
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/3130332e3134332e352e302f32342d3234203d3e20313339343034.roa
File: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (raw, json)
Hash identifier: ENAt0Wj8pAqQGPsWatdFNKTs/QZwprQkkW2hjlJfcA8=
Subject key identifier: E6:1B:94:DF:12:E8:C9:C0:D8:7F:BE:FC:E0:1A:2E:82:B8:D7:01:D0
Certificate issuer: /CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20
Certificate serial: 353A1534D811B9AE6331F10A0B3727D3DD394CFF
Authority key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/3130332e3134332e352e302f32342d3234203d3e20313339343034.roa
Signing time: Sun 03 May 2026 02:44:30 +0000
ROA not before: Sun 03 May 2026 02:39:30 +0000
ROA not after: Sun 02 May 2027 02:44:30 +0000
asID: 139404
IP address blocks: 103.143.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl
rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:3a:15:34:d8:11:b9:ae:63:31:f1:0a:0b:37:27:d3:dd:39:4c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20
Validity
Not Before: May 3 02:39:30 2026 GMT
Not After : May 2 02:44:30 2027 GMT
Subject: CN=E61B94DF12E8C9C0D87FBEFCE01A2E82B8D701D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:f7:0b:3f:97:0d:84:87:37:eb:11:4a:6c:
d6:4d:3f:bb:01:0a:e5:77:20:37:e8:e7:df:6b:c1:
c7:3a:d4:26:7d:cd:b4:42:60:c0:cd:83:22:d7:a4:
94:31:c5:fc:6c:a0:7a:01:92:47:43:28:e5:35:78:
de:37:33:86:e0:4b:20:e4:fb:e9:5e:9f:9d:88:1f:
49:eb:ba:b7:b5:4b:01:cf:e8:51:23:72:4c:85:f9:
d3:d8:01:f9:88:2b:dc:e6:07:24:c1:c6:51:d5:75:
e2:04:97:4e:03:f7:93:a5:a5:02:72:98:7a:86:ae:
a4:76:99:0a:16:fa:cb:b9:fe:94:02:d7:e1:79:c9:
67:12:35:59:35:b9:83:38:72:8d:77:77:96:e8:90:
2e:e9:17:d9:b4:ed:a5:2e:09:86:55:51:e1:93:5b:
45:8e:d0:60:85:cb:52:77:25:64:14:25:9c:29:6d:
dc:78:68:3d:a2:0d:7f:29:bc:78:47:bf:0b:fb:25:
c0:68:76:12:43:13:31:99:ac:1d:a8:a4:e3:fc:62:
c1:b8:dd:1c:47:cb:ca:0d:9d:88:fa:85:24:7d:66:
77:6c:bb:5d:f9:57:78:9a:dc:a8:ea:a8:dd:52:1c:
81:16:0c:25:36:ab:ae:3c:83:0c:14:b7:ca:47:a9:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1B:94:DF:12:E8:C9:C0:D8:7F:BE:FC:E0:1A:2E:82:B8:D7:01:D0
X509v3 Authority Key Identifier:
keyid:C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/3130332e3134332e352e302f32342d3234203d3e20313339343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.5.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9a:3c:e9:d7:28:03:04:44:fa:69:cf:48:e1:03:50:cd:c8:
55:9c:9a:a6:7d:41:99:df:90:40:bd:27:1e:aa:90:f3:ce:ff:
17:cc:c0:82:6d:e2:51:66:e0:b1:98:db:71:a9:ca:e2:96:59:
e1:31:48:a0:28:c0:33:54:7f:65:02:65:99:dc:a0:59:33:86:
21:0e:95:42:e1:ef:72:03:b3:af:0f:d3:06:a0:45:e0:eb:28:
62:d8:86:96:35:b1:23:2d:3b:d3:3f:51:3e:35:80:8a:6b:aa:
0a:34:a2:0d:f4:f4:2f:e0:ff:3c:90:7a:6c:e0:e5:d4:64:73:
4a:5d:6b:e4:03:a8:6c:aa:eb:0c:33:d9:6e:1f:33:82:08:1a:
e1:03:82:10:b3:dc:72:a8:b3:b5:11:35:3c:c0:7c:c8:f0:f4:
6b:db:cc:dc:11:44:be:8f:f7:1d:af:df:15:ff:fe:6c:c4:30:
89:91:e4:1a:53:fa:56:50:98:d0:62:f6:fe:06:af:4b:b8:bb:
72:ad:20:de:e9:b2:d2:16:d5:01:03:76:d4:cf:ec:e2:10:9a:
e3:b3:f0:4b:25:7c:0d:d2:ac:bb:bf:4a:be:e3:96:0d:11:19:
b4:03:61:8c:7e:a1:1b:35:f8:ae:c9:32:e2:f4:8b:ef:2d:85:
06:34:59:78
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNToVNNgRua5jMfEKCzcn0905TP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzIzNzk2MDYwRUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0
NTVGREMyMDAeFw0yNjA1MDMwMjM5MzBaFw0yNzA1MDIwMjQ0MzBaMDMxMTAvBgNV
BAMTKEU2MUI5NERGMTJFOEM5QzBEODdGQkVGQ0UwMUEyRTgyQjhENzAxRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvo/cLP5cNhIc36xFKbNZNP7sB
CuV3IDfo599rwcc61CZ9zbRCYMDNgyLXpJQxxfxsoHoBkkdDKOU1eN43M4bgSyDk
++len52IH0nrure1SwHP6FEjckyF+dPYAfmIK9zmByTBxlHVdeIEl04D95OlpQJy
mHqGrqR2mQoW+su5/pQC1+F5yWcSNVk1uYM4co13d5bokC7pF9m07aUuCYZVUeGT
W0WO0GCFy1J3JWQUJZwpbdx4aD2iDX8pvHhHvwv7JcBodhJDEzGZrB2opOP8YsG4
3RxHy8oNnYj6hSR9Zndsu135V3ia3KjqqN1SHIEWDCU2q648gwwUt8pHqYgHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5huU3xLoycDYf7784BougrjXAdAwHwYDVR0j
BBgwFoAUwjeWBg7zntDmu59gb59CXEVf3CAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Nzk5OGQ2ZWUtNmZkNy00ZTJkLWFlNDEtNjkzOWZkYjE1M2VlLzAvQzIzNzk2MDYw
RUYzOUVEMEU2QkI5RjYwNkY5RjQyNUM0NTVGREMyMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMjM3OTYwNjBFRjM5RUQwRTZCQjlGNjA2RjlGNDI1QzQ1NUZE
QzIwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc5OThkNmVlLTZmZDctNGUyZC1h
ZTQxLTY5MzlmZGIxNTNlZS8wLzMxMzAzMzJlMzEzNDMzMmUzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzOTM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGePBTANBgkqhkiG
9w0BAQsFAAOCAQEAe5o86dcoAwRE+mnPSOEDUM3IVZyapn1Bmd+QQL0nHqqQ887/
F8zAgm3iUWbgsZjbcanK4pZZ4TFIoCjAM1R/ZQJlmdygWTOGIQ6VQuHvcgOzrw/T
BqBF4OsoYtiGljWxIy070z9RPjWAimuqCjSiDfT0L+D/PJB6bODl1GRzSl1r5AOo
bKrrDDPZbh8zggga4QOCELPccqiztRE1PMB8yPD0a9vM3BFEvo/3Ha/fFf/+bMQw
iZHkGlP6VlCY0GL2/gavS7i7cq0g3umy0hbVAQN21M/s4hCa47PwSyV8DdKsu79K
vuOWDREZtANhjH6hGzX4rsky4vSL7y2FBjRZeA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:40:07 2026 by rpki-client