
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa
File: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (raw, json)
Hash identifier: Ddp99iEiqxgSmFTLQHQMXfkIYPgQQyvtEFD4USDAJlo=
Subject key identifier: 87:CE:FD:43:3A:57:5F:BF:5F:56:E5:C6:0B:C2:1A:CD:FC:7F:62:8F
Certificate issuer: /CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7
Certificate serial: 0F3C243CD805E7BD76604553F8FE3B514FE134D3
Authority key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa
Signing time: Sun 03 May 2026 02:35:34 +0000
ROA not before: Sun 03 May 2026 02:30:34 +0000
ROA not after: Sun 02 May 2027 02:35:34 +0000
asID: 139424
IP address blocks: 103.144.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl
rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:3c:24:3c:d8:05:e7:bd:76:60:45:53:f8:fe:3b:51:4f:e1:34:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7
Validity
Not Before: May 3 02:30:34 2026 GMT
Not After : May 2 02:35:34 2027 GMT
Subject: CN=87CEFD433A575FBF5F56E5C60BC21ACDFC7F628F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:99:47:09:53:5a:55:cb:b5:4a:3b:80:7b:a1:
de:63:a9:c1:17:7d:c6:c8:18:82:00:73:ee:18:f5:
c8:f9:52:5c:9e:11:73:07:13:00:f7:6d:45:7d:44:
d9:1f:c3:ff:e5:9e:f4:ff:66:4c:35:7e:6f:ad:f8:
f1:61:44:9d:ba:90:cf:5f:e1:53:0b:ba:39:42:3c:
4d:c3:b8:ff:0f:d0:4a:a8:52:ed:2c:4d:2e:2e:3c:
11:ab:22:38:3a:65:a1:8a:97:73:74:a2:0a:1e:cb:
4c:bd:97:da:eb:7d:09:b8:08:27:cd:8c:7f:b9:1d:
cc:ae:74:21:5d:82:87:1a:01:81:86:c3:10:9a:20:
ed:4b:39:32:94:55:1a:73:90:0c:a5:5c:3a:07:92:
00:0d:2f:15:ba:7b:94:41:91:7c:f2:71:0a:31:4d:
f4:d2:a4:d2:f9:ae:c9:e1:81:7b:ed:cb:39:d7:a9:
8a:ce:ed:d1:2f:f2:8a:c5:59:97:7f:92:78:cf:83:
82:92:f4:aa:fa:ae:d1:b9:cf:97:19:09:d2:ff:5f:
11:7a:1a:a2:4e:3f:01:85:cf:a6:bc:b5:79:7e:84:
cf:4f:ac:22:a0:5f:78:17:0b:b0:f5:79:a5:11:5b:
00:e3:20:c2:f2:a5:98:81:13:f6:69:c1:dd:ec:db:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CE:FD:43:3A:57:5F:BF:5F:56:E5:C6:0B:C2:1A:CD:FC:7F:62:8F
X509v3 Authority Key Identifier:
keyid:BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.39.0/24
Signature Algorithm: sha256WithRSAEncryption
89:7f:eb:6e:81:1c:84:5f:93:6f:58:ec:a8:e8:d8:ac:e7:cc:
a5:5b:e6:1e:cf:a2:90:2d:6a:4f:64:e6:a0:8e:27:80:f4:49:
d7:d1:5d:b9:6b:42:c7:56:e6:15:2a:6a:f9:86:4c:ad:27:30:
22:47:5d:c7:ee:78:a5:44:5d:dc:6b:c9:5e:c8:80:85:93:99:
34:bb:2b:70:ab:1e:e5:0a:1e:2c:4c:4d:fe:61:2b:22:95:1e:
3d:de:36:74:53:dc:6c:53:ac:7a:53:3d:1c:34:6f:0f:47:cd:
c1:7a:1f:8f:53:a4:0f:53:86:31:9a:c2:6e:95:d1:2f:29:61:
b2:56:c7:06:57:30:47:22:ed:fb:04:b0:88:54:a7:80:6b:f0:
9c:13:f8:18:13:7f:7a:ab:ee:b9:03:e5:08:26:4a:86:a8:49:
34:c3:fd:ba:d7:df:9b:ec:8b:37:a9:5a:b6:a0:d1:ee:d5:cd:
5f:cf:f9:98:a6:1a:89:02:a5:91:c2:50:62:29:38:e3:4d:ae:
55:24:7f:76:80:b4:96:6b:0c:ab:f7:4d:18:56:2b:38:5a:60:
3a:1d:18:15:56:7f:07:11:3e:76:2a:53:a2:da:d9:8e:93:54:
5f:3a:ca:d7:30:c4:74:0b:19:96:6c:4c:c8:43:cf:66:b7:a4:
2d:a5:d2:a8
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDzwkPNgF5712YEVT+P47UU/hNNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3
RkIxQzJDNzAeFw0yNjA1MDMwMjMwMzRaFw0yNzA1MDIwMjM1MzRaMDMxMTAvBgNV
BAMTKDg3Q0VGRDQzM0E1NzVGQkY1RjU2RTVDNjBCQzIxQUNERkM3RjYyOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDomUcJU1pVy7VKO4B7od5jqcEX
fcbIGIIAc+4Y9cj5UlyeEXMHEwD3bUV9RNkfw//lnvT/Zkw1fm+t+PFhRJ26kM9f
4VMLujlCPE3DuP8P0EqoUu0sTS4uPBGrIjg6ZaGKl3N0ogoey0y9l9rrfQm4CCfN
jH+5HcyudCFdgocaAYGGwxCaIO1LOTKUVRpzkAylXDoHkgANLxW6e5RBkXzycQox
TfTSpNL5rsnhgXvtyznXqYrO7dEv8orFWZd/knjPg4KS9Kr6rtG5z5cZCdL/XxF6
GqJOPwGFz6a8tXl+hM9PrCKgX3gXC7D1eaURWwDjIMLypZiBE/Zpwd3s27q1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUh879QzpXX79fVuXGC8Iazfx/Yo8wHwYDVR0j
BBgwFoAUu3pYSp+8m2QqA6SKqkZF63+xwscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWFiMGE1OWEtNjFiYS00NjJlLWE4MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5
RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3RkIxQzJDNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQjdBNTg0QTlGQkM5QjY0MkEwM0E0OEFBQTQ2NDVFQjdGQjFD
MkM3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhYjBhNTlhLTYxYmEtNDYyZS1h
ODJhLWEyMDJiN2ZiODBmMC8wLzMxMzAzMzJlMzEzNDM0MmUzMzM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5AnMA0GCSqG
SIb3DQEBCwUAA4IBAQCJf+tugRyEX5NvWOyo6Nis58ylW+Yez6KQLWpPZOagjieA
9EnX0V25a0LHVuYVKmr5hkytJzAiR13H7nilRF3ca8leyICFk5k0uytwqx7lCh4s
TE3+YSsilR493jZ0U9xsU6x6Uz0cNG8PR83Beh+PU6QPU4YxmsJuldEvKWGyVscG
VzBHIu37BLCIVKeAa/CcE/gYE396q+65A+UIJkqGqEk0w/2619+b7Is3qVq2oNHu
1c1fz/mYphqJAqWRwlBiKTjjTa5VJH92gLSWawyr900YVis4WmA6HRgVVn8HET52
KlOi2tmOk1RfOsrXMMR0CxmWbEzIQ89mt6QtpdKo
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:57 2026 by rpki-client