
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32332e302f32342d3234203d3e203538343835.roa
File: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (raw, json)
Hash identifier: n/ZVRJi6yb8Dz2Mvlmk9fIXtW9fAfV0qot64+DO2GBg=
Subject key identifier: B3:AB:2F:E0:B5:2F:22:B7:C2:68:C9:D0:E2:31:C3:21:ED:45:87:49
Certificate issuer: /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial: 77BF5930AFC96A021F98B912F134D4C10DE05514
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32332e302f32342d3234203d3e203538343835.roa
Signing time: Sun 03 May 2026 02:23:20 +0000
ROA not before: Sun 03 May 2026 02:18:20 +0000
ROA not after: Sun 02 May 2027 02:23:20 +0000
asID: 58485
IP address blocks: 103.247.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:bf:59:30:af:c9:6a:02:1f:98:b9:12:f1:34:d4:c1:0d:e0:55:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Validity
Not Before: May 3 02:18:20 2026 GMT
Not After : May 2 02:23:20 2027 GMT
Subject: CN=B3AB2FE0B52F22B7C268C9D0E231C321ED458749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:6d:fe:36:ec:f9:33:ce:4f:b4:37:79:93:
09:7e:97:01:71:03:dd:c0:9b:10:6c:ec:2b:9b:75:
7d:2e:e5:e5:49:0c:d3:5d:3f:a6:8f:30:a5:ee:50:
5c:df:8b:d7:2c:4f:af:f8:b2:e0:94:b6:8c:15:72:
c4:86:cc:e9:54:5b:e1:12:e9:2d:75:0d:50:66:09:
0b:67:9f:e2:69:5e:55:af:c2:09:8c:2e:4b:50:d5:
0f:0f:bb:35:98:2e:a4:15:25:ab:03:60:ce:42:50:
39:d5:0b:3f:20:5e:ac:cc:93:67:ab:02:37:f7:d5:
16:68:88:e7:9d:47:58:47:6d:96:f8:05:f3:81:25:
7c:ff:32:50:c0:4b:5f:ec:db:5f:ab:d0:ef:2f:40:
cb:31:ed:32:b9:cb:91:55:62:92:68:7e:18:c5:c3:
27:27:e8:d8:51:ab:f4:8c:9f:e6:45:de:05:d9:a3:
7f:8f:6d:0e:1d:ad:f3:46:56:8e:c5:0d:78:4e:e0:
c9:ce:88:56:db:92:ad:7a:c3:60:a4:63:ea:19:c8:
bf:7b:8e:af:41:dd:95:84:f2:09:4b:2e:de:9a:1d:
0a:ac:e2:e7:70:a6:58:18:69:79:9b:7d:04:99:f4:
d0:f9:4a:e0:44:47:3e:a5:a1:78:f1:15:d0:58:c6:
74:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:2F:E0:B5:2F:22:B7:C2:68:C9:D0:E2:31:C3:21:ED:45:87:49
X509v3 Authority Key Identifier:
keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32332e302f32342d3234203d3e203538343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.23.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:8e:40:11:36:42:5c:d5:86:f1:1c:af:16:ff:84:0a:44:38:
2f:74:5f:27:cd:41:c6:0b:f6:f6:66:86:5d:78:9b:5a:a5:e1:
84:a0:43:75:45:d4:ac:d7:87:35:0f:ec:e2:24:84:68:7b:97:
05:20:2f:4d:de:80:53:04:8f:c7:32:ed:f4:6b:9f:e7:1d:7a:
75:1c:92:48:04:68:ac:ca:ac:3c:87:23:d1:42:14:6f:c4:5c:
20:12:80:03:12:46:c9:7c:10:9e:53:49:e2:19:45:d5:90:72:
d2:f1:e9:3f:8c:d2:02:cd:9e:52:70:ef:b5:52:36:48:ea:a4:
80:41:e9:42:bc:64:90:43:e3:ad:fd:d2:0f:76:c3:54:4d:6a:
1d:bf:42:45:ea:43:88:61:e5:43:b3:0f:35:21:53:c4:88:cb:
e9:da:35:28:a6:d9:54:d6:83:05:76:db:8b:59:a6:86:e7:cc:
86:e2:ee:7f:59:66:39:04:40:6d:07:4f:a0:34:a9:22:b4:2b:
ce:a0:cd:9e:7d:35:f4:6a:b1:a8:24:36:a9:97:c2:17:49:ff:
a5:7e:9a:11:8a:14:28:3d:89:f3:7a:3e:ae:fa:ef:99:70:7c:
50:f4:64:f8:fe:d0:c6:cc:93:8b:1f:6a:71:7e:a6:5c:cc:b2:
cf:55:c1:53
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUd79ZMK/JagIfmLkS8TTUwQ3gVRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGOTZBRUJGOUM4QTIxMzM3Q0I0QTc4MTUzNjlCRUMx
MkZGOUEwNDAeFw0yNjA1MDMwMjE4MjBaFw0yNzA1MDIwMjIzMjBaMDMxMTAvBgNV
BAMTKEIzQUIyRkUwQjUyRjIyQjdDMjY4QzlEMEUyMzFDMzIxRUQ0NTg3NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWO23+Nuz5M85PtDd5kwl+lwFx
A93AmxBs7CubdX0u5eVJDNNdP6aPMKXuUFzfi9csT6/4suCUtowVcsSGzOlUW+ES
6S11DVBmCQtnn+JpXlWvwgmMLktQ1Q8PuzWYLqQVJasDYM5CUDnVCz8gXqzMk2er
Ajf31RZoiOedR1hHbZb4BfOBJXz/MlDAS1/s21+r0O8vQMsx7TK5y5FVYpJofhjF
wycn6NhRq/SMn+ZF3gXZo3+PbQ4drfNGVo7FDXhO4MnOiFbbkq16w2CkY+oZyL97
jq9B3ZWE8glLLt6aHQqs4udwplgYaXmbfQSZ9ND5SuBERz6loXjxFdBYxnRRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUs6sv4LUvIrfCaMnQ4jHDIe1Fh0kwHwYDVR0j
BBgwFoAUZvlq6/nIohM3y0p4FTab7BL/mgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmVlNDdiYmYtYmE4NC00NDhmLTk2MmItMmFhZjVjN2RkNjhkLzAvNjZGOTZBRUJG
OUM4QTIxMzM3Q0I0QTc4MTUzNjlCRUMxMkZGOUEwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NkY5NkFFQkY5QzhBMjEzMzdDQjRBNzgxNTM2OUJFQzEyRkY5
QTA0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJlZTQ3YmJmLWJhODQtNDQ4Zi05
NjJiLTJhYWY1YzdkZDY4ZC8wLzMxMzAzMzJlMzIzNDM3MmUzMjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3FzANBgkqhkiG
9w0BAQsFAAOCAQEAvI5AETZCXNWG8RyvFv+ECkQ4L3RfJ81Bxgv29maGXXibWqXh
hKBDdUXUrNeHNQ/s4iSEaHuXBSAvTd6AUwSPxzLt9Guf5x16dRySSARorMqsPIcj
0UIUb8RcIBKAAxJGyXwQnlNJ4hlF1ZBy0vHpP4zSAs2eUnDvtVI2SOqkgEHpQrxk
kEPjrf3SD3bDVE1qHb9CRepDiGHlQ7MPNSFTxIjL6do1KKbZVNaDBXbbi1mmhufM
huLuf1lmOQRAbQdPoDSpIrQrzqDNnn019GqxqCQ2qZfCF0n/pX6aEYoUKD2J83o+
rvrvmXB8UPRk+P7QxsyTix9qcX6mXMyyz1XBUw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:43:30 2026 by rpki-client