
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa
File: 3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (raw, json)
Hash identifier: JCQvcMoFj6uGUNUjgqCHZPoWp7SdWl4w0J5aS1v8QPA=
Subject key identifier: E1:5A:FD:91:CD:A2:F1:77:26:E2:33:63:CB:36:CA:FF:D3:9E:4B:DA
Certificate issuer: /CN=7FAE1489FF53B0236543706FB85A70734890458C
Certificate serial: 3C65F52C2DA70E9AFC390B7698CCA3BA5400AE63
Authority key identifier: 7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa
Signing time: Sun 03 May 2026 02:41:11 +0000
ROA not before: Sun 03 May 2026 02:36:11 +0000
ROA not after: Sun 02 May 2027 02:41:11 +0000
asID: 150934
IP address blocks: 103.109.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl
rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:65:f5:2c:2d:a7:0e:9a:fc:39:0b:76:98:cc:a3:ba:54:00:ae:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FAE1489FF53B0236543706FB85A70734890458C
Validity
Not Before: May 3 02:36:11 2026 GMT
Not After : May 2 02:41:11 2027 GMT
Subject: CN=E15AFD91CDA2F17726E23363CB36CAFFD39E4BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:4b:36:d9:45:fd:f1:17:2c:43:5b:d7:eb:
05:f3:22:a2:ae:47:7d:05:c9:63:78:1e:61:db:05:
18:8f:db:e2:95:14:68:5a:3f:61:20:ea:36:a2:88:
04:84:f4:23:86:2c:fe:4d:f0:d5:84:c1:aa:1b:75:
64:15:60:06:a5:4d:83:92:ea:24:4e:32:cd:06:11:
d5:04:95:22:60:fb:d6:d8:3b:2f:e3:75:44:2c:90:
2e:81:60:3c:6f:6a:33:9b:8d:ea:b2:15:f9:c7:0f:
89:60:72:cf:41:2f:96:2a:49:87:fa:ee:bb:1b:76:
45:88:b4:c7:a6:57:6c:3f:53:45:60:38:f8:09:2c:
8d:bf:32:f5:24:d4:da:29:34:da:64:58:d7:c7:b3:
8e:98:8b:01:c0:16:a3:42:d7:4e:63:92:36:2f:d0:
27:c9:91:60:6b:5c:2c:45:68:45:9f:ff:58:ce:7e:
ae:76:f0:27:ee:34:c1:35:ca:b6:be:12:41:e9:75:
30:a4:8b:51:59:30:b5:fe:f3:aa:9a:e3:92:f5:67:
76:08:9d:e4:d0:1c:28:45:d8:33:b9:13:60:6d:c9:
c5:6c:90:67:5d:fa:71:dd:00:e5:be:1c:30:06:ef:
b3:a4:3c:f2:7f:15:5a:4d:78:8f:bd:97:f9:25:9f:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5A:FD:91:CD:A2:F1:77:26:E2:33:63:CB:36:CA:FF:D3:9E:4B:DA
X509v3 Authority Key Identifier:
keyid:7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.109.205.0/24
Signature Algorithm: sha256WithRSAEncryption
86:0c:c9:24:b8:51:48:af:97:4d:50:d3:ec:c2:09:f1:bc:ae:
72:a1:00:a5:b9:24:e9:7b:1c:90:45:e2:65:f8:d9:2d:d4:2b:
b5:64:dc:a8:bc:20:3d:a4:36:82:2f:cd:99:04:88:7e:10:45:
60:41:90:fb:01:a0:2a:ad:a4:86:92:b0:29:0e:e5:18:ea:03:
6a:75:08:57:88:06:64:4a:85:6d:76:17:77:2f:e6:d1:4e:14:
3f:24:76:ed:b8:74:03:0e:f6:86:42:13:f3:ae:ab:18:bf:85:
3a:2f:0b:54:36:34:32:dd:f0:bd:0c:29:e4:c2:f7:4e:2c:41:
f0:cf:f1:6d:27:90:e9:b2:89:f6:7f:a9:f3:4f:4e:9d:c1:e6:
0c:16:ea:30:9d:1b:53:b4:54:c8:88:74:a6:54:b1:d1:50:09:
5f:6b:c6:43:6a:0e:95:69:50:73:90:f4:d6:21:7b:46:35:5d:
ef:16:7e:43:eb:f0:a7:09:35:2d:04:30:08:88:df:3b:f5:77:
ad:88:d2:73:09:11:7a:ed:70:88:1c:8a:32:72:13:23:37:fe:
ee:d4:56:b3:13:3c:96:b1:77:d4:67:f9:7f:84:ff:c6:ca:5a:
78:f2:85:d5:af:91:88:49:e3:2c:05:e9:fe:00:0f:6b:9a:a8:
19:ac:0d:36
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUPGX1LC2nDpr8OQt2mMyjulQArmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZBRTE0ODlGRjUzQjAyMzY1NDM3MDZGQjg1QTcwNzM0
ODkwNDU4QzAeFw0yNjA1MDMwMjM2MTFaFw0yNzA1MDIwMjQxMTFaMDMxMTAvBgNV
BAMTKEUxNUFGRDkxQ0RBMkYxNzcyNkUyMzM2M0NCMzZDQUZGRDM5RTRCREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcsUs22UX98RcsQ1vX6wXzIqKu
R30FyWN4HmHbBRiP2+KVFGhaP2Eg6jaiiASE9COGLP5N8NWEwaobdWQVYAalTYOS
6iROMs0GEdUElSJg+9bYOy/jdUQskC6BYDxvajObjeqyFfnHD4lgcs9BL5YqSYf6
7rsbdkWItMemV2w/U0VgOPgJLI2/MvUk1NopNNpkWNfHs46YiwHAFqNC105jkjYv
0CfJkWBrXCxFaEWf/1jOfq528CfuNME1yra+EkHpdTCki1FZMLX+86qa45L1Z3YI
neTQHChF2DO5E2BtycVskGdd+nHdAOW+HDAG77OkPPJ/FVpNeI+9l/kln6/RAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU4Vr9kc2i8Xcm4jNjyzbK/9OeS9owHwYDVR0j
BBgwFoAUf64Uif9TsCNlQ3BvuFpwc0iQRYwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmM0ZTE2NjktNjhmNy00YTM5LWFjYzAtNTdjNzE4N2I2Y2I3LzAvN0ZBRTE0ODlG
RjUzQjAyMzY1NDM3MDZGQjg1QTcwNzM0ODkwNDU4Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83RkFFMTQ4OUZGNTNCMDIzNjU0MzcwNkZCODVBNzA3MzQ4OTA0
NThDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjNGUxNjY5LTY4ZjctNGEzOS1h
Y2MwLTU3YzcxODdiNmNiNy8wLzMxMzAzMzJlMzEzMDM5MmUzMjMwMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnbc0wDQYJ
KoZIhvcNAQELBQADggEBAIYMySS4UUivl01Q0+zCCfG8rnKhAKW5JOl7HJBF4mX4
2S3UK7Vk3Ki8ID2kNoIvzZkEiH4QRWBBkPsBoCqtpIaSsCkO5RjqA2p1CFeIBmRK
hW12F3cv5tFOFD8kdu24dAMO9oZCE/Ouqxi/hTovC1Q2NDLd8L0MKeTC904sQfDP
8W0nkOmyifZ/qfNPTp3B5gwW6jCdG1O0VMiIdKZUsdFQCV9rxkNqDpVpUHOQ9NYh
e0Y1Xe8WfkPr8KcJNS0EMAiI3zv1d62I0nMJEXrtcIgcijJyEyM3/u7UVrMTPJax
d9Rn+X+E/8bKWnjyhdWvkYhJ4ywF6f4AD2uaqBmsDTY=
-----END CERTIFICATE-----
Generated at Wed May 13 07:46:28 2026 by rpki-client