
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
File: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (raw, json)
Hash identifier: 8DBxlpB4P7TBKUnRSvj1q12ltJkx0DrbCvm4btLrod4=
Subject key identifier: A9:2E:92:CE:87:C5:98:A7:6A:61:6E:2B:9A:82:1F:E7:86:5C:09:2A
Certificate issuer: /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial: 4E0B6372B08FC2442C70E04688D1E08D25B446D2
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
Signing time: Sun 03 May 2026 02:23:17 +0000
ROA not before: Sun 03 May 2026 02:18:17 +0000
ROA not after: Sun 02 May 2027 02:23:17 +0000
asID: 58485
IP address blocks: 103.247.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:0b:63:72:b0:8f:c2:44:2c:70:e0:46:88:d1:e0:8d:25:b4:46:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Validity
Not Before: May 3 02:18:17 2026 GMT
Not After : May 2 02:23:17 2027 GMT
Subject: CN=A92E92CE87C598A76A616E2B9A821FE7865C092A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:ef:ef:90:9e:af:a8:1d:b7:8c:50:c8:be:
97:ea:23:ed:38:99:4d:37:54:6c:23:f1:18:13:c8:
c2:c7:f2:5c:96:de:64:1f:c7:87:3f:de:12:32:92:
d0:01:0d:d9:96:48:4c:b3:4a:b9:99:64:0a:6f:69:
d3:6e:1a:c8:67:f5:d5:be:75:6e:b5:d9:2f:8b:c9:
d6:0e:6c:c6:03:fa:cf:1a:82:16:79:f9:80:fd:0c:
67:62:96:7b:89:3e:87:c3:9e:d8:96:5f:1b:16:18:
fb:25:07:1b:60:d8:87:e7:69:76:85:d3:09:19:77:
d0:81:91:9b:a7:8c:38:74:5c:c9:76:f0:d5:f5:67:
89:71:bb:47:b2:fb:73:cc:e0:ad:eb:54:65:19:87:
81:a5:76:33:ed:c4:79:d1:c4:6c:31:41:0c:05:40:
39:4f:24:c3:cd:b4:c2:1e:cc:89:b9:34:de:04:fb:
51:98:54:cd:be:37:b9:e9:02:49:e9:a9:93:c1:72:
b4:0c:fe:74:de:fc:f4:b4:f4:cd:eb:64:43:59:33:
2a:4a:ac:2b:04:11:78:79:e1:52:46:ca:a9:92:7c:
dd:87:ed:04:86:a8:40:c6:4e:0f:4b:42:20:e4:f9:
e1:a0:1d:a4:2a:b0:aa:c5:64:35:00:20:ba:cf:ce:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:92:CE:87:C5:98:A7:6A:61:6E:2B:9A:82:1F:E7:86:5C:09:2A
X509v3 Authority Key Identifier:
keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.21.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:19:da:68:ec:cf:80:53:2c:85:e1:a8:04:64:9f:60:04:08:
cf:53:3f:09:49:7b:08:62:8a:d3:ae:cc:58:44:b6:e8:16:19:
c7:f1:47:bc:5a:9f:08:7f:4d:78:3f:c6:1f:1b:ca:cb:5a:0f:
ec:b5:ae:9d:cc:88:6b:39:d0:98:e8:09:ec:39:4a:65:27:a5:
9a:61:7d:d0:de:a4:e4:0e:0a:45:9a:d6:62:0e:c0:a6:fa:e1:
f3:41:55:0e:6a:d8:36:2f:55:e6:aa:97:c1:bf:45:b5:f9:4f:
21:5f:01:3b:02:c5:36:3e:23:24:f1:7b:a8:8f:9b:42:a4:37:
f4:42:20:ac:38:94:b9:2d:c1:e5:f4:8a:04:94:84:95:26:37:
86:a4:d5:d0:92:db:6a:8b:7a:97:51:c0:33:bf:ad:61:ca:db:
ad:80:83:d4:ac:0e:90:6a:bc:08:fb:c4:24:7d:8e:02:b2:9a:
01:e0:5e:ed:6e:a9:56:bd:da:86:44:8c:54:a4:5d:8b:4a:0b:
f3:3c:7b:e0:7f:02:df:58:be:6f:84:66:e2:b7:ea:9b:83:6c:
2d:21:2e:63:97:ae:fb:ec:46:af:00:e1:34:3b:4e:78:71:eb:
64:82:e8:d7:48:91:b3:b0:e5:54:2f:3c:d4:26:66:3c:39:2e:
8e:39:96:6c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTgtjcrCPwkQscOBGiNHgjSW0RtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGOTZBRUJGOUM4QTIxMzM3Q0I0QTc4MTUzNjlCRUMx
MkZGOUEwNDAeFw0yNjA1MDMwMjE4MTdaFw0yNzA1MDIwMjIzMTdaMDMxMTAvBgNV
BAMTKEE5MkU5MkNFODdDNTk4QTc2QTYxNkUyQjlBODIxRkU3ODY1QzA5MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjzu/vkJ6vqB23jFDIvpfqI+04
mU03VGwj8RgTyMLH8lyW3mQfx4c/3hIyktABDdmWSEyzSrmZZApvadNuGshn9dW+
dW612S+LydYObMYD+s8aghZ5+YD9DGdilnuJPofDntiWXxsWGPslBxtg2IfnaXaF
0wkZd9CBkZunjDh0XMl28NX1Z4lxu0ey+3PM4K3rVGUZh4GldjPtxHnRxGwxQQwF
QDlPJMPNtMIezIm5NN4E+1GYVM2+N7npAknpqZPBcrQM/nTe/PS09M3rZENZMypK
rCsEEXh54VJGyqmSfN2H7QSGqEDGTg9LQiDk+eGgHaQqsKrFZDUAILrPzp39AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUqS6SzofFmKdqYW4rmoIf54ZcCSowHwYDVR0j
BBgwFoAUZvlq6/nIohM3y0p4FTab7BL/mgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmVlNDdiYmYtYmE4NC00NDhmLTk2MmItMmFhZjVjN2RkNjhkLzAvNjZGOTZBRUJG
OUM4QTIxMzM3Q0I0QTc4MTUzNjlCRUMxMkZGOUEwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NkY5NkFFQkY5QzhBMjEzMzdDQjRBNzgxNTM2OUJFQzEyRkY5
QTA0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJlZTQ3YmJmLWJhODQtNDQ4Zi05
NjJiLTJhYWY1YzdkZDY4ZC8wLzMxMzAzMzJlMzIzNDM3MmUzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3FTANBgkqhkiG
9w0BAQsFAAOCAQEAyhnaaOzPgFMsheGoBGSfYAQIz1M/CUl7CGKK067MWES26BYZ
x/FHvFqfCH9NeD/GHxvKy1oP7LWuncyIaznQmOgJ7DlKZSelmmF90N6k5A4KRZrW
Yg7Apvrh80FVDmrYNi9V5qqXwb9FtflPIV8BOwLFNj4jJPF7qI+bQqQ39EIgrDiU
uS3B5fSKBJSElSY3hqTV0JLbaot6l1HAM7+tYcrbrYCD1KwOkGq8CPvEJH2OArKa
AeBe7W6pVr3ahkSMVKRdi0oL8zx74H8C31i+b4Rm4rfqm4NsLSEuY5eu++xGrwDh
NDtOeHHrZILo10iRs7DlVC881CZmPDkujjmWbA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:34:14 2026 by rpki-client