
$ rpki-client -vvf rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa
File: 3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa (raw, json)
Hash identifier: IMBAva6ocuxkrwvvR0kfzc9aYWdmyeGotwSFXr/8fyM=
Subject key identifier: 46:B6:6E:0A:9D:84:19:CC:CB:96:44:30:50:B8:47:0C:DF:A6:EB:35
Certificate issuer: /CN=7B9D20A52D1839E0A747B27E30961527317BE820
Certificate serial: 417A14F45D7943D828FD8C776DAC68B01DF25016
Authority key identifier: 7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa
Signing time: Sun 03 May 2026 02:40:05 +0000
ROA not before: Sun 03 May 2026 02:35:05 +0000
ROA not after: Sun 02 May 2027 02:40:05 +0000
asID: 142354
IP address blocks: 103.169.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl
rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7a:14:f4:5d:79:43:d8:28:fd:8c:77:6d:ac:68:b0:1d:f2:50:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B9D20A52D1839E0A747B27E30961527317BE820
Validity
Not Before: May 3 02:35:05 2026 GMT
Not After : May 2 02:40:05 2027 GMT
Subject: CN=46B66E0A9D8419CCCB96443050B8470CDFA6EB35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:77:73:a1:24:28:59:39:7f:57:54:1d:b9:
54:1d:cc:39:ac:40:c0:0e:c5:22:dd:d8:95:4a:90:
37:4a:f9:91:d7:6c:b9:cd:67:78:b2:0e:94:07:9b:
8d:1c:a2:6d:24:0b:0d:38:05:d0:43:4e:97:ed:60:
45:e8:29:17:56:b9:18:47:a7:46:94:76:19:dc:a6:
8e:85:c7:80:24:18:d1:34:b0:b7:0d:b7:9a:fe:e1:
78:5a:62:e1:74:7e:ab:d1:6f:5d:12:51:d9:f5:d6:
bd:45:a0:ca:b7:ab:f6:fa:ac:31:45:17:a7:ca:62:
56:89:a7:8e:32:ec:05:10:8e:e4:29:a9:68:13:6a:
ea:39:55:92:76:c5:eb:64:d4:4f:9a:d4:9f:04:19:
b4:39:f0:f2:54:56:ce:42:bf:cd:84:89:ad:6e:1b:
4c:3c:2c:18:f2:6e:e0:92:c6:fa:24:c8:e3:b8:04:
bd:24:1a:cf:5a:c0:5a:29:4b:1d:ce:bc:93:b5:3b:
b6:a7:0f:4c:85:e9:cd:43:c0:0a:f7:1e:5c:08:c8:
c7:75:70:5e:a5:62:b3:72:20:7a:ae:e0:90:01:97:
84:0a:e6:7c:63:99:1f:7f:5f:6d:16:c1:a2:89:57:
86:f9:bb:63:a1:72:3b:d8:9f:3a:2e:b9:9b:e6:32:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B6:6E:0A:9D:84:19:CC:CB:96:44:30:50:B8:47:0C:DF:A6:EB:35
X509v3 Authority Key Identifier:
keyid:7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.224.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d7:dc:fe:25:66:a8:e8:18:f5:50:82:36:32:d6:0d:86:2e:
93:28:8e:44:c6:89:6e:8a:e3:4f:30:a8:ba:f4:aa:05:5c:a6:
f8:2e:66:04:3d:95:80:24:98:a4:a3:93:73:c1:51:42:66:41:
0d:e1:52:88:d6:e7:58:be:e4:a5:0c:48:65:1c:6e:d2:36:47:
f0:c3:a0:4e:8d:75:0f:be:25:48:81:e5:aa:e6:01:c0:a0:2a:
92:30:c9:3e:95:c5:13:ef:f8:48:c0:a3:cd:f3:f7:79:ed:16:
0c:e6:9b:47:44:a5:ab:24:1b:2e:e6:68:1b:cb:2c:c5:85:2f:
03:b0:f0:d6:4b:8a:e7:bf:d1:27:a8:31:49:ef:75:7c:a7:9d:
66:0c:d9:1c:a9:9f:2a:6c:5c:06:12:f9:c5:19:02:5c:8e:e4:
ae:06:1e:f5:90:59:04:65:43:8b:ca:28:60:b2:92:22:13:9f:
ba:1c:1e:49:af:69:92:15:c9:b8:aa:91:7f:45:2c:e4:f4:4b:
20:a7:2c:40:1c:4f:e0:32:c9:d9:3c:07:8f:46:a1:15:e2:61:
b3:1d:72:19:c6:68:d5:2f:77:6f:fd:00:61:c8:6a:45:74:03:
1d:02:51:73:b4:1e:a5:38:a8:76:9a:61:fe:16:d1:c5:69:3e:
7c:30:e4:85
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQXoU9F15Q9go/Yx3baxosB3yUBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I5RDIwQTUyRDE4MzlFMEE3NDdCMjdFMzA5NjE1Mjcz
MTdCRTgyMDAeFw0yNjA1MDMwMjM1MDVaFw0yNzA1MDIwMjQwMDVaMDMxMTAvBgNV
BAMTKDQ2QjY2RTBBOUQ4NDE5Q0NDQjk2NDQzMDUwQjg0NzBDREZBNkVCMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dHdzoSQoWTl/V1QduVQdzDms
QMAOxSLd2JVKkDdK+ZHXbLnNZ3iyDpQHm40com0kCw04BdBDTpftYEXoKRdWuRhH
p0aUdhncpo6Fx4AkGNE0sLcNt5r+4XhaYuF0fqvRb10SUdn11r1FoMq3q/b6rDFF
F6fKYlaJp44y7AUQjuQpqWgTauo5VZJ2xetk1E+a1J8EGbQ58PJUVs5Cv82Eia1u
G0w8LBjybuCSxvokyOO4BL0kGs9awFopSx3OvJO1O7anD0yF6c1DwAr3HlwIyMd1
cF6lYrNyIHqu4JABl4QK5nxjmR9/X20WwaKJV4b5u2OhcjvYnzouuZvmMjxXAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQURrZuCp2EGczLlkQwULhHDN+m6zUwHwYDVR0j
BBgwFoAUe50gpS0YOeCnR7J+MJYVJzF76CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjZhZjRkZTUtNTAzNy00OTE3LTlhOTMtMDE5MmM2OTU5YmZiLzAvN0I5RDIwQTUy
RDE4MzlFMEE3NDdCMjdFMzA5NjE1MjczMTdCRTgyMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QjlEMjBBNTJEMTgzOUUwQTc0N0IyN0UzMDk2MTUyNzMxN0JF
ODIwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY2YWY0ZGU1LTUwMzctNDkxNy05
YTkzLTAxOTJjNjk1OWJmYi8wLzMxMzAzMzJlMzEzNjM5MmUzMjMyMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqeAwDQYJ
KoZIhvcNAQELBQADggEBAGTX3P4lZqjoGPVQgjYy1g2GLpMojkTGiW6K408wqLr0
qgVcpvguZgQ9lYAkmKSjk3PBUUJmQQ3hUojW51i+5KUMSGUcbtI2R/DDoE6NdQ++
JUiB5armAcCgKpIwyT6VxRPv+EjAo83z93ntFgzmm0dEpaskGy7maBvLLMWFLwOw
8NZLiue/0SeoMUnvdXynnWYM2RypnypsXAYS+cUZAlyO5K4GHvWQWQRlQ4vKKGCy
kiITn7ocHkmvaZIVybiqkX9FLOT0SyCnLEAcT+Ayydk8B49GoRXiYbMdchnGaNUv
d2/9AGHIakV0Ax0CUXO0HqU4qHaaYf4W0cVpPnww5IU=
-----END CERTIFICATE-----
Generated at Wed May 13 07:01:38 2026 by rpki-client