
$ rpki-client -vvf rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa
File: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (raw, json)
Hash identifier: P+tA2MRxWl0o3RHVswwy2Vb5fc9y+6/a967dCUK4/QA=
Subject key identifier: 69:4E:E5:F1:3E:97:54:8C:F1:3B:61:30:58:52:48:96:72:FF:63:BA
Certificate issuer: /CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750
Certificate serial: 31AFF8C36D4D5145F0FE67A770F2EF649B99754B
Authority key identifier: BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa
Signing time: Sun 03 May 2026 02:37:49 +0000
ROA not before: Sun 03 May 2026 02:32:49 +0000
ROA not after: Sun 02 May 2027 02:37:49 +0000
asID: 134654
IP address blocks: 103.147.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl
rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:af:f8:c3:6d:4d:51:45:f0:fe:67:a7:70:f2:ef:64:9b:99:75:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750
Validity
Not Before: May 3 02:32:49 2026 GMT
Not After : May 2 02:37:49 2027 GMT
Subject: CN=694EE5F13E97548CF13B61305852489672FF63BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:3e:b1:bd:2c:93:b6:ac:57:57:88:c9:c1:
9c:b3:f5:db:5d:fc:ab:fe:a2:de:af:5f:27:1c:c3:
e9:ec:d2:ce:40:1d:f2:70:04:2a:96:da:cd:4a:42:
91:14:71:e8:80:f9:c8:5b:a6:8c:93:2f:16:12:2c:
c5:7b:a7:f5:86:97:e9:e8:f6:e9:35:9a:4c:a3:6c:
8f:08:7b:b4:88:ff:31:30:c8:d1:9d:09:0d:88:f7:
98:0d:bb:4f:ea:b2:48:24:b2:cd:27:d4:c1:cf:d7:
be:83:4b:80:39:3e:53:19:24:87:53:68:00:de:f7:
0d:0f:2e:0b:37:8d:7e:6f:9f:dc:79:2c:7b:e6:de:
59:3b:ab:94:6e:c0:3c:a8:ed:f0:0f:0c:d2:83:67:
da:ef:bf:19:e6:84:c0:0c:27:04:ad:92:7a:dc:bf:
cf:5b:79:83:c4:35:cb:91:2f:38:ab:21:9b:e1:d7:
05:a9:0c:5e:8a:45:98:96:0f:19:ab:c8:13:93:4a:
b8:13:d3:7e:70:33:86:2c:26:91:74:d1:a2:2b:14:
30:20:e1:10:27:58:e0:6f:2c:55:dd:6f:f3:83:8c:
02:e4:93:a4:08:cb:17:82:7a:a7:79:73:8e:1b:d0:
bb:96:f0:df:fd:44:82:02:41:bc:92:e3:8d:be:ae:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4E:E5:F1:3E:97:54:8C:F1:3B:61:30:58:52:48:96:72:FF:63:BA
X509v3 Authority Key Identifier:
keyid:BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a8:01:ae:51:d2:70:8e:92:db:98:09:ec:64:cf:3b:78:3f:
58:a7:9f:a3:ae:82:30:72:c5:96:cb:fa:bf:ce:cb:f7:fc:5c:
39:28:d1:f6:9f:9c:e4:c4:ca:56:0b:6c:a5:ab:66:1b:38:b3:
96:58:0f:84:79:3e:ff:21:78:6b:22:ef:2b:9d:27:ce:c3:e3:
07:e5:32:c7:33:05:18:15:2e:1c:6f:31:44:70:71:7b:62:df:
e6:68:4b:1e:63:8e:2f:4f:1f:44:7c:a7:6d:77:22:f4:61:3c:
e4:66:ba:f6:e4:ac:2e:f1:35:42:9a:87:4a:40:82:db:d9:d0:
ca:a9:d6:96:5f:fe:18:99:7b:c5:7f:c6:1f:04:5b:8c:1f:2e:
9f:aa:ab:86:dd:8d:f1:f8:2e:4f:07:6d:ff:9e:5a:c0:33:ed:
39:cb:f0:70:18:05:ac:76:12:30:11:6b:87:36:c1:58:7c:a6:
c3:85:96:ae:2b:5d:c6:11:63:b4:c8:9c:66:f4:c6:4f:aa:4b:
4a:60:b0:5b:2e:e6:91:90:dc:f7:99:95:fb:cd:7c:2f:2d:9c:
e0:15:2c:ad:f3:11:96:7e:48:1b:a5:dc:cd:f0:3f:7d:1d:7c:
5a:57:3f:8c:1c:3b:2d:e4:ca:ca:11:bb:87:8d:27:18:d2:53:
8f:51:12:6f
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUMa/4w21NUUXw/mencPLvZJuZdUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4
QjRFRTc1MDAeFw0yNjA1MDMwMjMyNDlaFw0yNzA1MDIwMjM3NDlaMDMxMTAvBgNV
BAMTKDY5NEVFNUYxM0U5NzU0OENGMTNCNjEzMDU4NTI0ODk2NzJGRjYzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfz6xvSyTtqxXV4jJwZyz9dtd
/Kv+ot6vXyccw+ns0s5AHfJwBCqW2s1KQpEUceiA+chbpoyTLxYSLMV7p/WGl+no
9uk1mkyjbI8Ie7SI/zEwyNGdCQ2I95gNu0/qskgkss0n1MHP176DS4A5PlMZJIdT
aADe9w0PLgs3jX5vn9x5LHvm3lk7q5RuwDyo7fAPDNKDZ9rvvxnmhMAMJwStknrc
v89beYPENcuRLzirIZvh1wWpDF6KRZiWDxmryBOTSrgT035wM4YsJpF00aIrFDAg
4RAnWOBvLFXdb/ODjALkk6QIyxeCeqd5c44b0LuW8N/9RIICQbyS442+rpdHAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUaU7l8T6XVIzxO2EwWFJIlnL/Y7owHwYDVR0j
BBgwFoAUuleIudm+pzTOSUyXYmRfe4tO51AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjBlNDc1MGUtNDM5My00M2VjLTlhYjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlE
OUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4QjRFRTc1MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQTU3ODhCOUQ5QkVBNzM0Q0U0OTRDOTc2MjY0NUY3QjhCNEVF
NzUwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYwZTQ3NTBlLTQzOTMtNDNlYy05
YWI1LWQyNDdiYmMwN2Q4Ni8wLzMxMzAzMzJlMzEzNDM3MmUzMjM1MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzQzNjM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk/8wDQYJ
KoZIhvcNAQELBQADggEBAG2oAa5R0nCOktuYCexkzzt4P1inn6OugjByxZbL+r/O
y/f8XDko0fafnOTEylYLbKWrZhs4s5ZYD4R5Pv8heGsi7yudJ87D4wflMsczBRgV
LhxvMURwcXti3+ZoSx5jji9PH0R8p213IvRhPORmuvbkrC7xNUKah0pAgtvZ0Mqp
1pZf/hiZe8V/xh8EW4wfLp+qq4bdjfH4Lk8Hbf+eWsAz7TnL8HAYBax2EjARa4c2
wVh8psOFlq4rXcYRY7TInGb0xk+qS0pgsFsu5pGQ3PeZlfvNfC8tnOAVLK3zEZZ+
SBul3M3wP30dfFpXP4wcOy3kysoRu4eNJxjSU49REm8=
-----END CERTIFICATE-----
Generated at Wed May 13 06:55:35 2026 by rpki-client