
$ rpki-client -vvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa
File: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (raw, json)
Hash identifier: g6lAbZqkaksDk1xdjsRVZipSwUOrqirOYAGeG6k+1X4=
Subject key identifier: E2:79:D6:58:74:30:5E:1A:ED:5B:2A:DD:EB:5B:40:41:E7:A3:4F:4E
Certificate issuer: /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365
Certificate serial: 202B8799B15E52AA0652FDCFC29C07DA80811E7D
Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa
Signing time: Sun 03 May 2026 02:37:56 +0000
ROA not before: Sun 03 May 2026 02:32:56 +0000
ROA not after: Sun 02 May 2027 02:37:56 +0000
asID: 142401
IP address blocks: 103.172.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl
rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2b:87:99:b1:5e:52:aa:06:52:fd:cf:c2:9c:07:da:80:81:1e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365
Validity
Not Before: May 3 02:32:56 2026 GMT
Not After : May 2 02:37:56 2027 GMT
Subject: CN=E279D65874305E1AED5B2ADDEB5B4041E7A34F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:85:fc:f1:70:0c:53:bb:8c:fa:00:54:92:34:
f2:e6:07:ff:e6:f8:db:5b:e5:b3:23:7e:85:97:47:
8c:26:8c:a1:6b:0a:7d:5b:f8:8e:2c:28:9b:cd:af:
07:62:4f:79:41:5e:4c:d3:92:76:a8:42:18:02:65:
67:d6:18:a0:54:b4:b0:97:50:58:95:99:5b:27:d5:
b6:36:f5:c8:7e:08:26:7e:4c:dd:d9:94:88:e3:f6:
19:f0:09:61:f7:d7:57:0d:2c:67:d5:2d:0f:74:b3:
bb:7f:56:64:8e:04:c2:7a:eb:47:ec:59:1a:8e:98:
4f:ac:52:41:a9:77:c9:e7:eb:ef:43:37:99:34:ce:
47:9e:d9:98:f3:0c:84:63:d5:42:b1:9b:54:d8:4b:
15:d4:10:d4:56:73:52:ef:61:1a:c1:3e:32:71:9c:
bb:80:1f:ac:19:e1:fa:5c:8e:be:9a:0c:9e:f0:ce:
37:6c:d5:25:65:d9:c6:06:f7:47:e0:0c:2f:e8:25:
98:20:26:b9:f6:3b:67:f2:d0:cf:c6:b2:b3:67:d1:
88:70:fd:b8:9a:f3:11:69:0c:51:2e:c9:22:38:a0:
1e:27:93:da:1e:be:9d:49:f2:6a:dc:83:cb:63:f9:
5c:f2:ed:23:29:4d:49:6a:dd:3a:dc:e8:af:57:c9:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:79:D6:58:74:30:5E:1A:ED:5B:2A:DD:EB:5B:40:41:E7:A3:4F:4E
X509v3 Authority Key Identifier:
keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.240.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7e:c1:ad:5a:8c:2a:08:1e:a0:5d:11:16:e3:f2:fc:d4:40:
29:fd:7c:cb:b6:b6:2e:00:54:b0:18:90:96:8d:9a:db:a2:4d:
55:78:59:39:cc:3d:cc:3c:48:5e:7a:55:18:90:8f:bc:8f:cb:
c9:82:fb:c2:e8:00:31:f2:ad:c5:2c:49:29:9a:bf:93:fc:b2:
5f:bd:86:af:64:85:0b:db:56:c3:ef:b6:09:69:35:70:82:bf:
81:28:a0:bb:a7:94:68:00:e9:02:e4:b1:4f:16:f8:a9:29:09:
19:7c:a4:bf:27:0a:e2:30:1a:91:39:dd:34:eb:f8:30:c5:c9:
2b:46:72:21:c8:2a:30:3a:81:6d:76:38:9e:89:a9:6f:43:d6:
ce:eb:8b:8f:3e:08:f6:f0:20:8d:10:5c:d2:08:0d:fb:08:3c:
86:a0:33:39:45:d9:7e:c6:3b:5a:84:d5:b0:c8:73:fd:b2:4d:
4a:18:5c:1a:a6:f8:76:0a:d8:d0:5c:d8:2c:67:69:4c:f7:07:
02:4a:07:7c:6c:4f:33:af:bd:6e:68:92:cb:f5:78:80:17:7e:
db:1d:c6:bf:8c:20:9e:dc:1e:24:08:f3:7b:d0:cd:62:f6:8a:
a7:eb:f3:df:55:05:0a:35:4f:bc:25:ba:06:f2:f2:25:fd:72:
7b:62:50:8e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUICuHmbFeUqoGUv3PwpwH2oCBHn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FF
RUY0MzM2NTAeFw0yNjA1MDMwMjMyNTZaFw0yNzA1MDIwMjM3NTZaMDMxMTAvBgNV
BAMTKEUyNzlENjU4NzQzMDVFMUFFRDVCMkFEREVCNUI0MDQxRTdBMzRGNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDihfzxcAxTu4z6AFSSNPLmB//m
+Ntb5bMjfoWXR4wmjKFrCn1b+I4sKJvNrwdiT3lBXkzTknaoQhgCZWfWGKBUtLCX
UFiVmVsn1bY29ch+CCZ+TN3ZlIjj9hnwCWH311cNLGfVLQ90s7t/VmSOBMJ660fs
WRqOmE+sUkGpd8nn6+9DN5k0zkee2ZjzDIRj1UKxm1TYSxXUENRWc1LvYRrBPjJx
nLuAH6wZ4fpcjr6aDJ7wzjds1SVl2cYG90fgDC/oJZggJrn2O2fy0M/GsrNn0Yhw
/bia8xFpDFEuySI4oB4nk9oevp1J8mrcg8tj+Vzy7SMpTUlq3Trc6K9Xya6bAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU4nnWWHQwXhrtWyrd61tAQeejT04wHwYDVR0j
BBgwFoAUkMxyCcqopsf+7CGdrkl/eu70M2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjEyYzEzOGMtMmUyNC00OWY1LThhZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlD
QUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FFRUY0MzM2NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MENDNzIwOUNBQThBNkM3RkVFQzIxOURBRTQ5N0Y3QUVFRjQz
MzY1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYxMmMxMzhjLTJlMjQtNDlmNS04
YWRhLTAwMjdjYmE3ZjE3OC8wLzMxMzAzMzJlMzEzNzMyMmUzMjM0MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrPAwDQYJ
KoZIhvcNAQELBQADggEBAJl+wa1ajCoIHqBdERbj8vzUQCn9fMu2ti4AVLAYkJaN
mtuiTVV4WTnMPcw8SF56VRiQj7yPy8mC+8LoADHyrcUsSSmav5P8sl+9hq9khQvb
VsPvtglpNXCCv4EooLunlGgA6QLksU8W+KkpCRl8pL8nCuIwGpE53TTr+DDFyStG
ciHIKjA6gW12OJ6JqW9D1s7ri48+CPbwII0QXNIIDfsIPIagMzlF2X7GO1qE1bDI
c/2yTUoYXBqm+HYK2NBc2CxnaUz3BwJKB3xsTzOvvW5oksv1eIAXftsdxr+MIJ7c
HiQI83vQzWL2iqfr899VBQo1T7wlugby8iX9cntiUI4=
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:54 2026 by rpki-client