
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa
File: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (raw, json)
Hash identifier: QtJsRt2bJkV+pUkYXyZvp3UviU6T+E4EYmhQxwxw1j4=
Subject key identifier: 4A:70:D2:F1:21:D3:D9:13:DC:6C:35:BD:63:72:75:62:DF:6A:9C:17
Certificate issuer: /CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Certificate serial: 674CE27CBE52599E8E0318E92B63740F497A30F6
Authority key identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa
Signing time: Sun 03 May 2026 02:18:15 +0000
ROA not before: Sun 03 May 2026 02:13:15 +0000
ROA not after: Sun 02 May 2027 02:18:15 +0000
asID: 58500
IP address blocks: 103.101.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4c:e2:7c:be:52:59:9e:8e:03:18:e9:2b:63:74:0f:49:7a:30:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Validity
Not Before: May 3 02:13:15 2026 GMT
Not After : May 2 02:18:15 2027 GMT
Subject: CN=4A70D2F121D3D913DC6C35BD63727562DF6A9C17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:5a:49:f5:53:d9:2c:54:b4:18:c7:a1:19:
30:a4:d0:d4:88:af:82:f8:62:56:2c:fd:25:1a:f1:
92:d1:a4:02:d2:a4:62:43:a8:9d:0a:20:bf:62:86:
51:ad:87:01:28:a3:23:3a:34:9b:f2:dd:92:a6:a1:
73:63:7e:1a:57:92:89:60:0a:c8:07:f9:6d:0b:4a:
3f:c7:12:8f:04:94:b2:20:9b:65:21:b6:c7:40:ca:
50:73:b5:fc:c8:15:43:a5:70:1a:20:a6:d3:9f:36:
eb:3b:58:ae:fc:21:2f:27:fb:7b:91:24:c2:cc:9b:
1a:b9:35:d5:8b:b5:2a:a4:5f:18:3b:e9:ce:86:eb:
a2:a9:c3:11:48:75:36:e8:da:64:6e:8c:4d:5d:ff:
11:66:11:11:75:4f:99:fd:1d:f3:58:00:a4:38:b3:
e2:f5:ab:22:94:a6:b6:12:76:4e:7b:d6:a6:a8:a0:
c9:f2:e6:f8:fd:4c:38:f8:cc:a3:4b:a9:33:29:bb:
cf:73:28:e4:a9:2b:ac:1a:bd:45:52:50:e1:7e:13:
f6:74:2f:53:78:b2:11:53:33:6d:e1:e9:b2:39:f9:
e7:dc:38:bc:63:3d:56:6a:ea:47:fc:29:9e:e4:82:
80:78:03:14:94:83:73:3b:12:83:dd:e1:35:33:7a:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:70:D2:F1:21:D3:D9:13:DC:6C:35:BD:63:72:75:62:DF:6A:9C:17
X509v3 Authority Key Identifier:
keyid:66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.101.136.0/23
Signature Algorithm: sha256WithRSAEncryption
22:f8:ae:60:12:6d:35:43:0a:cb:51:d6:3a:c8:85:f9:73:9a:
ea:0f:15:4d:1a:63:c7:00:23:31:16:13:3c:6a:ef:4a:66:4c:
dc:67:2a:37:8b:08:5b:7e:ca:72:1b:60:e6:6e:81:55:a8:4b:
57:bd:23:e7:1a:37:53:86:b1:86:fd:0e:55:a6:e2:15:68:4e:
4d:01:37:e7:9a:02:39:1d:a3:cb:93:d4:89:49:56:5a:91:db:
77:0d:2c:6d:fa:03:14:0c:ed:14:49:2e:97:27:95:fa:c1:5a:
47:90:fd:05:86:a2:dd:74:dd:4c:3e:c3:4b:9d:fd:1e:4e:ab:
b3:f9:cc:ff:ab:ea:ae:17:04:d7:86:97:26:ac:81:41:4e:d8:
66:08:1a:f0:67:50:d7:dc:25:b7:dc:aa:e4:95:c9:ec:4d:45:
f2:c5:a2:93:a9:f8:c4:65:0d:76:77:0b:06:ec:14:55:12:84:
37:d7:eb:56:01:89:7b:86:dd:f4:35:95:b2:a6:a5:c6:e5:1d:
51:78:3f:df:e8:45:74:4c:a8:17:a4:8f:ac:5d:86:23:1d:25:
a5:87:dc:6a:69:de:56:a3:03:2a:9f:84:65:e9:9c:09:b8:6b:
a1:e4:61:66:1f:b3:6e:be:8b:a6:06:fa:c7:7b:e2:81:90:8c:
44:c9:f8:39
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZ0zifL5SWZ6OAxjpK2N0D0l6MPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY4MkNGRjdGODBFNDU4NzEzM0E0RkZFRkMxNjNCMTQx
Nzc0MURDNjAeFw0yNjA1MDMwMjEzMTVaFw0yNzA1MDIwMjE4MTVaMDMxMTAvBgNV
BAMTKDRBNzBEMkYxMjFEM0Q5MTNEQzZDMzVCRDYzNzI3NTYyREY2QTlDMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXy1pJ9VPZLFS0GMehGTCk0NSI
r4L4YlYs/SUa8ZLRpALSpGJDqJ0KIL9ihlGthwEooyM6NJvy3ZKmoXNjfhpXkolg
CsgH+W0LSj/HEo8ElLIgm2UhtsdAylBztfzIFUOlcBogptOfNus7WK78IS8n+3uR
JMLMmxq5NdWLtSqkXxg76c6G66KpwxFIdTbo2mRujE1d/xFmERF1T5n9HfNYAKQ4
s+L1qyKUprYSdk571qaooMny5vj9TDj4zKNLqTMpu89zKOSpK6wavUVSUOF+E/Z0
L1N4shFTM23h6bI5+efcOLxjPVZq6kf8KZ7kgoB4AxSUg3M7EoPd4TUzeojPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUSnDS8SHT2RPcbDW9Y3J1Yt9qnBcwHwYDVR0j
BBgwFoAUZoLP9/gORYcTOk/+/BY7FBd0HcYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWU2YTdlNDYtYjZhZC00YTdkLWI5MzAtMWFiMGJmMDJkZDVkLzAvNjY4MkNGRjdG
ODBFNDU4NzEzM0E0RkZFRkMxNjNCMTQxNzc0MURDNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NjgyQ0ZGN0Y4MEU0NTg3MTMzQTRGRkVGQzE2M0IxNDE3NzQx
REM2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFlNmE3ZTQ2LWI2YWQtNGE3ZC1i
OTMwLTFhYjBiZjAyZGQ1ZC8wLzMxMzAzMzJlMzEzMDMxMmUzMTMzMzYyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzNTM4MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ2WIMA0GCSqG
SIb3DQEBCwUAA4IBAQAi+K5gEm01QwrLUdY6yIX5c5rqDxVNGmPHACMxFhM8au9K
ZkzcZyo3iwhbfspyG2DmboFVqEtXvSPnGjdThrGG/Q5VpuIVaE5NATfnmgI5HaPL
k9SJSVZakdt3DSxt+gMUDO0USS6XJ5X6wVpHkP0FhqLddN1MPsNLnf0eTquz+cz/
q+quFwTXhpcmrIFBTthmCBrwZ1DX3CW33KrklcnsTUXyxaKTqfjEZQ12dwsG7BRV
EoQ31+tWAYl7ht30NZWypqXG5R1ReD/f6EV0TKgXpI+sXYYjHSWlh9xqad5WowMq
n4Rl6ZwJuGuh5GFmH7NuvoumBvrHe+KBkIxEyfg5
-----END CERTIFICATE-----
Generated at Wed May 13 02:19:23 2026 by rpki-client