
$ rpki-client -vvf rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/3130332e3135372e362e302f32342d3234203d3e20313431313036.roa
File: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (raw, json)
Hash identifier: yr/oT9BlQ/M4JMNvCd0w0W7t+J3wxH6iIKEMfOlwP+M=
Subject key identifier: B8:0F:B1:D6:31:20:B6:18:27:28:A5:6E:AC:AA:45:83:55:88:EA:00
Certificate issuer: /CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E
Certificate serial: 489DA5A4B8685F94CA2CBDC6E5F2ABB9D784F8D1
Authority key identifier: D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/3130332e3135372e362e302f32342d3234203d3e20313431313036.roa
Signing time: Sun 03 May 2026 02:48:07 +0000
ROA not before: Sun 03 May 2026 02:43:07 +0000
ROA not after: Sun 02 May 2027 02:48:07 +0000
asID: 141106
IP address blocks: 103.157.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl
rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:9d:a5:a4:b8:68:5f:94:ca:2c:bd:c6:e5:f2:ab:b9:d7:84:f8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E
Validity
Not Before: May 3 02:43:07 2026 GMT
Not After : May 2 02:48:07 2027 GMT
Subject: CN=B80FB1D63120B6182728A56EACAA45835588EA00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:3c:a1:e9:ed:5c:d8:b1:e7:3a:f0:bc:32:
a6:dc:7f:7e:a1:94:0a:25:51:04:cf:9d:e9:4a:85:
54:18:0f:6d:52:5e:41:1a:76:a8:97:d5:66:47:30:
29:c2:83:60:53:7e:14:ea:a2:6b:c1:94:6a:7e:1a:
18:d2:b7:70:79:c8:da:c7:3e:ab:df:97:4a:e4:b9:
a1:68:c8:31:72:39:49:db:ff:78:cc:3c:5c:3a:93:
26:8c:ce:6b:60:fe:af:bf:f1:5c:44:67:ce:1a:ed:
95:90:2e:74:78:1a:ea:fa:67:3b:47:a0:f0:d8:e6:
ee:e0:94:60:34:6c:c1:f9:0d:17:45:55:3f:8a:6d:
36:55:74:ab:3d:1f:e7:4c:81:6e:38:98:69:f0:f8:
92:a7:fb:25:26:70:a6:2c:f4:e7:a7:a2:ad:cb:16:
38:04:57:6e:ed:8d:84:e0:b9:6b:c0:3f:d0:12:6f:
b6:0d:b9:75:00:3e:e3:f0:f1:7f:fd:45:f7:5f:00:
7a:99:72:f4:57:60:d5:3d:bd:98:90:eb:fc:0d:3c:
f4:64:00:1a:81:2a:21:5e:c6:70:d6:97:ba:c3:f4:
8e:e0:25:96:e2:a9:07:83:b9:6d:28:6b:9c:64:aa:
16:96:06:18:58:da:00:bc:e0:b5:34:0d:3c:26:b4:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:B1:D6:31:20:B6:18:27:28:A5:6E:AC:AA:45:83:55:88:EA:00
X509v3 Authority Key Identifier:
keyid:D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/3130332e3135372e362e302f32342d3234203d3e20313431313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.157.6.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d8:2b:c1:b6:5e:ff:98:4f:e5:e4:a4:b8:e8:8c:f8:e3:33:
1f:a2:b6:10:e0:98:65:1a:92:67:35:59:68:38:ce:55:25:09:
7d:0b:7e:26:85:ad:b7:ce:1c:5a:c7:c4:67:27:e1:55:80:2a:
64:1c:d3:f5:f9:a2:39:f7:31:d7:be:1e:b3:6e:28:8d:fe:d9:
a8:4b:23:07:b3:e1:d0:3d:c3:94:7e:b0:a0:11:32:79:b9:a7:
f3:3f:8b:ba:31:80:75:c2:fe:db:c6:54:52:33:93:64:06:d2:
9e:08:d4:ae:ab:1f:2e:4d:c6:dc:7a:0a:c1:ce:60:aa:3d:50:
43:d5:7a:0f:e1:a9:21:d7:19:22:05:ff:04:69:d4:61:b2:2f:
2d:eb:e7:dd:1b:3e:a7:5f:e6:ef:ed:5f:c7:29:02:a4:7a:fa:
62:ae:d8:a7:b9:3e:fe:a3:a9:a6:95:19:c2:91:f0:18:73:8d:
aa:5c:7a:a6:d5:6b:36:fe:dd:3e:65:d9:e5:bc:33:cf:30:20:
22:1c:5a:f6:23:da:d9:da:fc:94:84:89:d1:09:62:b8:eb:72:
88:e0:b6:7c:f2:99:5f:6c:73:d0:e1:29:ae:34:7f:d3:53:39:
4b:cd:e0:ef:bf:0c:14:59:12:12:99:d7:9f:a0:48:f1:25:fc:
09:4a:22:21
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUSJ2lpLhoX5TKLL3G5fKrudeE+NEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThC
Q0M3NEI4RTAeFw0yNjA1MDMwMjQzMDdaFw0yNzA1MDIwMjQ4MDdaMDMxMTAvBgNV
BAMTKEI4MEZCMUQ2MzEyMEI2MTgyNzI4QTU2RUFDQUE0NTgzNTU4OEVBMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbJjyh6e1c2LHnOvC8Mqbcf36h
lAolUQTPnelKhVQYD21SXkEadqiX1WZHMCnCg2BTfhTqomvBlGp+GhjSt3B5yNrH
Pqvfl0rkuaFoyDFyOUnb/3jMPFw6kyaMzmtg/q+/8VxEZ84a7ZWQLnR4Gur6ZztH
oPDY5u7glGA0bMH5DRdFVT+KbTZVdKs9H+dMgW44mGnw+JKn+yUmcKYs9Oenoq3L
FjgEV27tjYTguWvAP9ASb7YNuXUAPuPw8X/9RfdfAHqZcvRXYNU9vZiQ6/wNPPRk
ABqBKiFexnDWl7rD9I7gJZbiqQeDuW0oa5xkqhaWBhhY2gC84LU0DTwmtLgpAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUuA+x1jEgthgnKKVurKpFg1WI6gAwHwYDVR0j
BBgwFoAU0Mi0OuhfDwnUmHMpIyvs6LzHS44wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODVkZDRmMTYtNTcwZS00YzhjLWE5OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FF
ODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThCQ0M3NEI4RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMEM4QjQzQUU4NUYwRjA5RDQ5ODczMjkyMzJCRUNFOEJDQzc0
QjhFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZGQ0ZjE2LTU3MGUtNGM4Yy1h
OTkyLWRiODllYTNiYWQzNi8wLzMxMzAzMzJlMzEzNTM3MmUzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzMTMxMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGedBjANBgkqhkiG
9w0BAQsFAAOCAQEAV9grwbZe/5hP5eSkuOiM+OMzH6K2EOCYZRqSZzVZaDjOVSUJ
fQt+JoWtt84cWsfEZyfhVYAqZBzT9fmiOfcx174es24ojf7ZqEsjB7Ph0D3DlH6w
oBEyebmn8z+LujGAdcL+28ZUUjOTZAbSngjUrqsfLk3G3HoKwc5gqj1QQ9V6D+Gp
IdcZIgX/BGnUYbIvLevn3Rs+p1/m7+1fxykCpHr6Yq7Yp7k+/qOpppUZwpHwGHON
qlx6ptVrNv7dPmXZ5bwzzzAgIhxa9iPa2dr8lISJ0QliuOtyiOC2fPKZX2xz0OEp
rjR/01M5S83g778MFFkSEpnXn6BI8SX8CUoiIQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:25:50 2026 by rpki-client