
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa
File: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (raw, json)
Hash identifier: y7jgS/ZISqQ0Ejz5jszYlUpeJRIijdmrHPSpWEnYBQg=
Subject key identifier: 8F:66:5D:D5:1D:D8:30:20:DB:6E:6B:92:82:DD:61:FF:12:FD:BE:62
Certificate issuer: /CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A
Certificate serial: 3DB00079BAF68653A3B44312BC76110A751C27C2
Authority key identifier: 9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa
Signing time: Sun 03 May 2026 02:19:25 +0000
ROA not before: Sun 03 May 2026 02:14:25 +0000
ROA not after: Sun 02 May 2027 02:19:25 +0000
asID: 150234
IP address blocks: 103.19.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl
rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b0:00:79:ba:f6:86:53:a3:b4:43:12:bc:76:11:0a:75:1c:27:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FA880056DCF9ADB7A70D461FF83086D8FE8897A
Validity
Not Before: May 3 02:14:25 2026 GMT
Not After : May 2 02:19:25 2027 GMT
Subject: CN=8F665DD51DD83020DB6E6B9282DD61FF12FDBE62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:65:64:c4:c7:55:60:4b:ef:86:48:2e:f3:90:
bb:cd:1c:2b:ef:dd:68:94:0d:7f:d1:e5:50:20:fa:
34:81:49:7c:48:f8:40:12:72:d4:f3:c8:5d:b8:aa:
2a:55:4d:75:ff:c5:a9:cd:5f:ac:95:70:a7:d7:f9:
da:6f:21:fc:d6:b9:9c:3b:3e:6a:7b:06:fe:22:cc:
c7:25:31:25:dc:9e:f9:ec:a1:63:23:a6:c0:bd:15:
60:c2:ec:bc:64:c7:09:70:f6:0f:f5:4f:9b:9f:77:
9a:83:3c:3d:9f:e2:e6:69:25:7e:ea:85:b4:86:7d:
1d:53:a1:2f:16:7a:45:f1:fe:ff:7e:c1:f0:6b:f3:
dd:e5:80:a3:e7:5a:4e:0c:9c:f1:fb:3f:6e:42:3e:
d4:52:d9:dc:be:23:48:87:67:5e:a9:fa:26:f4:a8:
6a:a0:c9:8c:45:67:52:79:2a:fd:3b:fc:94:e1:62:
91:6f:ac:66:80:6a:c6:28:37:ff:24:5d:9a:ee:2d:
66:d3:f4:a8:73:7e:5a:41:51:7f:79:31:66:51:9d:
46:c5:d4:3f:05:5a:0d:59:5b:19:cb:49:66:d5:76:
a9:04:f2:80:e8:2a:91:19:17:78:aa:d9:a7:6f:cd:
0d:12:e9:d2:53:00:53:a1:46:59:fc:7d:12:b6:13:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:66:5D:D5:1D:D8:30:20:DB:6E:6B:92:82:DD:61:FF:12:FD:BE:62
X509v3 Authority Key Identifier:
keyid:9F:A8:80:05:6D:CF:9A:DB:7A:70:D4:61:FF:83:08:6D:8F:E8:89:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA880056DCF9ADB7A70D461FF83086D8FE8897A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.19.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:59:e2:4f:57:65:b0:f9:b0:ce:c3:a6:08:7d:75:37:b7:0e:
c3:67:82:bc:7d:5c:f0:3b:80:2d:bd:3c:50:9a:de:09:6e:ac:
d8:cd:7d:ad:8a:d8:2a:97:bd:ad:19:4a:c6:27:b5:1f:3d:65:
2f:b6:41:56:6b:fb:66:53:b0:94:aa:dd:fc:ea:1e:7a:82:6c:
d7:bf:83:7d:d4:32:e5:03:47:27:db:70:80:0e:65:91:a3:3c:
b5:38:72:b5:fd:17:85:12:ed:2d:94:94:8e:6f:66:51:03:37:
83:d7:45:9e:7f:ab:2a:04:55:4b:4f:7c:cf:df:fb:0d:8b:32:
64:25:bd:81:83:5c:99:8a:2f:2e:ed:76:c2:d0:ac:87:03:33:
ec:d6:06:80:d4:4c:a0:49:d1:33:de:b4:85:f2:bc:57:b6:65:
d1:53:fb:c5:34:66:a8:6a:2c:3e:29:05:7a:bb:be:1c:66:98:
be:9e:81:be:84:7f:3a:b5:4c:30:9b:5d:20:3e:71:5b:30:19:
6a:08:76:8e:05:5f:82:19:a3:43:dc:22:e8:3e:b0:a5:8c:c6:
7e:ea:91:48:ac:e4:b4:38:8c:a6:73:70:a0:a7:fb:44:d8:4b:
6a:60:37:98:c1:f3:e6:b3:16:e6:4f:8a:52:46:7a:77:b5:0c:
79:68:f9:f7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPbAAebr2hlOjtEMSvHYRCnUcJ8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZBODgwMDU2RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4
RkU4ODk3QTAeFw0yNjA1MDMwMjE0MjVaFw0yNzA1MDIwMjE5MjVaMDMxMTAvBgNV
BAMTKDhGNjY1REQ1MUREODMwMjBEQjZFNkI5MjgyREQ2MUZGMTJGREJFNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrZWTEx1VgS++GSC7zkLvNHCvv
3WiUDX/R5VAg+jSBSXxI+EASctTzyF24qipVTXX/xanNX6yVcKfX+dpvIfzWuZw7
Pmp7Bv4izMclMSXcnvnsoWMjpsC9FWDC7Lxkxwlw9g/1T5ufd5qDPD2f4uZpJX7q
hbSGfR1ToS8WekXx/v9+wfBr893lgKPnWk4MnPH7P25CPtRS2dy+I0iHZ16p+ib0
qGqgyYxFZ1J5Kv07/JThYpFvrGaAasYoN/8kXZruLWbT9KhzflpBUX95MWZRnUbF
1D8FWg1ZWxnLSWbVdqkE8oDoKpEZF3iq2advzQ0S6dJTAFOhRln8fRK2E25hAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUj2Zd1R3YMCDbbmuSgt1h/xL9vmIwHwYDVR0j
BBgwFoAUn6iABW3Pmtt6cNRh/4MIbY/oiXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjE0NDI1MmItZDMwZS00YmRjLTgzMmYtYjM4YjA1YzdhMDM1LzAvOUZBODgwMDU2
RENGOUFEQjdBNzBENDYxRkY4MzA4NkQ4RkU4ODk3QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85RkE4ODAwNTZEQ0Y5QURCN0E3MEQ0NjFGRjgzMDg2RDhGRTg4
OTdBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIxNDQyNTJiLWQzMGUtNGJkYy04
MzJmLWIzOGIwNWM3YTAzNS8wLzMxMzAzMzJlMzEzOTJlMzEzNTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxOdMA0GCSqG
SIb3DQEBCwUAA4IBAQC4WeJPV2Ww+bDOw6YIfXU3tw7DZ4K8fVzwO4AtvTxQmt4J
bqzYzX2titgql72tGUrGJ7UfPWUvtkFWa/tmU7CUqt386h56gmzXv4N91DLlA0cn
23CADmWRozy1OHK1/ReFEu0tlJSOb2ZRAzeD10Wef6sqBFVLT3zP3/sNizJkJb2B
g1yZii8u7XbC0KyHAzPs1gaA1EygSdEz3rSF8rxXtmXRU/vFNGaoaiw+KQV6u74c
Zpi+noG+hH86tUwwm10gPnFbMBlqCHaOBV+CGaND3CLoPrCljMZ+6pFIrOS0OIym
c3Cgp/tE2EtqYDeYwfPmsxbmT4pSRnp3tQx5aPn3
-----END CERTIFICATE-----
Generated at Wed May 13 04:47:59 2026 by rpki-client