
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa
File: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (raw, json)
Hash identifier: P5ZIOPTsddeJTRgtwDMGa8DbnU/VOaQA2C+qkfXBoKA=
Subject key identifier: 99:27:18:E9:93:34:61:9A:52:D8:DD:D0:30:24:2B:79:26:5A:4F:A3
Certificate issuer: /CN=369A5CE4785D27442508404CAC16E70E3DFBCE22
Certificate serial: 6F34AD82371257112B9CC710F66E965750352C79
Authority key identifier: 36:9A:5C:E4:78:5D:27:44:25:08:40:4C:AC:16:E7:0E:3D:FB:CE:22
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa
Signing time: Sun 03 May 2026 02:20:33 +0000
ROA not before: Sun 03 May 2026 02:15:33 +0000
ROA not after: Sun 02 May 2027 02:20:33 +0000
asID: 138070
IP address blocks: 103.123.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.crl
rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:34:ad:82:37:12:57:11:2b:9c:c7:10:f6:6e:96:57:50:35:2c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369A5CE4785D27442508404CAC16E70E3DFBCE22
Validity
Not Before: May 3 02:15:33 2026 GMT
Not After : May 2 02:20:33 2027 GMT
Subject: CN=992718E99334619A52D8DDD030242B79265A4FA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:05:f3:51:68:73:65:70:a4:ca:47:aa:26:
ae:fb:83:0c:44:16:de:f6:b9:23:dd:37:68:93:1b:
21:70:41:da:92:39:e8:89:ca:06:92:cd:9d:93:53:
4c:d8:5f:f8:9b:b0:97:b6:7a:f7:d8:bc:39:2c:6f:
9a:dc:ec:34:af:71:63:f6:c0:3d:b5:98:eb:7a:b3:
dc:98:0d:77:e0:6d:78:3a:1d:6c:8b:d4:59:19:69:
7f:bb:fd:6c:eb:0a:5b:eb:57:97:7a:20:db:c7:f2:
cd:17:c3:1b:8e:20:ee:ef:6f:58:c5:d6:dd:9e:12:
56:8b:db:49:97:4e:79:97:c4:08:72:6c:5a:2c:75:
ab:62:5f:3d:1c:0d:10:b5:3a:69:ea:50:9f:17:64:
bb:8f:99:1e:62:41:ca:61:ba:a5:53:f8:c9:f1:b5:
01:d4:ab:bd:04:34:4b:87:03:c0:b2:92:1a:d4:e6:
09:8b:c5:eb:ef:a6:b7:43:84:a9:2c:ab:07:6c:7e:
2f:24:f1:e8:4d:1c:2b:03:ac:08:4f:4b:c7:21:91:
0b:99:5a:a9:35:56:c5:ab:05:ab:e4:b7:57:11:05:
1e:3c:41:fe:36:dd:d4:4b:65:71:98:12:e8:17:a3:
0c:73:6b:e6:02:b9:8d:6b:ae:2c:68:fa:33:2a:87:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:27:18:E9:93:34:61:9A:52:D8:DD:D0:30:24:2B:79:26:5A:4F:A3
X509v3 Authority Key Identifier:
keyid:36:9A:5C:E4:78:5D:27:44:25:08:40:4C:AC:16:E7:0E:3D:FB:CE:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/369A5CE4785D27442508404CAC16E70E3DFBCE22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/369A5CE4785D27442508404CAC16E70E3DFBCE22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.121.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0c:e5:c6:d8:e9:bf:0f:73:4a:e1:d1:4c:5d:ea:e9:93:99:
68:3b:80:28:b7:9c:0c:ac:ee:ef:1d:2e:2f:e3:b8:88:a1:94:
0e:18:ce:34:01:14:47:89:32:5f:9c:1c:0d:bc:f9:45:ac:f2:
05:f7:dd:ec:ea:d0:d6:68:2a:39:a2:ff:fa:9f:05:a5:7c:95:
dd:e3:77:bf:b5:60:58:62:0d:7f:f1:20:02:7a:e7:3f:fc:c9:
be:cf:d7:e3:5a:dd:f2:1f:f8:94:0c:ad:4c:06:47:13:02:89:
c4:4d:4e:27:2c:56:91:d3:d7:1d:b1:86:00:3a:8e:37:76:57:
e2:f1:98:bf:bf:b6:8f:0a:8b:e3:e2:62:fa:b5:e8:e6:64:21:
9f:fb:03:08:af:8a:c5:fa:2e:25:e1:c1:09:68:df:ef:8e:cc:
70:f3:e8:44:c5:e6:d8:5e:c1:fa:65:24:de:7a:6e:4d:5f:52:
78:4b:e5:38:a2:8c:b2:63:a4:92:08:40:35:9c:c8:c1:14:23:
3b:33:0d:79:0f:c4:56:ca:4d:66:e6:ae:24:41:a1:46:20:b0:
db:3b:01:9c:c7:42:1c:75:3b:2a:9d:7c:b0:8c:12:ef:0b:74:
99:d4:0e:85:fc:e1:66:66:98:2a:22:4d:d8:a3:a1:4d:1b:80:
0e:15:38:68
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUbzStgjcSVxErnMcQ9m6WV1A1LHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5QTVDRTQ3ODVEMjc0NDI1MDg0MDRDQUMxNkU3MEUz
REZCQ0UyMjAeFw0yNjA1MDMwMjE1MzNaFw0yNzA1MDIwMjIwMzNaMDMxMTAvBgNV
BAMTKDk5MjcxOEU5OTMzNDYxOUE1MkQ4REREMDMwMjQyQjc5MjY1QTRGQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQwXzUWhzZXCkykeqJq77gwxE
Ft72uSPdN2iTGyFwQdqSOeiJygaSzZ2TU0zYX/ibsJe2evfYvDksb5rc7DSvcWP2
wD21mOt6s9yYDXfgbXg6HWyL1FkZaX+7/WzrClvrV5d6INvH8s0XwxuOIO7vb1jF
1t2eElaL20mXTnmXxAhybFosdatiXz0cDRC1OmnqUJ8XZLuPmR5iQcphuqVT+Mnx
tQHUq70ENEuHA8CykhrU5gmLxevvprdDhKksqwdsfi8k8ehNHCsDrAhPS8chkQuZ
Wqk1VsWrBavkt1cRBR48Qf423dRLZXGYEugXowxza+YCuY1rrixo+jMqhwoHAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUmScY6ZM0YZpS2N3QMCQreSZaT6MwHwYDVR0j
BBgwFoAUNppc5HhdJ0QlCEBMrBbnDj37ziIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjYyNjYzOWEtOWExYy00YzBlLWJhMTctZjY3OWYwNTA2Y2JjLzAvMzY5QTVDRTQ3
ODVEMjc0NDI1MDg0MDRDQUMxNkU3MEUzREZCQ0UyMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNjlBNUNFNDc4NUQyNzQ0MjUwODQwNENBQzE2RTcwRTNERkJD
RTIyLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI2MjY2MzlhLTlhMWMtNGMwZS1i
YTE3LWY2NzlmMDUwNmNiYy8wLzMxMzAzMzJlMzEzMjMzMmUzMTMyMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM3MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABne3kwDQYJ
KoZIhvcNAQELBQADggEBACoM5cbY6b8Pc0rh0Uxd6umTmWg7gCi3nAys7u8dLi/j
uIihlA4YzjQBFEeJMl+cHA28+UWs8gX33ezq0NZoKjmi//qfBaV8ld3jd7+1YFhi
DX/xIAJ65z/8yb7P1+Na3fIf+JQMrUwGRxMCicRNTicsVpHT1x2xhgA6jjd2V+Lx
mL+/to8Ki+PiYvq16OZkIZ/7AwivisX6LiXhwQlo3++OzHDz6ETF5thewfplJN56
bk1fUnhL5TiijLJjpJIIQDWcyMEUIzszDXkPxFbKTWbmriRBoUYgsNs7AZzHQhx1
OyqdfLCMEu8LdJnUDoX84WZmmCoiTdijoU0bgA4VOGg=
-----END CERTIFICATE-----
Generated at Wed May 13 19:42:15 2026 by rpki-client