:e0:ea:15:d9:15:51:7c:5b:0a:87:ed:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E
Validity
Not Before: May 3 02:11:27 2026 GMT
Not After : May 2 02:16:27 2027 GMT
Subject: CN=5CF0F55AEF2BD807D8F395A1AC88607315D2B5AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:95:0b:b8:68:fb:45:11:3c:ea:d0:3b:c9:
ab:cb:02:60:10:9c:60:ce:41:a2:7f:2a:b6:1a:e6:
43:12:63:5b:38:54:f3:58:3c:a5:ad:9d:9c:ed:bb:
cd:04:28:f5:c5:5c:6d:b0:bf:b2:fb:f6:ab:92:a9:
27:83:4b:20:13:51:b1:b8:8a:bc:95:4c:ad:ad:65:
7c:c8:52:95:01:c1:f6:35:3b:db:43:4c:ec:65:2d:
8e:44:ee:1f:74:98:d5:c0:f6:9a:29:8a:96:08:81:
81:45:88:fe:3d:9a:b0:f6:dd:7b:bf:95:dc:50:63:
e6:b7:a4:db:57:26:6b:87:a9:50:52:fd:c4:fb:a7:
d9:b0:e2:94:7d:10:b0:f0:33:25:7a:d6:0b:29:a1:
2b:9a:0d:05:c3:7f:51:e1:fc:9e:ef:d7:5c:05:d9:
2c:5d:f4:bc:2c:d3:3b:94:d8:78:6e:ea:31:b9:6a:
ca:fc:e7:6e:1b:76:b1:9b:6e:89:3b:39:25:db:b7:
a0:09:d8:35:d0:fd:7b:ad:9c:b0:3d:ae:c9:26:c4:
0f:ee:7f:02:d8:b7:9a:90:ed:6d:25:fd:a7:85:a4:
86:c8:e1:4d:27:d4:a8:8f:52:f6:67:1a:33:6b:95:
71:10:2f:0d:78:30:bd:c3:24:b5:43:b4:49:f3:0e:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:F5:5A:EF:2B:D8:07:D8:F3:95:A1:AC:88:60:73:15:D2:B5:AF
X509v3 Authority Key Identifier:
keyid:14:8C:3A:87:20:C5:CD:8A:B7:FB:CE:7B:83:5B:9D:20:0B:CF:6B:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/148C3A8720C5CD8AB7FBCE7B835B9D200BCF6B6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.222.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2b:ab:00:20:4d:ed:0f:c0:56:3b:6c:09:fd:7b:9e:42:b6:
f3:39:43:e6:2b:8c:b4:9c:f8:24:b1:6e:84:2f:32:d3:95:2c:
0e:a1:44:e8:e2:0c:76:64:1d:82:eb:86:65:d9:80:3e:78:59:
cf:fc:bd:b9:08:6e:04:2d:bf:72:b9:b5:72:8c:33:08:ab:42:
05:77:5d:e9:73:8b:e8:e7:a9:aa:ef:e8:a4:56:20:4d:46:de:
13:35:77:3e:ba:a0:22:8f:fb:5d:ae:77:1b:77:4e:82:a9:04:
3c:75:f4:83:04:d9:6a:51:95:59:e9:51:33:77:3c:23:13:80:
de:3f:4e:5b:7d:a0:d0:34:16:30:37:79:04:5c:37:84:06:64:
a0:b7:d7:d3:e5:a7:ac:9d:57:48:c8:0d:b9:85:00:e2:8b:51:
b5:30:f8:ab:64:b8:17:3f:32:b4:4c:8f:1b:f6:a6:51:c2:5a:
85:76:76:9c:18:94:9c:bd:8d:74:39:cf:2a:e3:40:a3:a6:d9:
ad:b3:39:be:a3:b9:6f:12:a8:04:5f:62:58:9c:55:a5:81:1e:
9e:c7:ea:53:ca:24:2e:01:6c:3c:bf:dc:05:e4:70:8e:d3:09:
46:de:ea:a6:da:c3:f3:74:18:d5:f2:ee:32:d0:65:96:77:00:
7c:a1:51:5b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUCDFQSBCaET7g6hXZFVF8WwqH7V4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ4QzNBODcyMEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAw
QkNGNkI2RTAeFw0yNjA1MDMwMjExMjdaFw0yNzA1MDIwMjE2MjdaMDMxMTAvBgNV
BAMTKDVDRjBGNTVBRUYyQkQ4MDdEOEYzOTVBMUFDODg2MDczMTVEMkI1QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYzJULuGj7RRE86tA7yavLAmAQ
nGDOQaJ/KrYa5kMSY1s4VPNYPKWtnZztu80EKPXFXG2wv7L79quSqSeDSyATUbG4
iryVTK2tZXzIUpUBwfY1O9tDTOxlLY5E7h90mNXA9popipYIgYFFiP49mrD23Xu/
ldxQY+a3pNtXJmuHqVBS/cT7p9mw4pR9ELDwMyV61gspoSuaDQXDf1Hh/J7v11wF
2Sxd9Lws0zuU2Hhu6jG5asr8524bdrGbbok7OSXbt6AJ2DXQ/XutnLA9rskmxA/u
fwLYt5qQ7W0l/aeFpIbI4U0n1KiPUvZnGjNrlXEQLw14ML3DJLVDtEnzDuAPAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUXPD1Wu8r2AfY85WhrIhgcxXSta8wHwYDVR0j
BBgwFoAUFIw6hyDFzYq3+857g1udIAvPa24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTg4ZTNhMTctMWM5MS00NzkzLTgzYzQtMjExZDQyMTBhZWE4LzAvMTQ4QzNBODcy
MEM1Q0Q4QUI3RkJDRTdCODM1QjlEMjAwQkNGNkI2RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNDhDM0E4NzIwQzVDRDhBQjdGQkNFN0I4MzVCOUQyMDBCQ0Y2
QjZFLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE4OGUzYTE3LTFjOTEtNDc5My04
M2M0LTIxMWQ0MjEwYWVhOC8wLzMxMzAzMzJlMzEzODM5MmUzMjMyMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvd4wDQYJ
KoZIhvcNAQELBQADggEBAIUrqwAgTe0PwFY7bAn9e55CtvM5Q+YrjLSc+CSxboQv
MtOVLA6hROjiDHZkHYLrhmXZgD54Wc/8vbkIbgQtv3K5tXKMMwirQgV3Xelzi+jn
qarv6KRWIE1G3hM1dz66oCKP+12udxt3ToKpBDx19IME2WpRlVnpUTN3PCMTgN4/
Tlt9oNA0FjA3eQRcN4QGZKC319Plp6ydV0jIDbmFAOKLUbUw+KtkuBc/MrRMjxv2
plHCWoV2dpwYlJy9jXQ5zyrjQKOm2a2zOb6juW8SqARfYlicVaWBHp7H6lPKJC4B
bDy/3AXkcI7TCUbe6qbaw/N0GNXy7jLQZZZ3AHyhUVs=
-----END CERTIFICATE-----
Generated at Wed May 13 15:40:06 2026 by rpki-client