
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa
File: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (raw, json)
Hash identifier: 5KhdGAwFpBBISTY9aqPLqjFXwI/SAn/2iKibebTV35o=
Subject key identifier: BB:46:1E:A8:DE:FA:93:16:A0:7C:56:57:92:E0:6C:7C:02:5E:48:2E
Certificate issuer: /CN=3F5C3F8352410D0935346BFC981A5941F86DE152
Certificate serial: 3AF534689F0DE64D020AF41A2E6DEA2BE62750C4
Authority key identifier: 3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa
Signing time: Sun 03 May 2026 02:28:21 +0000
ROA not before: Sun 03 May 2026 02:23:21 +0000
ROA not after: Sun 02 May 2027 02:28:21 +0000
asID: 151000
IP address blocks: 103.179.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl
rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f5:34:68:9f:0d:e6:4d:02:0a:f4:1a:2e:6d:ea:2b:e6:27:50:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F5C3F8352410D0935346BFC981A5941F86DE152
Validity
Not Before: May 3 02:23:21 2026 GMT
Not After : May 2 02:28:21 2027 GMT
Subject: CN=BB461EA8DEFA9316A07C565792E06C7C025E482E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:3f:0c:44:0f:3f:99:a6:35:16:2e:cb:fd:
14:cd:d8:22:bf:ce:64:d2:41:5e:d4:9c:55:79:25:
18:a7:6f:25:70:a7:72:21:af:31:cc:54:42:ab:b7:
27:d0:28:56:ee:96:28:07:60:dd:db:8b:d4:dc:60:
f5:87:48:73:88:5a:4d:05:ba:cc:7a:60:2c:80:93:
4e:ad:98:a2:5a:5c:2d:7e:8d:ce:e1:88:a5:da:fe:
03:3f:71:4e:1d:7e:dd:9a:78:22:66:3a:9c:3f:6e:
9a:92:2e:ee:10:72:42:d3:f4:79:14:ed:26:c0:44:
ca:a2:49:62:72:04:b9:40:5f:89:47:99:75:48:85:
2e:d4:32:77:bb:3a:86:aa:5b:37:28:f3:5a:0d:73:
be:cb:59:5d:45:cb:64:0d:b8:3a:71:05:49:62:63:
ab:28:76:35:85:29:48:fb:76:29:ff:be:7a:e2:97:
fe:8c:89:a7:d0:f4:f2:08:0b:dd:43:62:34:e5:f0:
46:63:42:a6:f9:c4:d8:6a:78:25:73:7a:2a:69:9c:
ef:b0:8d:fd:eb:b4:ad:5a:61:c4:69:2d:7f:37:d3:
c4:10:41:7e:b4:9d:5f:04:93:12:81:aa:07:d2:3c:
52:15:68:fc:d4:56:24:af:03:93:09:77:45:c9:e1:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:46:1E:A8:DE:FA:93:16:A0:7C:56:57:92:E0:6C:7C:02:5E:48:2E
X509v3 Authority Key Identifier:
keyid:3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.66.0/23
Signature Algorithm: sha256WithRSAEncryption
76:2b:29:5d:0f:bb:4e:f3:bf:81:2c:42:2b:05:86:d4:b6:70:
40:e4:f1:01:81:18:7e:71:d8:7d:9d:71:12:92:64:0b:85:e3:
ff:91:b4:2f:51:45:68:1f:8c:08:54:ca:fe:8b:ab:e1:e7:c1:
07:01:41:d2:42:ed:95:86:72:54:b8:98:d9:05:b4:59:ed:08:
6b:33:94:47:86:50:7a:5b:26:89:9c:99:5c:68:22:df:43:69:
6b:33:c1:cd:12:b2:72:1f:d1:f6:ff:43:78:26:82:2a:75:f6:
55:14:ee:9b:29:d8:3f:3c:d4:e2:4c:13:c9:ed:2b:9a:ba:62:
c8:c1:48:50:d9:18:01:95:a0:7c:57:1c:2f:94:0b:d2:a8:05:
41:56:a5:62:ef:0f:10:79:21:7a:31:b3:91:82:3c:4b:e8:42:
80:6e:9d:12:a8:2b:a9:26:ae:de:72:b2:4e:92:69:9c:6c:c9:
b7:63:3f:25:67:1e:ea:16:4d:85:8e:78:60:bd:d3:eb:a5:b8:
80:1e:97:68:b4:fc:52:2a:64:2e:8e:7d:4e:4c:4d:a9:ef:ec:
6d:0b:58:ac:e3:49:38:f7:58:24:5a:4a:1b:7d:d0:40:8d:f1:
13:40:8e:b6:5e:39:e6:58:6e:5a:0f:88:10:71:80:44:5a:30:
6b:69:f7:b1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOvU0aJ8N5k0CCvQaLm3qK+YnUMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFG
ODZERTE1MjAeFw0yNjA1MDMwMjIzMjFaFw0yNzA1MDIwMjI4MjFaMDMxMTAvBgNV
BAMTKEJCNDYxRUE4REVGQTkzMTZBMDdDNTY1NzkyRTA2QzdDMDI1RTQ4MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP5T8MRA8/maY1Fi7L/RTN2CK/
zmTSQV7UnFV5JRinbyVwp3IhrzHMVEKrtyfQKFbuligHYN3bi9TcYPWHSHOIWk0F
usx6YCyAk06tmKJaXC1+jc7hiKXa/gM/cU4dft2aeCJmOpw/bpqSLu4QckLT9HkU
7SbARMqiSWJyBLlAX4lHmXVIhS7UMne7OoaqWzco81oNc77LWV1Fy2QNuDpxBUli
Y6sodjWFKUj7din/vnril/6MiafQ9PIIC91DYjTl8EZjQqb5xNhqeCVzeippnO+w
jf3rtK1aYcRpLX8308QQQX60nV8EkxKBqgfSPFIVaPzUViSvA5MJd0XJ4SVpAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUu0YeqN76kxagfFZXkuBsfAJeSC4wHwYDVR0j
BBgwFoAUP1w/g1JBDQk1NGv8mBpZQfht4VIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2UxMjc0M2QtZDU2ZC00YTc3LTkwZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1
MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFGODZERTE1Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zRjVDM0Y4MzUyNDEwRDA5MzUzNDZCRkM5ODFBNTk0MUY4NkRF
MTUyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNlMTI3NDNkLWQ1NmQtNGE3Ny05
MGUyLWM1MmU2ZGZlMDZjMi8wLzMxMzAzMzJlMzEzNzM5MmUzNjM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMxMzAzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7NCMA0GCSqG
SIb3DQEBCwUAA4IBAQB2KyldD7tO87+BLEIrBYbUtnBA5PEBgRh+cdh9nXESkmQL
heP/kbQvUUVoH4wIVMr+i6vh58EHAUHSQu2VhnJUuJjZBbRZ7QhrM5RHhlB6WyaJ
nJlcaCLfQ2lrM8HNErJyH9H2/0N4JoIqdfZVFO6bKdg/PNTiTBPJ7SuaumLIwUhQ
2RgBlaB8VxwvlAvSqAVBVqVi7w8QeSF6MbORgjxL6EKAbp0SqCupJq7ecrJOkmmc
bMm3Yz8lZx7qFk2FjnhgvdPrpbiAHpdotPxSKmQujn1OTE2p7+xtC1is40k491gk
WkobfdBAjfETQI62XjnmWG5aD4gQcYBEWjBrafex
-----END CERTIFICATE-----
Generated at Wed May 13 02:58:37 2026 by rpki-client