
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e32302e35302e302f32342d3234203d3e20313530323138.roa
File: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (raw, json)
Hash identifier: 4n1fjzMSG2wHW3ycKcIEduoFrdhB7CHV6B09r5tY0kg=
Subject key identifier: B4:39:DA:2D:3B:A1:76:07:59:B3:3A:21:52:3E:0A:A3:85:E1:FF:CD
Certificate issuer: /CN=4887E721DA907B8223025FFDE0F11420EEFD8351
Certificate serial: 51F969B65E52E46BF3C0B5A559DDA0CBE21BAAFD
Authority key identifier: 48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e32302e35302e302f32342d3234203d3e20313530323138.roa
Signing time: Sun 03 May 2026 02:24:39 +0000
ROA not before: Sun 03 May 2026 02:19:39 +0000
ROA not after: Sun 02 May 2027 02:24:39 +0000
asID: 150218
IP address blocks: 103.20.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl
rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f9:69:b6:5e:52:e4:6b:f3:c0:b5:a5:59:dd:a0:cb:e2:1b:aa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4887E721DA907B8223025FFDE0F11420EEFD8351
Validity
Not Before: May 3 02:19:39 2026 GMT
Not After : May 2 02:24:39 2027 GMT
Subject: CN=B439DA2D3BA1760759B33A21523E0AA385E1FFCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:91:9b:39:43:43:35:6c:c1:bb:09:ec:f2:
41:84:28:92:04:b8:dc:da:6d:15:da:98:14:60:11:
47:a1:99:54:e8:dc:41:9f:57:b6:3e:b4:5f:94:3d:
b0:ec:d6:f7:bb:3c:42:e7:fd:b5:83:cd:12:99:11:
8a:ba:6f:e9:96:ed:92:9e:75:45:28:72:04:f6:b5:
bd:6b:9a:62:f2:fb:4b:a3:0e:b2:91:6b:34:00:40:
c0:10:02:9a:9e:b6:24:01:c3:c1:37:57:db:2d:f4:
cf:0c:30:8f:d2:5a:92:f1:75:4e:a9:d3:19:fa:a5:
85:ee:fd:ed:4d:83:47:3e:35:2c:54:4e:96:6b:0a:
d0:84:62:8d:14:1d:b5:e9:06:96:e3:61:ea:f9:2e:
85:8a:ff:ee:b2:3c:26:5e:53:53:98:d2:e8:36:6b:
26:4e:f4:d0:68:c0:9a:e3:a2:ce:f0:ad:21:8a:45:
0e:ce:b5:ad:bb:0f:85:d0:3b:d5:9c:20:43:81:df:
a0:c1:6f:92:5b:c0:04:97:50:07:0c:68:12:50:58:
3c:32:3c:00:cc:7f:bd:ef:de:73:89:84:90:72:de:
b2:e3:bc:be:3c:e4:a4:ac:6f:8d:fd:ff:d3:b4:f3:
ec:86:1b:b9:d3:40:1d:50:b9:23:a5:d4:ed:a8:d5:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:39:DA:2D:3B:A1:76:07:59:B3:3A:21:52:3E:0A:A3:85:E1:FF:CD
X509v3 Authority Key Identifier:
keyid:48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e32302e35302e302f32342d3234203d3e20313530323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:58:29:74:8c:06:1a:75:97:3f:27:64:03:d5:c0:b3:a4:e8:
e5:59:8d:64:8c:76:c3:8d:24:e6:fd:ea:9e:b9:80:36:04:70:
e8:b9:ba:36:4d:88:0f:cf:10:bc:5a:58:dc:ee:a5:a2:9b:4a:
c7:d7:25:ab:40:f0:30:50:b9:15:cd:39:92:cc:de:52:f9:81:
c5:da:63:b1:45:33:9d:80:fc:c4:67:8b:c0:4d:18:ce:c9:b2:
f6:71:c1:db:5c:26:17:47:43:86:6a:14:c7:29:dc:b4:63:78:
c1:da:42:1a:64:c4:5e:82:e7:30:1b:38:db:7b:01:36:4b:8f:
9b:e7:bc:4e:96:85:6d:4c:3d:48:8a:01:aa:9d:97:3a:ac:0e:
b6:06:dd:dd:4d:21:37:6d:e8:34:3d:ec:4d:b8:18:14:7d:21:
52:2f:17:6a:e8:03:4d:0f:03:e8:3f:83:d9:ed:6e:47:33:50:
14:d1:06:73:6c:8e:a0:38:91:b8:3f:31:e6:99:62:68:14:6b:
79:7c:59:8e:47:1f:6c:04:fd:39:ad:74:50:3e:e9:b4:c4:19:
a0:58:4c:2a:78:9a:25:42:a9:2f:ce:d9:70:5c:5f:66:9d:b4:
b8:92:29:e9:78:0b:47:19:9c:ce:07:8d:80:ae:86:b9:52:09:
d5:fd:d6:38
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUflptl5S5GvzwLWlWd2gy+Ibqv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0MjBF
RUZEODM1MTAeFw0yNjA1MDMwMjE5MzlaFw0yNzA1MDIwMjI0MzlaMDMxMTAvBgNV
BAMTKEI0MzlEQTJEM0JBMTc2MDc1OUIzM0EyMTUyM0UwQUEzODVFMUZGQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7uJGbOUNDNWzBuwns8kGEKJIE
uNzabRXamBRgEUehmVTo3EGfV7Y+tF+UPbDs1ve7PELn/bWDzRKZEYq6b+mW7ZKe
dUUocgT2tb1rmmLy+0ujDrKRazQAQMAQApqetiQBw8E3V9st9M8MMI/SWpLxdU6p
0xn6pYXu/e1Ng0c+NSxUTpZrCtCEYo0UHbXpBpbjYer5LoWK/+6yPCZeU1OY0ug2
ayZO9NBowJrjos7wrSGKRQ7Ota27D4XQO9WcIEOB36DBb5JbwASXUAcMaBJQWDwy
PADMf73v3nOJhJBy3rLjvL485KSsb439/9O08+yGG7nTQB1QuSOl1O2o1dPJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUtDnaLTuhdgdZszohUj4Ko4Xh/80wHwYDVR0j
BBgwFoAUSIfnIdqQe4IjAl/94PEUIO79g1EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzM0MGRmMTMtYzRlOS00MjE4LWIxMTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFE
QTkwN0I4MjIzMDI1RkZERTBGMTE0MjBFRUZEODM1MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80ODg3RTcyMURBOTA3QjgyMjMwMjVGRkRFMEYxMTQyMEVFRkQ4
MzUxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMzNDBkZjEzLWM0ZTktNDIxOC1i
MTE0LWRlYWQxNjQ4Mjg1Yy8wLzMxMzAzMzJlMzIzMDJlMzUzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcUMjANBgkqhkiG
9w0BAQsFAAOCAQEAa1gpdIwGGnWXPydkA9XAs6To5VmNZIx2w40k5v3qnrmANgRw
6Lm6Nk2ID88QvFpY3O6loptKx9clq0DwMFC5Fc05kszeUvmBxdpjsUUznYD8xGeL
wE0Yzsmy9nHB21wmF0dDhmoUxynctGN4wdpCGmTEXoLnMBs423sBNkuPm+e8TpaF
bUw9SIoBqp2XOqwOtgbd3U0hN23oND3sTbgYFH0hUi8XaugDTQ8D6D+D2e1uRzNQ
FNEGc2yOoDiRuD8x5pliaBRreXxZjkcfbAT9Oa10UD7ptMQZoFhMKniaJUKpL87Z
cFxfZp20uJIp6XgLRxmczgeNgK6GuVIJ1f3WOA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:55:30 2026 by rpki-client