
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa
File: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (raw, json)
Hash identifier: 3M/zffCD2uZ4gUtU0kj+QpLY9M8dXiZOvxPEwukMu5g=
Subject key identifier: D2:60:E0:D2:83:63:95:3D:3C:95:5C:DC:01:58:B4:AC:7C:D6:A3:45
Certificate issuer: /CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC
Certificate serial: 6DC047FB066BB7989AC58BC51811C7C7978DD9B8
Authority key identifier: B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa
Signing time: Sun 03 May 2026 02:37:43 +0000
ROA not before: Sun 03 May 2026 02:32:43 +0000
ROA not after: Sun 02 May 2027 02:37:43 +0000
asID: 149943
IP address blocks: 103.191.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl
rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c0:47:fb:06:6b:b7:98:9a:c5:8b:c5:18:11:c7:c7:97:8d:d9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC
Validity
Not Before: May 3 02:32:43 2026 GMT
Not After : May 2 02:37:43 2027 GMT
Subject: CN=D260E0D28363953D3C955CDC0158B4AC7CD6A345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:58:31:e6:97:53:8f:fc:e7:b7:fc:9b:f6:
82:95:0a:ab:a7:91:e1:c7:45:60:13:62:93:2e:9e:
db:e4:99:6e:a9:87:24:3e:dd:a9:53:ff:33:5a:90:
79:ef:69:fd:3b:dd:00:fa:ce:ea:4d:f0:de:58:0b:
21:fe:56:df:d3:f9:3e:dd:91:da:a6:1c:52:29:ac:
25:8d:75:5f:4a:55:1e:88:d6:f2:64:53:96:ec:84:
65:1a:cf:89:7c:0a:60:d8:91:65:91:a7:76:19:70:
d3:93:67:fb:ed:1f:8d:b6:01:df:05:a2:6d:9b:b2:
23:24:e2:cf:d5:22:1b:22:48:75:16:f4:28:52:61:
6e:4f:49:2a:0e:ca:80:e8:53:50:b9:a5:10:0f:06:
a6:97:26:37:b2:af:d7:ae:df:ef:84:44:91:e4:7d:
a4:32:7e:62:3b:9d:e0:33:9c:cd:46:09:bc:be:a5:
1d:65:af:11:f8:33:69:e3:35:31:e2:68:16:2b:82:
cc:96:26:da:c7:43:8d:4d:aa:4a:16:45:f3:97:1c:
bb:d4:69:94:ed:13:71:5d:b5:de:14:05:c8:34:53:
47:fe:80:7c:e0:a9:50:40:11:ea:a9:fe:fa:7b:58:
06:cc:db:bc:fa:26:10:28:6d:89:66:88:43:17:77:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:60:E0:D2:83:63:95:3D:3C:95:5C:DC:01:58:B4:AC:7C:D6:A3:45
X509v3 Authority Key Identifier:
keyid:B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.255.0/24
Signature Algorithm: sha256WithRSAEncryption
99:69:14:21:fa:1c:a8:4c:3d:ab:ff:9d:aa:67:77:7e:7e:03:
55:c0:9e:87:ba:6d:a1:6b:e9:47:00:75:9d:e4:34:fb:4d:9a:
ee:c8:bb:c6:28:a0:15:a4:a1:cf:06:0d:67:c6:b5:7a:8c:08:
1a:9d:8a:61:64:a1:5a:aa:2d:79:af:0f:73:36:03:4f:b5:93:
10:b0:16:75:b9:06:3d:91:37:19:d0:26:34:2a:fc:06:e8:32:
33:a9:04:89:13:ed:41:74:a5:be:c1:9a:4b:6d:3e:83:ed:5f:
b1:10:52:89:f7:ed:92:85:ae:c4:dc:e1:a4:5c:fa:91:23:18:
de:25:0f:bf:b6:a8:98:69:d5:93:be:76:d9:88:db:58:4f:0a:
c6:3d:a2:11:93:f3:01:e6:62:ad:0d:3f:12:e3:7e:41:e0:04:
a5:5f:c9:af:dd:83:ba:1f:8c:15:87:41:40:e1:b6:29:0c:d6:
0b:98:71:2b:63:87:f6:29:71:bb:2b:3f:9f:64:df:8b:6b:b5:
03:e4:97:e5:0c:98:dc:a2:50:51:7b:f1:08:49:51:f7:23:53:
c2:aa:0f:3e:9f:c2:8f:73:1a:5c:e9:18:03:04:2a:56:6a:ef:
42:ff:ef:bd:95:83:b2:54:ed:01:7f:1e:5e:f1:21:f1:6f:ea:
cd:16:73:dd
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUbcBH+wZrt5iaxYvFGBHHx5eN2bgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3
RDRENzJCQzAeFw0yNjA1MDMwMjMyNDNaFw0yNzA1MDIwMjM3NDNaMDMxMTAvBgNV
BAMTKEQyNjBFMEQyODM2Mzk1M0QzQzk1NUNEQzAxNThCNEFDN0NENkEzNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7Fgx5pdTj/znt/yb9oKVCqun
keHHRWATYpMuntvkmW6phyQ+3alT/zNakHnvaf073QD6zupN8N5YCyH+Vt/T+T7d
kdqmHFIprCWNdV9KVR6I1vJkU5bshGUaz4l8CmDYkWWRp3YZcNOTZ/vtH422Ad8F
om2bsiMk4s/VIhsiSHUW9ChSYW5PSSoOyoDoU1C5pRAPBqaXJjeyr9eu3++ERJHk
faQyfmI7neAznM1GCby+pR1lrxH4M2njNTHiaBYrgsyWJtrHQ41NqkoWRfOXHLvU
aZTtE3Fdtd4UBcg0U0f+gHzgqVBAEeqp/vp7WAbM27z6JhAobYlmiEMXd3+1AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU0mDg0oNjlT08lVzcAVi0rHzWo0UwHwYDVR0j
BBgwFoAUsp2H4Hiu0UJv5928FEFaK31NcrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjA5OGY5MjQtOWYyZS00OTliLTgxMDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3
OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3RDRENzJCQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMjlEODdFMDc4QUVEMTQyNkZFN0REQkMxNDQxNUEyQjdENEQ3
MkJDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYwOThmOTI0LTlmMmUtNDk5Yi04
MTAxLTAyZjc1MDY5MzJiZi8wLzMxMzAzMzJlMzEzOTMxMmUzMjM1MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnv/8wDQYJ
KoZIhvcNAQELBQADggEBAJlpFCH6HKhMPav/napnd35+A1XAnoe6baFr6UcAdZ3k
NPtNmu7Iu8YooBWkoc8GDWfGtXqMCBqdimFkoVqqLXmvD3M2A0+1kxCwFnW5Bj2R
NxnQJjQq/AboMjOpBIkT7UF0pb7BmkttPoPtX7EQUon37ZKFrsTc4aRc+pEjGN4l
D7+2qJhp1ZO+dtmI21hPCsY9ohGT8wHmYq0NPxLjfkHgBKVfya/dg7ofjBWHQUDh
tikM1guYcStjh/YpcbsrP59k34trtQPkl+UMmNyiUFF78QhJUfcjU8KqDz6fwo9z
GlzpGAMEKlZq70L/772Vg7JU7QF/Hl7xIfFv6s0Wc90=
-----END CERTIFICATE-----
Generated at Wed May 13 12:08:23 2026 by rpki-client