
$ rpki-client -vvf rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa
File: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: d3o2aJg5sY9JGfN+Wb+JV5Ly3qfvYxcESwubxcNcZ8g=
Subject key identifier: 06:54:90:CA:0C:98:4B:EA:FE:18:2E:A2:9C:69:63:DD:F0:79:E4:41
Certificate issuer: /CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
Certificate serial: 2CDBFEB45DD438B91553037E78F2C17EB5934FFA
Authority key identifier: 02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:33:29 +0000
ROA not before: Sun 03 May 2026 02:28:29 +0000
ROA not after: Sun 02 May 2027 02:33:29 +0000
asID: 58369
IP address blocks: 103.121.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl
rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:db:fe:b4:5d:d4:38:b9:15:53:03:7e:78:f2:c1:7e:b5:93:4f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
Validity
Not Before: May 3 02:28:29 2026 GMT
Not After : May 2 02:33:29 2027 GMT
Subject: CN=065490CA0C984BEAFE182EA29C6963DDF079E441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:38:62:f6:29:c1:93:e3:a8:73:97:7c:79:
8c:a6:83:c5:2a:a6:33:c0:ac:e9:c9:7b:67:0f:48:
b8:e6:02:17:a5:d7:61:51:e2:ce:b0:01:4a:1c:7e:
bc:f7:1a:a5:31:65:f5:f9:c9:33:11:3a:03:12:cc:
16:29:5c:fc:18:b7:75:6c:89:6d:d6:c0:7c:98:29:
41:3e:2c:03:ef:ab:18:7b:68:12:f6:3b:51:e2:e5:
d0:ee:4b:80:5a:a2:33:73:05:77:0c:9f:5d:53:c6:
ef:92:13:dd:cc:7f:09:30:13:43:6d:73:0d:07:cd:
68:17:dd:96:8e:fe:60:1b:70:d5:9b:49:fd:42:77:
fe:86:8b:53:9c:13:eb:bf:cd:05:6a:93:ca:2f:7f:
e2:0e:f3:21:9d:f4:a0:97:24:1b:61:fd:86:1c:47:
03:c6:91:0c:9e:7a:6d:40:c7:1f:c2:c6:5a:4d:c9:
30:e3:96:7a:a7:47:bb:dc:04:ee:6a:0d:ff:e5:a8:
42:5f:91:f7:65:a6:d9:2a:1e:5e:6f:3d:7c:51:26:
30:96:10:7f:16:50:63:4c:d6:59:bd:a1:bb:4c:13:
d7:bf:7d:68:93:bc:4a:fa:77:01:27:c9:91:5e:72:
69:be:ef:f4:e4:82:b8:c8:2d:6f:4b:b5:66:9c:c9:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:54:90:CA:0C:98:4B:EA:FE:18:2E:A2:9C:69:63:DD:F0:79:E4:41
X509v3 Authority Key Identifier:
keyid:02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.149.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4d:8a:03:08:ee:2a:41:b4:df:fa:76:d6:16:c0:14:71:58:
31:ee:b2:87:50:19:a9:13:a1:8a:af:1b:db:4f:1d:70:98:31:
1e:e2:f7:17:f6:21:b6:36:a4:86:6c:c5:5a:aa:5a:6e:db:dd:
78:5e:59:8e:ed:4d:73:32:de:ee:58:a8:f9:00:19:de:5c:46:
43:02:dd:10:7a:5c:a5:a9:5b:a1:b4:dd:07:2e:95:60:d3:5a:
90:26:4e:e2:c2:d4:c5:cf:e7:fb:f0:14:1c:46:34:c2:ca:45:
4d:f8:48:d5:56:08:55:08:db:1b:81:c7:1d:eb:e4:19:13:c0:
e6:49:f2:f2:04:98:3c:6b:07:83:61:58:14:c1:43:38:6e:aa:
e2:5a:c7:c5:40:56:d6:66:8a:8b:75:8d:ec:36:ff:65:8c:91:
fc:ea:8c:a0:4c:73:b5:b2:df:a8:18:14:7d:be:ce:a2:e5:0c:
c0:6f:4a:ee:e8:d2:64:66:d0:8d:0a:a5:ea:ed:39:3e:08:dd:
7f:2b:f9:a2:d5:00:7f:f4:ac:6c:b9:dc:ac:c9:c3:20:11:a5:
37:4e:6f:6a:01:7e:2d:97:70:4e:e0:51:74:74:32:a3:d2:2f:
15:45:29:78:89:1f:fb:ff:32:53:89:eb:29:0d:be:ee:0f:04:
0e:9e:02:5f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULNv+tF3UOLkVUwN+ePLBfrWTT/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJBOEVEMDc3QzAzRTQzQzMzOERGQzE0RDYxOTJFNDZE
QTUzNEI1MjAeFw0yNjA1MDMwMjI4MjlaFw0yNzA1MDIwMjMzMjlaMDMxMTAvBgNV
BAMTKDA2NTQ5MENBMEM5ODRCRUFGRTE4MkVBMjlDNjk2M0RERjA3OUU0NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWzhi9inBk+Ooc5d8eYymg8Uq
pjPArOnJe2cPSLjmAhel12FR4s6wAUocfrz3GqUxZfX5yTMROgMSzBYpXPwYt3Vs
iW3WwHyYKUE+LAPvqxh7aBL2O1Hi5dDuS4BaojNzBXcMn11Txu+SE93MfwkwE0Nt
cw0HzWgX3ZaO/mAbcNWbSf1Cd/6Gi1OcE+u/zQVqk8ovf+IO8yGd9KCXJBth/YYc
RwPGkQyeem1Axx/CxlpNyTDjlnqnR7vcBO5qDf/lqEJfkfdlptkqHl5vPXxRJjCW
EH8WUGNM1lm9obtME9e/fWiTvEr6dwEnyZFecmm+7/TkgrjILW9LtWacyWoFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUBlSQygyYS+r+GC6inGlj3fB55EEwHwYDVR0j
BBgwFoAUAqjtB3wD5DwzjfwU1hkuRtpTS1IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTNiMTQ2YTItNzcxNS00NTlmLTgyNDQtOGIzMmEzNjQ2NjNjLzAvMDJBOEVEMDc3
QzAzRTQzQzMzOERGQzE0RDYxOTJFNDZEQTUzNEI1Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMkE4RUQwNzdDMDNFNDNDMzM4REZDMTRENjE5MkU0NkRBNTM0
QjUyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUzYjE0NmEyLTc3MTUtNDU5Zi04
MjQ0LThiMzJhMzY0NjYzYy8wLzMxMzAzMzJlMzEzMjMxMmUzMTM0MzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3mVMA0GCSqG
SIb3DQEBCwUAA4IBAQCGTYoDCO4qQbTf+nbWFsAUcVgx7rKHUBmpE6GKrxvbTx1w
mDEe4vcX9iG2NqSGbMVaqlpu2914XlmO7U1zMt7uWKj5ABneXEZDAt0QelylqVuh
tN0HLpVg01qQJk7iwtTFz+f78BQcRjTCykVN+EjVVghVCNsbgccd6+QZE8DmSfLy
BJg8aweDYVgUwUM4bqriWsfFQFbWZoqLdY3sNv9ljJH86oygTHO1st+oGBR9vs6i
5QzAb0ru6NJkZtCNCqXq7Tk+CN1/K/mi1QB/9KxsudysycMgEaU3Tm9qAX4tl3BO
4FF0dDKj0i8VRSl4iR/7/zJTiespDb7uDwQOngJf
-----END CERTIFICATE-----
Generated at Wed May 13 10:54:54 2026 by rpki-client