
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa
File: 3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa (raw, json)
Hash identifier: H/EU/GM9zbZ8LDvAdbWVszvkAPkqKeCYb9wj1+YBJDk=
Subject key identifier: 56:EA:E3:10:BE:9E:AC:53:30:70:98:AA:1B:A2:D7:AD:C7:4C:B7:57
Certificate issuer: /CN=499950141E5E3A0403B539ED29BB3B93BCE2C16C
Certificate serial: 381BA7C2B689A0C1D2D65BACF867297BA4E09686
Authority key identifier: 49:99:50:14:1E:5E:3A:04:03:B5:39:ED:29:BB:3B:93:BC:E2:C1:6C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499950141E5E3A0403B539ED29BB3B93BCE2C16C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa
Signing time: Sun 03 May 2026 02:43:30 +0000
ROA not before: Sun 03 May 2026 02:38:30 +0000
ROA not after: Sun 02 May 2027 02:43:30 +0000
asID: 141127
IP address blocks: 103.148.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.crl
rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499950141E5E3A0403B539ED29BB3B93BCE2C16C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:1b:a7:c2:b6:89:a0:c1:d2:d6:5b:ac:f8:67:29:7b:a4:e0:96:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499950141E5E3A0403B539ED29BB3B93BCE2C16C
Validity
Not Before: May 3 02:38:30 2026 GMT
Not After : May 2 02:43:30 2027 GMT
Subject: CN=56EAE310BE9EAC53307098AA1BA2D7ADC74CB757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:27:0e:b3:70:c0:bb:0c:cd:0d:8a:58:3e:
b5:79:eb:ed:3b:1c:01:9d:db:40:32:84:d8:c0:82:
da:28:c5:01:50:be:72:4c:3f:9e:57:a4:de:ba:4b:
fe:3b:69:7b:44:53:5f:d7:cf:d2:f6:ad:c9:fe:20:
d0:68:19:78:f3:58:20:b1:1a:95:3b:0b:c2:4a:ce:
b2:73:bf:53:35:e0:f5:39:df:af:5d:60:38:c2:88:
83:28:0f:db:5d:6e:f0:69:2a:af:ce:2a:20:f2:32:
a3:c2:ae:37:78:9a:07:4b:fb:5e:fc:84:d8:79:dd:
1d:c2:5e:a2:11:f1:9b:f6:06:83:de:5e:ae:69:96:
27:4b:2b:33:63:fb:fc:b1:83:13:df:b0:a9:72:64:
15:92:ed:03:30:37:e5:60:c5:cd:da:87:c9:44:be:
fc:a4:cb:e2:1f:45:31:da:b9:cc:13:0d:f8:b4:ea:
70:30:5a:62:c7:32:e3:f9:a0:af:3b:43:0f:e2:21:
59:a5:85:65:86:f1:e6:96:9c:c9:05:de:b7:c1:c7:
1d:65:82:4b:c2:3a:59:61:aa:05:99:73:e5:c2:d0:
ce:95:08:53:a1:02:38:fc:69:f1:a1:61:82:c4:7d:
1a:d7:20:41:85:68:96:76:0a:8b:68:52:1d:29:6e:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EA:E3:10:BE:9E:AC:53:30:70:98:AA:1B:A2:D7:AD:C7:4C:B7:57
X509v3 Authority Key Identifier:
keyid:49:99:50:14:1E:5E:3A:04:03:B5:39:ED:29:BB:3B:93:BC:E2:C1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/499950141E5E3A0403B539ED29BB3B93BCE2C16C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/499950141E5E3A0403B539ED29BB3B93BCE2C16C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.130.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:77:97:bf:85:c4:94:11:ac:23:12:a8:a2:3d:31:af:f3:19:
16:1b:fb:a6:7e:60:b0:1f:bc:4a:32:3c:49:62:cb:1a:63:2b:
e0:ea:bd:e8:5f:34:a8:f5:97:a5:7c:80:d3:9d:43:e7:a8:66:
ae:c2:bd:3e:59:68:a2:16:af:30:bb:31:df:4e:19:c2:7f:1f:
32:fc:9d:4e:42:b4:d6:17:4a:6f:ce:d4:4f:a5:f9:88:ad:cf:
06:68:4e:e3:ee:1a:fd:b5:21:e2:3d:96:2c:49:2c:72:02:8e:
20:b0:8c:da:c2:2c:2c:ff:25:b0:f8:0b:82:ea:0e:f8:b6:a6:
62:dc:48:51:3f:ea:05:2e:d8:84:65:a4:5d:e0:f0:43:bf:47:
bf:df:91:86:29:34:0e:3a:0b:20:89:d8:29:53:ef:5e:4c:91:
6a:a7:90:fd:75:ce:6b:4f:57:5a:74:9a:03:0d:8b:f8:c9:c4:
f0:58:dd:93:a5:08:b3:5f:52:39:d6:40:e3:ac:a9:4a:17:23:
93:67:80:67:c7:93:04:a3:70:ee:56:fd:08:de:d2:dd:a6:9a:
10:62:31:79:8d:da:1b:68:94:75:52:40:e1:b1:14:61:60:68:
c2:68:e4:34:d1:80:b6:16:b2:be:de:1c:3f:11:7e:2a:c5:91:
a4:df:b2:a5
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUOBunwraJoMHS1lus+Gcpe6TgloYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk5OTUwMTQxRTVFM0EwNDAzQjUzOUVEMjlCQjNCOTNC
Q0UyQzE2QzAeFw0yNjA1MDMwMjM4MzBaFw0yNzA1MDIwMjQzMzBaMDMxMTAvBgNV
BAMTKDU2RUFFMzEwQkU5RUFDNTMzMDcwOThBQTFCQTJEN0FEQzc0Q0I3NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRICcOs3DAuwzNDYpYPrV56+07
HAGd20AyhNjAgtooxQFQvnJMP55XpN66S/47aXtEU1/Xz9L2rcn+INBoGXjzWCCx
GpU7C8JKzrJzv1M14PU5369dYDjCiIMoD9tdbvBpKq/OKiDyMqPCrjd4mgdL+178
hNh53R3CXqIR8Zv2BoPeXq5plidLKzNj+/yxgxPfsKlyZBWS7QMwN+Vgxc3ah8lE
vvyky+IfRTHaucwTDfi06nAwWmLHMuP5oK87Qw/iIVmlhWWG8eaWnMkF3rfBxx1l
gkvCOllhqgWZc+XC0M6VCFOhAjj8afGhYYLEfRrXIEGFaJZ2CotoUh0pbt59AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUVurjEL6erFMwcJiqG6LXrcdMt1cwHwYDVR0j
BBgwFoAUSZlQFB5eOgQDtTntKbs7k7ziwWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzUxNGEwODktNjViNi00NTg1LWFmODQtM2Y4MmIxNjljMjdhLzAvNDk5OTUwMTQx
RTVFM0EwNDAzQjUzOUVEMjlCQjNCOTNCQ0UyQzE2Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80OTk5NTAxNDFFNUUzQTA0MDNCNTM5RUQyOUJCM0I5M0JDRTJD
MTZDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc1MTRhMDg5LTY1YjYtNDU4NS1h
Zjg0LTNmODJiMTY5YzI3YS8wLzMxMzAzMzJlMzEzNDM4MmUzMTMzMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlIIwDQYJ
KoZIhvcNAQELBQADggEBAEt3l7+FxJQRrCMSqKI9Ma/zGRYb+6Z+YLAfvEoyPEli
yxpjK+DqvehfNKj1l6V8gNOdQ+eoZq7CvT5ZaKIWrzC7Md9OGcJ/HzL8nU5CtNYX
Sm/O1E+l+YitzwZoTuPuGv21IeI9lixJLHICjiCwjNrCLCz/JbD4C4LqDvi2pmLc
SFE/6gUu2IRlpF3g8EO/R7/fkYYpNA46CyCJ2ClT715MkWqnkP11zmtPV1p0mgMN
i/jJxPBY3ZOlCLNfUjnWQOOsqUoXI5NngGfHkwSjcO5W/Qje0t2mmhBiMXmN2hto
lHVSQOGxFGFgaMJo5DTRgLYWsr7eHD8RfirFkaTfsqU=
-----END CERTIFICATE-----
Generated at Wed May 13 11:52:46 2026 by rpki-client