
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa
File: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (raw, json)
Hash identifier: eldG4bxXfHfHBZuQpQd9deqvI4oVqZUOKXxgD57litE=
Subject key identifier: 13:D7:54:EF:67:13:C6:02:9F:1D:56:79:65:71:6E:3A:C3:F2:2F:2A
Certificate issuer: /CN=B486D413919D8F20144DB8254040D1237E34B8AA
Certificate serial: 27C3FFF6133E33D5C4109BE5A8E606A77D6FA668
Authority key identifier: B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa
Signing time: Sun 03 May 2026 02:19:18 +0000
ROA not before: Sun 03 May 2026 02:14:18 +0000
ROA not after: Sun 02 May 2027 02:19:18 +0000
asID: 141591
IP address blocks: 103.159.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl
rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c3:ff:f6:13:3e:33:d5:c4:10:9b:e5:a8:e6:06:a7:7d:6f:a6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B486D413919D8F20144DB8254040D1237E34B8AA
Validity
Not Before: May 3 02:14:18 2026 GMT
Not After : May 2 02:19:18 2027 GMT
Subject: CN=13D754EF6713C6029F1D567965716E3AC3F22F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:81:d0:85:f1:05:71:dc:d0:f5:54:41:a1:
52:13:7f:ca:c4:86:c2:84:68:ee:7c:69:fb:f0:5d:
0c:f6:b3:d1:e1:0c:88:46:4b:72:e4:a2:6c:19:8a:
27:11:f0:c1:e0:e1:4c:af:36:d7:ef:c5:bf:53:af:
fc:d6:11:f9:02:b0:c5:e4:1e:cb:7c:27:2e:55:c4:
41:00:73:1a:16:e8:73:43:6e:f7:54:f6:d1:1f:31:
b8:76:0a:78:5c:f8:45:2a:e3:aa:13:29:04:29:c9:
72:49:58:c4:fc:7b:d4:e7:f0:11:2e:f8:0d:55:1c:
d4:29:e5:1b:e5:66:32:5b:c0:9e:2a:1d:e3:d9:d1:
9a:30:db:c3:fe:36:5e:a1:e5:9d:e6:6e:60:43:22:
fa:5c:bc:17:8b:ee:c0:6b:65:36:4b:f6:dd:8c:23:
04:c2:cc:89:30:be:70:21:5f:6e:92:5e:ef:0a:c9:
30:b8:57:33:24:f8:15:40:c0:04:0f:18:ec:48:ee:
b3:8f:41:05:9e:e2:04:fb:b5:9e:0f:32:b2:70:96:
34:75:5d:1d:12:b8:e6:86:ac:a8:d6:7a:d3:57:ff:
45:21:39:e6:f0:8a:5c:9b:8c:35:43:9d:60:0f:06:
43:d9:f1:8d:15:a3:10:d2:cd:75:ab:27:8e:38:10:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D7:54:EF:67:13:C6:02:9F:1D:56:79:65:71:6E:3A:C3:F2:2F:2A
X509v3 Authority Key Identifier:
keyid:B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fe:5c:38:e1:07:c7:a8:cc:68:bc:93:36:b7:cf:d0:d3:dc:
78:78:3c:77:92:47:51:20:21:4b:6e:c6:f5:f8:a3:a6:16:2a:
8c:84:7d:bf:02:48:f2:b7:9b:7d:12:c7:6f:74:4f:99:21:be:
eb:dc:07:93:3e:26:42:9a:1f:eb:19:16:a1:75:28:bb:2b:2a:
41:75:6d:2b:2f:e2:d4:26:8d:cf:7b:da:07:1f:9c:09:df:ec:
a8:50:9b:b7:15:af:43:5e:69:df:f1:33:bb:f8:d8:01:04:c5:
fc:a8:ad:2f:2c:f3:3a:11:f3:8e:2a:2b:4b:b1:64:92:f5:2d:
af:9a:99:b2:2f:0f:fa:15:c5:0e:68:d3:8d:c7:9b:51:6e:7e:
30:cf:be:50:f7:c9:6b:11:11:47:cb:04:be:84:8b:45:b3:0e:
cf:fe:c4:41:84:f9:44:37:e8:2c:92:7b:41:4c:1a:c8:5e:63:
d5:c6:dc:b4:86:df:1d:e3:e2:d9:0b:14:ba:f6:70:4f:a6:8d:
ca:95:4b:5b:4d:7b:d2:55:68:b0:4b:81:84:60:99:d4:a0:10:
48:43:d6:37:34:50:87:47:fd:3a:15:b2:47:bf:85:5c:be:9b:
cf:dd:c9:c7:3e:fd:d5:de:7d:d3:b8:91:ed:07:58:3e:41:c9:
9a:47:8f:8f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJ8P/9hM+M9XEEJvlqOYGp31vpmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3
RTM0QjhBQTAeFw0yNjA1MDMwMjE0MThaFw0yNzA1MDIwMjE5MThaMDMxMTAvBgNV
BAMTKDEzRDc1NEVGNjcxM0M2MDI5RjFENTY3OTY1NzE2RTNBQzNGMjJGMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CIHQhfEFcdzQ9VRBoVITf8rE
hsKEaO58afvwXQz2s9HhDIhGS3LkomwZiicR8MHg4UyvNtfvxb9Tr/zWEfkCsMXk
Hst8Jy5VxEEAcxoW6HNDbvdU9tEfMbh2Cnhc+EUq46oTKQQpyXJJWMT8e9Tn8BEu
+A1VHNQp5RvlZjJbwJ4qHePZ0Zow28P+Nl6h5Z3mbmBDIvpcvBeL7sBrZTZL9t2M
IwTCzIkwvnAhX26SXu8KyTC4VzMk+BVAwAQPGOxI7rOPQQWe4gT7tZ4PMrJwljR1
XR0SuOaGrKjWetNX/0UhOebwilybjDVDnWAPBkPZ8Y0VoxDSzXWrJ444EIRfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUE9dU72cTxgKfHVZ5ZXFuOsPyLyowHwYDVR0j
BBgwFoAUtIbUE5GdjyAUTbglQEDRI340uKowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjBjMTcxZjQtYmQxMS00OGVkLTg3ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5
MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3RTM0QjhBQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNDg2RDQxMzkxOUQ4RjIwMTQ0REI4MjU0MDQwRDEyMzdFMzRC
OEFBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwYzE3MWY0LWJkMTEtNDhlZC04
N2YwLTI3ZWExMjA5MDY0Zi8wLzMxMzAzMzJlMzEzNTM5MmUzNjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzUzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ58+MA0GCSqG
SIb3DQEBCwUAA4IBAQAv/lw44QfHqMxovJM2t8/Q09x4eDx3kkdRICFLbsb1+KOm
FiqMhH2/Akjyt5t9EsdvdE+ZIb7r3AeTPiZCmh/rGRahdSi7KypBdW0rL+LUJo3P
e9oHH5wJ3+yoUJu3Fa9DXmnf8TO7+NgBBMX8qK0vLPM6EfOOKitLsWSS9S2vmpmy
Lw/6FcUOaNONx5tRbn4wz75Q98lrERFHywS+hItFsw7P/sRBhPlEN+gskntBTBrI
XmPVxty0ht8d4+LZCxS69nBPpo3KlUtbTXvSVWiwS4GEYJnUoBBIQ9Y3NFCHR/06
FbJHv4VcvpvP3cnHPv3V3n3TuJHtB1g+QcmaR4+P
-----END CERTIFICATE-----
Generated at Wed May 13 09:34:23 2026 by rpki-client