
$ rpki-client -vvf rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa
File: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (raw, json)
Hash identifier: 6XmdhHpwmPbSLXc9MObJukxUpYpgVWG679zPioXW/jI=
Subject key identifier: A5:E3:3A:73:32:AB:AE:88:AC:40:63:A1:06:31:83:ED:F3:20:D7:9B
Certificate issuer: /CN=096E75D80B559B9824609BA61681D845A0CB0F77
Certificate serial: 489C7AC00C70D858010CE1EF182D9D3872CDFE86
Authority key identifier: 09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa
Signing time: Sun 03 May 2026 02:33:44 +0000
ROA not before: Sun 03 May 2026 02:28:44 +0000
ROA not after: Sun 02 May 2027 02:33:44 +0000
asID: 147090
IP address blocks: 103.173.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl
rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:9c:7a:c0:0c:70:d8:58:01:0c:e1:ef:18:2d:9d:38:72:cd:fe:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096E75D80B559B9824609BA61681D845A0CB0F77
Validity
Not Before: May 3 02:28:44 2026 GMT
Not After : May 2 02:33:44 2027 GMT
Subject: CN=A5E33A7332ABAE88AC4063A1063183EDF320D79B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:5c:07:0d:ec:21:e0:a9:43:6e:83:10:fc:
81:ea:47:a6:31:35:f2:1b:7e:99:5e:12:1b:eb:4e:
bb:d6:e0:42:ad:f8:db:83:65:a4:fa:82:9a:4c:f7:
81:73:bb:a5:c9:72:06:4d:08:ec:1b:17:af:eb:2a:
65:17:73:95:9e:0e:0c:f2:7f:2c:fa:ac:7f:5c:40:
c7:b6:73:33:d0:3e:4f:95:96:9c:d2:2c:0d:29:97:
41:67:a3:02:f5:df:1e:74:7d:51:34:bd:91:79:99:
6c:7f:95:3c:56:9c:f9:36:ba:ef:63:62:58:1d:b0:
2c:99:09:88:62:b6:8f:a4:98:da:9b:c4:08:d5:26:
a2:7b:63:bb:2a:3d:62:75:52:0f:c5:c6:ae:15:78:
98:1c:2a:bb:e7:22:d3:cd:e0:87:5d:04:db:d2:90:
55:b5:8b:4c:ae:74:18:6e:48:58:7c:5f:a4:b2:05:
60:f8:a3:6a:4d:76:97:29:9b:41:fe:25:d7:50:9c:
2c:0c:a4:76:c0:90:1d:8b:7c:7e:8f:c5:ea:48:65:
28:9e:a3:8a:8d:28:cd:d5:23:13:a0:8a:1a:a7:3d:
35:fe:b2:1a:7c:ca:c9:a2:26:2c:dd:d6:4f:7a:f6:
f5:d3:db:d6:31:b4:b6:2c:d8:fb:7d:eb:e1:cc:26:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E3:3A:73:32:AB:AE:88:AC:40:63:A1:06:31:83:ED:F3:20:D7:9B
X509v3 Authority Key Identifier:
keyid:09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.143.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a9:49:60:4f:15:b7:cd:91:58:97:90:ab:5d:94:04:46:27:
99:47:f5:9c:d7:7a:94:5a:b6:55:c0:13:5d:67:3b:0f:f7:52:
c4:7d:58:4e:15:00:fc:39:a9:0c:8d:5b:6c:c8:bc:2a:04:bd:
7b:eb:bd:0d:ab:90:ca:95:d7:49:51:ab:ca:42:65:23:9c:56:
43:8a:40:3f:c4:9e:4c:65:2f:6a:10:c3:2e:ca:67:ca:5c:b1:
f3:7c:24:a4:e9:ba:28:df:3d:2f:4d:28:64:2b:4d:68:1f:51:
ca:b9:22:b7:e2:51:6a:ea:8a:8d:f6:cd:1a:be:3f:ff:00:7f:
29:37:78:13:46:3f:62:28:32:9a:20:8e:c4:47:f6:ab:67:7e:
f3:ce:ac:43:a6:f4:1f:09:28:73:64:cb:b2:68:7d:ad:81:5e:
bc:86:dc:e1:cf:90:80:99:51:7a:1f:6f:d1:3c:3b:83:2c:cd:
11:6a:0e:90:69:bc:66:e6:c2:df:6a:29:cf:0b:91:96:69:58:
d7:83:a5:02:cf:5f:dc:72:b8:7c:f9:3a:b3:6d:32:97:cc:2f:
ea:0e:b0:3a:83:95:73:77:34:75:c5:7b:e4:d6:75:ab:93:27:
c2:12:21:94:d9:15:43:6b:88:f8:54:32:b2:bf:95:c1:8c:ed:
e5:bb:d2:ac
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUSJx6wAxw2FgBDOHvGC2dOHLN/oYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2RTc1RDgwQjU1OUI5ODI0NjA5QkE2MTY4MUQ4NDVB
MENCMEY3NzAeFw0yNjA1MDMwMjI4NDRaFw0yNzA1MDIwMjMzNDRaMDMxMTAvBgNV
BAMTKEE1RTMzQTczMzJBQkFFODhBQzQwNjNBMTA2MzE4M0VERjMyMEQ3OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRxFwHDewh4KlDboMQ/IHqR6Yx
NfIbfpleEhvrTrvW4EKt+NuDZaT6gppM94Fzu6XJcgZNCOwbF6/rKmUXc5WeDgzy
fyz6rH9cQMe2czPQPk+VlpzSLA0pl0FnowL13x50fVE0vZF5mWx/lTxWnPk2uu9j
YlgdsCyZCYhito+kmNqbxAjVJqJ7Y7sqPWJ1Ug/Fxq4VeJgcKrvnItPN4IddBNvS
kFW1i0yudBhuSFh8X6SyBWD4o2pNdpcpm0H+JddQnCwMpHbAkB2LfH6PxepIZSie
o4qNKM3VIxOgihqnPTX+shp8ysmiJizd1k969vXT29YxtLYs2Pt96+HMJu1lAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUpeM6czKrroisQGOhBjGD7fMg15swHwYDVR0j
BBgwFoAUCW512AtVm5gkYJumFoHYRaDLD3cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTRmMTM3MmMtNDNhNi00ZmRhLWI1MGUtZDAxZWI0MmM2ODlmLzAvMDk2RTc1RDgw
QjU1OUI5ODI0NjA5QkE2MTY4MUQ4NDVBMENCMEY3Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wOTZFNzVEODBCNTU5Qjk4MjQ2MDlCQTYxNjgxRDg0NUEwQ0Iw
Rjc3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU0ZjEzNzJjLTQzYTYtNGZkYS1i
NTBlLWQwMWViNDJjNjg5Zi8wLzMxMzAzMzJlMzEzNzMzMmUzMTM0MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM5MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrY8wDQYJ
KoZIhvcNAQELBQADggEBAFqpSWBPFbfNkViXkKtdlARGJ5lH9ZzXepRatlXAE11n
Ow/3UsR9WE4VAPw5qQyNW2zIvCoEvXvrvQ2rkMqV10lRq8pCZSOcVkOKQD/Enkxl
L2oQwy7KZ8pcsfN8JKTpuijfPS9NKGQrTWgfUcq5IrfiUWrqio32zRq+P/8Afyk3
eBNGP2IoMpogjsRH9qtnfvPOrEOm9B8JKHNky7Jofa2BXryG3OHPkICZUXofb9E8
O4MszRFqDpBpvGbmwt9qKc8LkZZpWNeDpQLPX9xyuHz5OrNtMpfML+oOsDqDlXN3
NHXFe+TWdauTJ8ISIZTZFUNriPhUMrK/lcGM7eW70qw=
-----END CERTIFICATE-----
Generated at Wed May 13 10:36:18 2026 by rpki-client