
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa
File: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (raw, json)
Hash identifier: V2s2v2zyv88cwsslpUJdds/b+6l6rcgW5NHb7V5SYWY=
Subject key identifier: 93:86:26:19:53:F1:52:9A:92:9D:4C:E6:FE:BE:14:14:05:A4:34:38
Certificate issuer: /CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274
Certificate serial: 40AB329380EC66F6833470B9D1B057F0F082920E
Authority key identifier: 2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa
Signing time: Sun 03 May 2026 02:26:27 +0000
ROA not before: Sun 03 May 2026 02:21:27 +0000
ROA not after: Sun 02 May 2027 02:26:27 +0000
asID: 140443
IP address blocks: 103.168.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl
rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ab:32:93:80:ec:66:f6:83:34:70:b9:d1:b0:57:f0:f0:82:92:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274
Validity
Not Before: May 3 02:21:27 2026 GMT
Not After : May 2 02:26:27 2027 GMT
Subject: CN=9386261953F1529A929D4CE6FEBE141405A43438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:90:fb:83:16:97:62:72:fa:c4:cf:5a:e4:
3c:2d:58:fe:b3:22:fa:da:1b:b8:c5:f5:d0:fe:f2:
9d:f0:34:83:78:ad:d0:be:7b:f4:78:4c:b7:7b:96:
fa:35:c9:b9:38:fe:96:23:3a:0b:56:c9:7e:54:a4:
00:6b:e7:1a:2a:ba:19:55:62:b6:8b:d2:c5:b8:bb:
6d:12:ef:1a:ae:0d:4f:e0:e9:a9:7c:63:4b:79:e8:
6d:e5:57:7d:3f:4c:48:d4:4a:11:ec:6e:61:4b:79:
2d:09:19:ed:df:aa:87:73:c4:6f:a0:99:3e:40:06:
73:39:b2:4c:d7:36:c7:32:af:b5:a5:e9:4d:4b:77:
b2:aa:95:76:da:72:94:17:1b:63:ed:6f:26:0b:e1:
32:08:85:58:f3:ec:e8:ba:bf:5e:8c:52:aa:ee:6e:
be:e5:8e:db:f5:34:70:5e:8c:4b:be:5b:b9:93:df:
a5:c9:c3:0d:92:a3:a9:c8:d7:95:b8:e4:15:1a:37:
43:ef:a3:d7:77:25:9f:10:3a:4a:23:e4:09:a6:3a:
c2:19:79:0c:24:8c:68:ce:7f:5e:48:36:47:e2:c6:
49:ef:72:24:e4:6e:0b:b7:76:d9:fb:2a:c0:a1:bc:
a1:31:8c:c0:70:30:f3:8f:e6:dc:c3:7d:94:9c:5e:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:86:26:19:53:F1:52:9A:92:9D:4C:E6:FE:BE:14:14:05:A4:34:38
X509v3 Authority Key Identifier:
keyid:2A:6F:16:E8:0B:FD:C7:B4:D6:79:77:26:FB:8F:D4:B0:D7:D9:C2:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A6F16E80BFDC7B4D6797726FB8FD4B0D7D9C274.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.146.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:0d:86:73:83:ea:cb:85:21:49:78:87:89:06:a7:e4:cc:7c:
7d:e1:b9:12:aa:31:15:df:e6:52:a0:d2:fc:a3:6d:61:18:32:
8d:85:8e:bd:dc:ad:56:6e:75:6f:5b:73:03:1a:07:ac:0f:8c:
95:c9:ee:e8:f8:97:4a:0c:01:af:22:24:17:06:2d:51:ed:18:
b6:1c:7b:09:d2:b9:1c:e8:b6:64:87:22:c6:d3:3c:b2:cb:43:
2c:67:24:aa:63:cf:62:1d:dc:c3:ab:44:a3:57:c7:ff:50:af:
a5:be:81:fd:41:0c:ee:9c:4e:e0:c8:87:24:79:b8:bf:0f:5a:
f7:89:21:09:87:0a:da:00:38:ca:f8:4f:a0:85:53:f8:fb:dc:
e8:2c:d5:5d:6b:a6:c4:10:73:40:2a:86:3c:6a:ba:30:e7:e7:
92:db:e3:72:71:35:c1:c3:00:b7:6d:09:40:03:f0:19:ec:97:
25:de:fc:66:98:a7:2f:22:48:b1:93:67:a0:9a:c8:78:e3:c6:
b5:c6:bd:c1:d2:9a:e4:e5:28:6d:f1:3f:57:65:76:3e:d4:a6:
de:c1:7f:79:cc:31:31:17:b3:b5:0e:55:f3:ab:21:fc:64:89:
6a:be:b7:39:44:f6:0e:2f:9a:72:fc:25:2f:f9:a3:fb:31:6b:
d8:9f:01:0c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQKsyk4DsZvaDNHC50bBX8PCCkg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2RjE2RTgwQkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBE
N0Q5QzI3NDAeFw0yNjA1MDMwMjIxMjdaFw0yNzA1MDIwMjI2MjdaMDMxMTAvBgNV
BAMTKDkzODYyNjE5NTNGMTUyOUE5MjlENENFNkZFQkUxNDE0MDVBNDM0MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2JD7gxaXYnL6xM9a5DwtWP6z
IvraG7jF9dD+8p3wNIN4rdC+e/R4TLd7lvo1ybk4/pYjOgtWyX5UpABr5xoquhlV
YraL0sW4u20S7xquDU/g6al8Y0t56G3lV30/TEjUShHsbmFLeS0JGe3fqodzxG+g
mT5ABnM5skzXNscyr7Wl6U1Ld7KqlXbacpQXG2PtbyYL4TIIhVjz7Oi6v16MUqru
br7ljtv1NHBejEu+W7mT36XJww2So6nI15W45BUaN0Pvo9d3JZ8QOkoj5AmmOsIZ
eQwkjGjOf15INkfixknvciTkbgu3dtn7KsChvKExjMBwMPOP5tzDfZScXjLrAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUk4YmGVPxUpqSnUzm/r4UFAWkNDgwHwYDVR0j
BBgwFoAUKm8W6Av9x7TWeXcm+4/UsNfZwnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2E0NjM2MGQtNjYyYi00ZjdkLWJiMTctZDg2MDgyMTUyNDcxLzAvMkE2RjE2RTgw
QkZEQzdCNEQ2Nzk3NzI2RkI4RkQ0QjBEN0Q5QzI3NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQTZGMTZFODBCRkRDN0I0RDY3OTc3MjZGQjhGRDRCMEQ3RDlD
Mjc0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNhNDYzNjBkLTY2MmItNGY3ZC1i
YjE3LWQ4NjA4MjE1MjQ3MS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM0MzYyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqJIwDQYJ
KoZIhvcNAQELBQADggEBAE8NhnOD6suFIUl4h4kGp+TMfH3huRKqMRXf5lKg0vyj
bWEYMo2Fjr3crVZudW9bcwMaB6wPjJXJ7uj4l0oMAa8iJBcGLVHtGLYcewnSuRzo
tmSHIsbTPLLLQyxnJKpjz2Id3MOrRKNXx/9Qr6W+gf1BDO6cTuDIhyR5uL8PWveJ
IQmHCtoAOMr4T6CFU/j73Ogs1V1rpsQQc0AqhjxqujDn55Lb43JxNcHDALdtCUAD
8BnslyXe/GaYpy8iSLGTZ6CayHjjxrXGvcHSmuTlKG3xP1dldj7Upt7Bf3nMMTEX
s7UOVfOrIfxkiWq+tzlE9g4vmnL8JS/5o/sxa9ifAQw=
-----END CERTIFICATE-----
Generated at Wed May 13 08:39:32 2026 by rpki-client