
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235322e302f32342d3234203d3e20313336383835.roa
File: 3130332e3130352e3235322e302f32342d3234203d3e20313336383835.roa (raw, json)
Hash identifier: p/qfzxOQMmbYGhqYZQGSuk/datM54DD5JFlhBHKoqoQ=
Subject key identifier: BB:93:82:26:2B:E6:40:6C:B7:2C:A9:87:AD:86:B4:71:9C:D2:1A:41
Certificate issuer: /CN=566E09CA4830024428EFAB32BD4C5C0588342F87
Certificate serial: 745939C7E9111AB7989876A28581C7391A149431
Authority key identifier: 56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235322e302f32342d3234203d3e20313336383835.roa
Signing time: Mon 05 Oct 2026 04:09:11 +0000
ROA not before: Mon 05 Oct 2026 04:04:11 +0000
ROA not after: Mon 04 Oct 2027 04:09:11 +0000
asID: 136885
IP address blocks: 103.105.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl
rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 10:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:59:39:c7:e9:11:1a:b7:98:98:76:a2:85:81:c7:39:1a:14:94:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=566E09CA4830024428EFAB32BD4C5C0588342F87
Validity
Not Before: Oct 5 04:04:11 2026 GMT
Not After : Oct 4 04:09:11 2027 GMT
Subject: CN=BB9382262BE6406CB72CA987AD86B4719CD21A41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:67:50:a7:e9:79:a0:a9:49:82:1d:92:38:
27:c9:92:a3:34:62:5b:b9:99:73:61:dd:f1:ea:e8:
b0:1f:e1:1a:18:c2:17:63:ff:47:f4:5c:44:2e:2a:
05:0f:ad:74:49:ff:9f:e6:61:7c:26:1a:35:58:6b:
c7:f3:24:aa:03:45:76:b7:b9:8f:a6:e3:d9:bb:b7:
9d:d3:19:91:f5:b8:6a:de:aa:4e:9d:a4:a8:ff:4a:
53:39:4e:61:3d:3f:24:ec:ef:0b:26:9c:60:d5:b6:
ad:5b:33:7a:6d:97:02:0f:38:64:13:91:3e:96:64:
b9:ed:3f:1f:4c:db:96:26:83:05:56:f7:58:f5:9a:
5d:6e:be:f5:6b:cd:48:15:81:c0:33:e4:86:ea:17:
84:09:3a:8f:5d:e9:3f:6b:0c:1c:72:27:ad:81:88:
82:f5:5b:93:76:58:a6:7b:61:e4:ff:9d:37:66:d1:
3e:6a:41:ea:aa:b4:1b:ab:de:3c:7a:fb:68:11:e3:
92:27:eb:e3:f3:05:cc:8d:f4:9a:97:06:ec:b7:a9:
d8:1b:2c:f3:73:97:c8:87:43:42:b5:fb:37:4c:1d:
b0:d2:0d:c2:2f:2d:49:b6:cf:90:be:9a:f5:a0:59:
9c:83:dc:fe:dc:11:80:ee:31:93:80:4e:4a:a2:38:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:93:82:26:2B:E6:40:6C:B7:2C:A9:87:AD:86:B4:71:9C:D2:1A:41
X509v3 Authority Key Identifier:
keyid:56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235322e302f32342d3234203d3e20313336383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.252.0/24
Signature Algorithm: sha256WithRSAEncryption
71:16:3a:ef:49:84:88:01:c3:fa:29:f9:c2:8d:52:6d:46:61:
2d:11:6f:cb:07:aa:7e:ad:00:2f:85:8a:f2:c9:2a:80:97:4b:
44:b8:ff:cc:7b:51:25:98:0c:de:72:7a:07:16:b2:88:ed:bb:
b4:2b:87:77:6d:3f:1e:4c:ee:07:a1:48:bf:ef:ec:c8:dd:03:
a2:51:bf:41:d6:fd:d9:5d:4f:19:9d:83:15:be:fe:4c:4e:a9:
1d:8a:8b:4d:2a:fb:0e:cd:dc:72:32:c6:52:9d:5d:38:57:1a:
d4:b0:02:0f:3f:21:4e:74:5e:59:fd:2c:32:e3:75:17:fe:05:
c7:3f:2a:22:c5:8b:6c:3d:a0:82:14:b2:d2:aa:5c:c0:f7:52:
26:52:9b:09:25:3a:2e:f5:d1:e8:c0:2b:60:7a:3c:d4:42:f3:
bf:15:b8:7b:65:93:02:bd:0d:59:b6:b0:0a:0f:c8:94:01:33:
fb:93:d5:fd:97:ce:e1:fa:2e:34:77:38:d6:9d:da:1f:f8:35:
be:b2:30:e2:65:8d:1a:08:bd:fd:fc:d1:0f:40:a2:ff:63:34:
d5:2d:72:6e:30:16:f2:7b:01:7f:b0:b7:27:08:98:fd:61:f7:
4d:ea:30:36:59:d4:c7:03:d4:cc:fa:2a:dd:0e:e8:c9:76:de:
ff:ae:8d:2c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUdFk5x+kRGreYmHaihYHHORoUlDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2RTA5Q0E0ODMwMDI0NDI4RUZBQjMyQkQ0QzVDMDU4
ODM0MkY4NzAeFw0yNjEwMDUwNDA0MTFaFw0yNzEwMDQwNDA5MTFaMDMxMTAvBgNV
BAMTKEJCOTM4MjI2MkJFNjQwNkNCNzJDQTk4N0FEODZCNDcxOUNEMjFBNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGGdQp+l5oKlJgh2SOCfJkqM0
Ylu5mXNh3fHq6LAf4RoYwhdj/0f0XEQuKgUPrXRJ/5/mYXwmGjVYa8fzJKoDRXa3
uY+m49m7t53TGZH1uGreqk6dpKj/SlM5TmE9PyTs7wsmnGDVtq1bM3ptlwIPOGQT
kT6WZLntPx9M25YmgwVW91j1ml1uvvVrzUgVgcAz5IbqF4QJOo9d6T9rDBxyJ62B
iIL1W5N2WKZ7YeT/nTdm0T5qQeqqtBur3jx6+2gR45In6+PzBcyN9JqXBuy3qdgb
LPNzl8iHQ0K1+zdMHbDSDcIvLUm2z5C+mvWgWZyD3P7cEYDuMZOATkqiOOC1AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUu5OCJivmQGy3LKmHrYa0cZzSGkEwHwYDVR0j
BBgwFoAUVm4JykgwAkQo76syvUxcBYg0L4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzE2YWE1NGYtNzE1OC00M2FmLWIzMzYtYmU0NzE0ODE2ZmFkLzAvNTY2RTA5Q0E0
ODMwMDI0NDI4RUZBQjMyQkQ0QzVDMDU4ODM0MkY4Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NjZFMDlDQTQ4MzAwMjQ0MjhFRkFCMzJCRDRDNUMwNTg4MzQy
Rjg3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMxNmFhNTRmLTcxNTgtNDNhZi1i
MzM2LWJlNDcxNDgxNmZhZC8wLzMxMzAzMzJlMzEzMDM1MmUzMjM1MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM4MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnafwwDQYJ
KoZIhvcNAQELBQADggEBAHEWOu9JhIgBw/op+cKNUm1GYS0Rb8sHqn6tAC+FivLJ
KoCXS0S4/8x7USWYDN5yegcWsojtu7Qrh3dtPx5M7gehSL/v7MjdA6JRv0HW/dld
TxmdgxW+/kxOqR2Ki00q+w7N3HIyxlKdXThXGtSwAg8/IU50Xln9LDLjdRf+Bcc/
KiLFi2w9oIIUstKqXMD3UiZSmwklOi710ejAK2B6PNRC878VuHtlkwK9DVm2sAoP
yJQBM/uT1f2XzuH6LjR3ONad2h/4Nb6yMOJljRoIvf380Q9Aov9jNNUtcm4wFvJ7
AX+wtycImP1h903qMDZZ1McD1Mz6Kt0O6Ml23v+ujSw=
-----END CERTIFICATE-----
Generated at Wed Oct 14 15:51:47 2026 by rpki-client