
$ rpki-client -vvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa
File: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (raw, json)
Hash identifier: PDocKRP/axnGK/2hTz0jcOJCSSzSK6wE612ykd5rfc4=
Subject key identifier: AC:EE:E5:90:2A:27:FD:15:49:CB:C2:37:D6:71:21:FD:17:9A:6A:F0
Certificate issuer: /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434
Certificate serial: 608BA3BDEE0AEECB11B537C22E7D026F6B580CD1
Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa
Signing time: Sun 03 May 2026 02:29:23 +0000
ROA not before: Sun 03 May 2026 02:24:23 +0000
ROA not after: Sun 02 May 2027 02:29:23 +0000
asID: 147128
IP address blocks: 103.176.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl
rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:8b:a3:bd:ee:0a:ee:cb:11:b5:37:c2:2e:7d:02:6f:6b:58:0c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434
Validity
Not Before: May 3 02:24:23 2026 GMT
Not After : May 2 02:29:23 2027 GMT
Subject: CN=ACEEE5902A27FD1549CBC237D67121FD179A6AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:f5:bf:18:03:19:75:be:1f:62:05:8f:f7:
5b:04:4b:74:21:c7:3f:3f:20:42:ab:39:4d:a6:9e:
72:cf:36:35:c0:32:ef:61:fd:5f:5e:da:a7:d3:d3:
15:0f:05:24:46:ee:a2:0b:21:89:71:09:2d:db:60:
70:1f:b3:95:1e:ab:24:9b:ed:e6:eb:e4:5e:23:df:
0d:d8:ec:dd:ba:d0:f0:75:eb:94:a8:6e:a7:f8:55:
9e:4a:5e:5d:59:4d:4b:a5:ed:c0:bd:c4:c0:06:2e:
0a:0a:11:09:e1:33:70:7d:dd:92:48:b5:8f:c3:11:
c1:71:a6:2f:d7:20:41:f3:c1:4e:c3:d0:b7:4c:a1:
0a:12:67:a9:7e:2d:c6:72:58:1f:9b:4b:10:d8:da:
8d:3f:8a:63:9f:88:db:08:05:15:3c:23:e4:2f:a1:
4c:43:9e:4b:51:7e:00:09:7d:2a:b8:e8:4c:c4:b7:
82:a7:58:24:f3:2b:83:98:0e:27:2a:f7:05:d1:e0:
4d:2a:b3:ea:c6:bc:39:c3:eb:7b:d1:d6:9b:ca:6c:
ae:e6:6f:df:06:59:98:6e:15:29:0a:8d:76:1e:39:
db:87:ce:34:5a:d5:e4:66:8f:3a:0d:fb:69:a4:f6:
e1:1a:aa:1a:8c:e6:da:d4:9b:a3:a5:e6:65:9f:7c:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EE:E5:90:2A:27:FD:15:49:CB:C2:37:D6:71:21:FD:17:9A:6A:F0
X509v3 Authority Key Identifier:
keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.44.0/23
Signature Algorithm: sha256WithRSAEncryption
45:f3:81:af:9c:76:c9:72:23:05:7e:1e:28:7d:72:e8:f2:e4:
96:dd:e5:f8:cf:b4:16:a9:f2:6b:b7:47:e4:fc:45:a6:e2:70:
81:ef:93:f9:60:25:ab:0c:c8:22:d4:63:de:a7:e8:80:09:ef:
3d:11:cf:c9:d2:1c:65:d4:96:e4:7d:e4:38:e0:4b:95:9c:53:
3d:f8:b7:6a:82:3c:0c:b8:15:7f:d4:94:5c:4f:c4:f3:b6:7b:
71:84:f7:86:38:d1:1f:0d:3e:90:6c:ce:5a:86:cd:f4:25:57:
6c:7b:7e:10:a5:20:1b:b3:32:1f:90:0b:60:b1:5a:1b:96:83:
4a:1c:fc:00:b7:9d:86:f1:3d:48:1b:f3:4b:4e:bc:25:a9:12:
89:a5:73:1d:73:57:5a:93:ae:97:ee:d3:49:4f:0b:eb:75:ee:
17:0a:f0:e9:e5:f5:f3:0f:97:fb:0c:40:4a:41:57:34:b6:b1:
8b:87:44:bd:15:f5:7c:5a:63:34:00:be:9d:f3:59:74:5d:71:
c0:5e:5d:ae:89:47:3a:68:2a:40:f8:98:92:b2:e0:71:15:8a:
e8:ba:ba:9a:27:6f:7d:29:1b:61:4d:55:7e:bc:4b:62:7a:cd:
17:9b:2f:3d:f7:89:04:2f:13:10:b3:4b:b3:a3:28:bc:a8:cd:
25:2b:3a:59
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUYIujve4K7ssRtTfCLn0Cb2tYDNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdGQjlC
NDEyOTQzNDAeFw0yNjA1MDMwMjI0MjNaFw0yNzA1MDIwMjI5MjNaMDMxMTAvBgNV
BAMTKEFDRUVFNTkwMkEyN0ZEMTU0OUNCQzIzN0Q2NzEyMUZEMTc5QTZBRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpU/W/GAMZdb4fYgWP91sES3Qh
xz8/IEKrOU2mnnLPNjXAMu9h/V9e2qfT0xUPBSRG7qILIYlxCS3bYHAfs5UeqySb
7ebr5F4j3w3Y7N260PB165Sobqf4VZ5KXl1ZTUul7cC9xMAGLgoKEQnhM3B93ZJI
tY/DEcFxpi/XIEHzwU7D0LdMoQoSZ6l+LcZyWB+bSxDY2o0/imOfiNsIBRU8I+Qv
oUxDnktRfgAJfSq46EzEt4KnWCTzK4OYDicq9wXR4E0qs+rGvDnD63vR1pvKbK7m
b98GWZhuFSkKjXYeOduHzjRa1eRmjzoN+2mk9uEaqhqM5trUm6Ol5mWffJT1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUrO7lkCon/RVJy8I31nEh/ReaavAwHwYDVR0j
BBgwFoAUo/x5jNcRrgho8jWj6nZ/ubQSlDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDMxYTk0MjYtM2MzNS00NzBlLWJmMzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENE
NzExQUUwODY4RjIzNUEzRUE3NjdGQjlCNDEyOTQzNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BM0ZDNzk4Q0Q3MTFBRTA4NjhGMjM1QTNFQTc2N0ZCOUI0MTI5
NDM0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQzMWE5NDI2LTNjMzUtNDcwZS1i
ZjM0LTMwZTdlNDE2MDJjYi8wLzMxMzAzMzJlMzEzNzM2MmUzNDM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDM3MzEzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7AsMA0GCSqG
SIb3DQEBCwUAA4IBAQBF84GvnHbJciMFfh4ofXLo8uSW3eX4z7QWqfJrt0fk/EWm
4nCB75P5YCWrDMgi1GPep+iACe89Ec/J0hxl1JbkfeQ44EuVnFM9+LdqgjwMuBV/
1JRcT8TztntxhPeGONEfDT6QbM5ahs30JVdse34QpSAbszIfkAtgsVobloNKHPwA
t52G8T1IG/NLTrwlqRKJpXMdc1dak66X7tNJTwvrde4XCvDp5fXzD5f7DEBKQVc0
trGLh0S9FfV8WmM0AL6d81l0XXHAXl2uiUc6aCpA+JiSsuBxFYrourqaJ299KRth
TVV+vEties0Xmy8994kELxMQs0uzoyi8qM0lKzpZ
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:41 2026 by rpki-client