
$ rpki-client -vvf rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa
File: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (raw, json)
Hash identifier: adRerI3tyaAoAsC9J+hV/5/qxos6XlWsLUCLBDHVCkI=
Subject key identifier: AF:9B:89:CC:D3:6A:E2:2F:B6:46:66:9A:FD:24:C7:B3:90:C3:00:B9
Certificate issuer: /CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C
Certificate serial: 24F1711FE6DB0FC84CD48B0C3B14D5761461CD54
Authority key identifier: E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa
Signing time: Sun 03 May 2026 02:28:47 +0000
ROA not before: Sun 03 May 2026 02:23:47 +0000
ROA not after: Sun 02 May 2027 02:28:47 +0000
asID: 138821
IP address blocks: 103.136.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl
rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f1:71:1f:e6:db:0f:c8:4c:d4:8b:0c:3b:14:d5:76:14:61:cd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C
Validity
Not Before: May 3 02:23:47 2026 GMT
Not After : May 2 02:28:47 2027 GMT
Subject: CN=AF9B89CCD36AE22FB646669AFD24C7B390C300B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:cb:a3:4f:68:6e:a0:e1:ee:a3:d6:87:e8:
dd:cf:02:1d:3a:3b:67:c2:b6:3f:3f:cf:4c:02:bc:
14:2e:e6:ec:62:72:6a:94:b1:ab:5e:48:b2:5e:76:
6b:fc:66:44:3b:6e:ab:7f:db:b3:07:ac:76:18:9f:
93:2e:89:08:d0:a1:78:3a:fb:cf:71:d3:43:84:36:
45:85:c1:45:72:b4:71:21:d8:1a:db:ef:a4:69:d1:
66:50:a0:e5:ee:03:d1:d6:95:cd:47:e1:8e:d7:4a:
af:03:0a:fa:10:11:4d:3d:e5:ae:a4:09:6f:6b:d8:
43:ca:27:5c:67:04:ee:3b:6f:84:ed:75:61:9c:53:
1b:1d:df:a9:a3:ff:f0:14:6c:5e:74:95:70:10:bb:
28:a6:b4:a6:a3:99:05:0c:e2:4f:5b:4c:44:27:35:
2f:25:de:5f:bc:c9:84:3a:77:0c:74:ac:c6:d6:3d:
6e:4e:ed:32:aa:06:06:4f:0a:ad:8c:49:2b:71:ef:
f9:21:43:f7:38:72:c0:29:dc:7c:40:f0:24:a6:07:
54:fb:70:55:a4:ba:17:d8:1d:27:33:a5:b2:db:68:
f5:7b:c5:cf:93:54:0f:27:b8:40:75:5d:c5:bc:cb:
42:b4:8b:98:02:08:d4:f3:39:85:44:49:54:50:dd:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9B:89:CC:D3:6A:E2:2F:B6:46:66:9A:FD:24:C7:B3:90:C3:00:B9
X509v3 Authority Key Identifier:
keyid:E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.12.0/22
Signature Algorithm: sha256WithRSAEncryption
76:fe:3b:d0:98:ae:7a:2b:87:2a:ba:a8:ea:08:ba:9c:68:77:
08:f7:92:73:74:df:78:75:b2:fd:ce:39:4d:1b:9f:f8:fd:9c:
95:48:5a:37:0e:21:6e:9f:94:e1:71:53:60:2d:ff:74:9b:cd:
3a:c1:58:3b:fa:07:0d:0a:f0:38:43:64:5c:f8:6b:23:6e:fd:
aa:1d:ce:8d:f4:18:68:3c:94:f6:79:23:24:a1:b0:d7:00:d2:
6d:00:98:3a:be:1f:75:b2:2a:5e:44:32:da:74:f6:b0:01:00:
bc:c1:57:c6:80:39:a8:4f:0c:bc:8c:fb:6a:82:1a:f0:72:0d:
5c:a2:11:d3:6e:02:12:78:95:55:01:9f:ee:d7:4c:a0:ad:6a:
89:b9:8d:9c:3e:d2:8d:7a:b9:8d:60:70:d0:1b:6c:50:42:6a:
e0:d6:35:b9:22:82:ba:fc:04:33:5a:0e:77:d9:af:49:8e:19:
5d:b5:17:07:bc:63:de:d9:03:a0:7a:7d:c2:31:fd:57:10:4b:
cf:a6:1f:e1:a5:1b:f8:f7:a7:e8:78:15:a1:16:a9:e9:ff:59:
54:54:8c:f4:27:27:3e:b6:1d:11:93:73:a4:be:f4:9e:09:ec:
32:cd:d0:0d:59:e4:c0:c1:d8:53:2e:ce:81:5e:32:97:80:57:
4f:1f:c4:de
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJPFxH+bbD8hM1IsMOxTVdhRhzVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlFRDA3MDU5RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJE
MDA1NjcyQzAeFw0yNjA1MDMwMjIzNDdaFw0yNzA1MDIwMjI4NDdaMDMxMTAvBgNV
BAMTKEFGOUI4OUNDRDM2QUUyMkZCNjQ2NjY5QUZEMjRDN0IzOTBDMzAwQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxG8ujT2huoOHuo9aH6N3PAh06
O2fCtj8/z0wCvBQu5uxicmqUsateSLJedmv8ZkQ7bqt/27MHrHYYn5MuiQjQoXg6
+89x00OENkWFwUVytHEh2Brb76Rp0WZQoOXuA9HWlc1H4Y7XSq8DCvoQEU095a6k
CW9r2EPKJ1xnBO47b4TtdWGcUxsd36mj//AUbF50lXAQuyimtKajmQUM4k9bTEQn
NS8l3l+8yYQ6dwx0rMbWPW5O7TKqBgZPCq2MSStx7/khQ/c4csAp3HxA8CSmB1T7
cFWkuhfYHSczpbLbaPV7xc+TVA8nuEB1XcW8y0K0i5gCCNTzOYVESVRQ3dV1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUr5uJzNNq4i+2Rmaa/STHs5DDALkwHwYDVR0j
BBgwFoAU6e0HBZ6wH2G/apAusNlfktAFZywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDAxYjFjMWItNjU2Yy00ODlkLTllZDMtY2NjNzdjODMwMThkLzAvRTlFRDA3MDU5
RUIwMUY2MUJGNkE5MDJFQjBEOTVGOTJEMDA1NjcyQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FOUVEMDcwNTlFQjAxRjYxQkY2QTkwMkVCMEQ5NUY5MkQwMDU2
NzJDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQwMWIxYzFiLTY1NmMtNDg5ZC05
ZWQzLWNjYzc3YzgzMDE4ZC8wLzMxMzAzMzJlMzEzMzM2MmUzMTMyMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4gMMA0GCSqG
SIb3DQEBCwUAA4IBAQB2/jvQmK56K4cquqjqCLqcaHcI95JzdN94dbL9zjlNG5/4
/ZyVSFo3DiFun5ThcVNgLf90m806wVg7+gcNCvA4Q2Rc+Gsjbv2qHc6N9BhoPJT2
eSMkobDXANJtAJg6vh91sipeRDLadPawAQC8wVfGgDmoTwy8jPtqghrwcg1cohHT
bgISeJVVAZ/u10ygrWqJuY2cPtKNermNYHDQG2xQQmrg1jW5IoK6/AQzWg532a9J
jhldtRcHvGPe2QOgen3CMf1XEEvPph/hpRv496foeBWhFqnp/1lUVIz0Jyc+th0R
k3OkvvSeCewyzdANWeTAwdhTLs6BXjKXgFdPH8Te
-----END CERTIFICATE-----
Generated at Wed May 13 04:02:53 2026 by rpki-client