
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e382e3233382e302f32342d3234203d3e20313332363334.roa
File: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (raw, json)
Hash identifier: PR4TqG8Gt/NDoejWkXR5KiYWrPCc3WE35fh/Jxbvano=
Subject key identifier: 92:40:4C:41:90:3E:65:7C:C9:20:19:1D:12:73:83:A0:16:0F:C9:DE
Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57
Certificate serial: 4CB5A9F23C72119A371D6B0C56C4B68C54E22310
Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e382e3233382e302f32342d3234203d3e20313332363334.roa
Signing time: Sun 03 May 2026 02:19:22 +0000
ROA not before: Sun 03 May 2026 02:14:22 +0000
ROA not after: Sun 02 May 2027 02:19:22 +0000
asID: 132634
IP address blocks: 103.8.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b5:a9:f2:3c:72:11:9a:37:1d:6b:0c:56:c4:b6:8c:54:e2:23:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57
Validity
Not Before: May 3 02:14:22 2026 GMT
Not After : May 2 02:19:22 2027 GMT
Subject: CN=92404C41903E657CC920191D127383A0160FC9DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:19:ff:55:db:da:7a:72:9c:34:45:ba:3e:
0b:49:45:26:dd:2e:4c:1b:0e:52:40:f4:dd:9d:1a:
e8:79:44:ad:83:28:e5:8f:d2:a9:18:ec:df:f2:18:
b6:eb:b8:b1:03:37:38:36:9b:7c:9a:e6:40:68:8c:
a8:0f:a6:0f:5a:61:f7:4c:7d:58:df:a0:36:99:c2:
f2:fd:a4:6b:a5:f6:88:27:a0:7a:02:83:90:fc:25:
49:8f:d3:79:f0:6b:1e:b3:25:2a:97:22:ee:09:54:
42:7c:99:d5:5e:31:0c:f2:b9:3e:01:ad:81:2b:e2:
b4:b7:4a:55:cf:8a:63:2c:71:f3:0f:3d:89:17:92:
0c:f7:18:dd:9a:a5:67:37:d6:f2:b9:a5:94:3e:59:
94:71:e2:ff:61:3f:e6:0e:c9:0f:4f:99:23:47:66:
78:10:8b:7d:b8:24:0a:f1:f7:61:82:3c:ff:03:70:
c7:e2:df:0f:55:00:5c:cb:7d:8a:23:5a:63:40:70:
3b:59:1f:7b:2d:9f:40:58:2d:75:32:57:4c:cf:5c:
84:f5:47:a1:aa:f2:95:91:a4:93:77:36:67:26:9e:
fc:c5:0a:17:fc:3f:4c:09:ef:50:27:ea:9e:67:83:
12:14:1e:63:ab:5c:23:3b:5c:de:75:70:a8:62:f4:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:40:4C:41:90:3E:65:7C:C9:20:19:1D:12:73:83:A0:16:0F:C9:DE
X509v3 Authority Key Identifier:
keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e382e3233382e302f32342d3234203d3e20313332363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:19:04:b6:bb:2d:ea:fb:38:a0:39:a7:34:54:fb:83:06:00:
54:b3:9a:a3:4f:6d:8f:38:3d:d9:37:23:79:d3:6f:d9:af:f1:
bb:3a:80:15:48:35:64:4f:4f:25:f1:06:cb:b3:ee:7c:d6:73:
53:e7:70:11:eb:3a:29:d8:6d:4d:b7:08:eb:37:48:74:a8:c9:
93:84:3c:03:6d:3a:a2:14:a7:55:4e:9c:62:f2:6f:df:c8:3d:
f4:eb:71:e4:86:5e:29:51:1a:3b:70:95:c7:d9:1c:5a:6f:93:
0b:6c:1f:96:35:55:26:4d:1e:60:a7:56:e7:3d:f7:22:f2:f3:
c7:8a:2b:f1:01:65:73:69:77:bd:02:84:7d:03:44:34:40:71:
5c:98:c0:89:1d:c3:87:f6:e7:88:c8:2f:f1:ba:5e:45:42:46:
bc:0e:74:6f:13:b6:cb:ad:97:e4:c6:bf:03:a6:6d:9e:e2:4d:
ad:20:58:76:09:74:ed:b1:34:4d:c1:4b:a4:d7:cb:6e:da:b8:
d2:d4:04:a3:99:a6:e1:13:6c:78:38:ff:28:b9:e9:c9:6a:dc:
fa:69:9d:21:9c:58:6d:dd:de:4c:cd:34:18:e6:4f:cc:f0:6c:
56:d0:2d:64:66:b0:f7:08:06:77:a1:fa:6b:f0:ba:e7:be:cf:
ec:34:54:28
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTLWp8jxyEZo3HWsMVsS2jFTiIxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0
RTk5REM1NzAeFw0yNjA1MDMwMjE0MjJaFw0yNzA1MDIwMjE5MjJaMDMxMTAvBgNV
BAMTKDkyNDA0QzQxOTAzRTY1N0NDOTIwMTkxRDEyNzM4M0EwMTYwRkM5REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8Bn/VdvaenKcNEW6PgtJRSbd
LkwbDlJA9N2dGuh5RK2DKOWP0qkY7N/yGLbruLEDNzg2m3ya5kBojKgPpg9aYfdM
fVjfoDaZwvL9pGul9ognoHoCg5D8JUmP03nwax6zJSqXIu4JVEJ8mdVeMQzyuT4B
rYEr4rS3SlXPimMscfMPPYkXkgz3GN2apWc31vK5pZQ+WZRx4v9hP+YOyQ9PmSNH
ZngQi324JArx92GCPP8DcMfi3w9VAFzLfYojWmNAcDtZH3stn0BYLXUyV0zPXIT1
R6Gq8pWRpJN3NmcmnvzFChf8P0wJ71An6p5ngxIUHmOrXCM7XN51cKhi9JblAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUkkBMQZA+ZXzJIBkdEnODoBYPyd4wHwYDVR0j
BBgwFoAUQSlllkpOEr1ZvfYCoFTzOU6Z3FcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjBmN2JlMDYtOTY3Mi00NjQxLTk3YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0
QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0RTk5REM1Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MTI5NjU5NjRBNEUxMkJENTlCREY2MDJBMDU0RjMzOTRFOTlE
QzU3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwZjdiZTA2LTk2NzItNDY0MS05
N2JkLTliZmRmOTU1ZGUxNy8wLzMxMzAzMzJlMzgyZTMyMzMzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcI7jANBgkqhkiG
9w0BAQsFAAOCAQEAbhkEtrst6vs4oDmnNFT7gwYAVLOao09tjzg92TcjedNv2a/x
uzqAFUg1ZE9PJfEGy7PufNZzU+dwEes6KdhtTbcI6zdIdKjJk4Q8A206ohSnVU6c
YvJv38g99Otx5IZeKVEaO3CVx9kcWm+TC2wfljVVJk0eYKdW5z33IvLzx4or8QFl
c2l3vQKEfQNENEBxXJjAiR3Dh/bniMgv8bpeRUJGvA50bxO2y62X5Ma/A6ZtnuJN
rSBYdgl07bE0TcFLpNfLbtq40tQEo5mm4RNseDj/KLnpyWrc+mmdIZxYbd3eTM00
GOZPzPBsVtAtZGaw9wgGd6H6a/C6577P7DRUKA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:49:57 2026 by rpki-client