
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3130332e32322e3234302e302f32322d3234203d3e203234353233.roa
File: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (raw, json)
Hash identifier: CaMXRMHtTH2oaHCEUbRaStzEXt0odxZTYz16ElrcZ6M=
Subject key identifier: DC:70:3C:25:C4:76:CD:B0:59:8E:99:1C:F5:DA:BD:8F:9D:4E:1B:D6
Certificate issuer: /CN=9541F7A7495AA8918A6FE15016CB396EF2733922
Certificate serial: 1409700D45BA09AACFB838EA1FF3D4BA9E1143C8
Authority key identifier: 95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3130332e32322e3234302e302f32322d3234203d3e203234353233.roa
Signing time: Sun 03 May 2026 02:49:52 +0000
ROA not before: Sun 03 May 2026 02:44:52 +0000
ROA not after: Sun 02 May 2027 02:49:52 +0000
asID: 24523
IP address blocks: 103.22.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.crl
rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:09:70:0d:45:ba:09:aa:cf:b8:38:ea:1f:f3:d4:ba:9e:11:43:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9541F7A7495AA8918A6FE15016CB396EF2733922
Validity
Not Before: May 3 02:44:52 2026 GMT
Not After : May 2 02:49:52 2027 GMT
Subject: CN=DC703C25C476CDB0598E991CF5DABD8F9D4E1BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:36:06:30:a8:08:41:e0:8c:23:85:c5:0e:
03:26:09:c2:0d:4e:f7:b0:21:95:93:42:a6:be:6e:
77:09:21:be:bc:69:e5:0c:90:e2:43:3e:ba:0e:4a:
bd:78:99:16:87:a3:2c:3e:d5:4d:3e:8d:20:fe:ef:
4b:25:8d:fa:a0:e5:83:d8:2a:49:01:a9:19:f0:7b:
1b:e6:89:fb:7c:ea:1e:86:2f:24:b2:ec:fc:3d:d1:
d8:65:f7:87:4f:36:f7:87:ff:2e:e9:07:86:8e:e1:
a6:7d:42:c2:0a:0f:7a:70:59:0f:1d:63:04:fe:ce:
47:ce:0b:59:ae:65:ab:43:c5:7c:34:fe:a9:6e:cb:
8f:4a:22:ec:9c:fe:cf:8f:7e:9d:31:6f:70:c7:3e:
3f:02:04:50:20:23:ef:c5:61:bc:5f:59:d8:35:fa:
23:1b:2f:e1:7c:cd:46:31:ee:66:03:39:75:fe:ef:
b6:5b:95:29:8a:62:61:b8:eb:e3:e0:74:a5:bf:17:
cf:1a:e3:bc:e1:aa:c4:d2:a3:de:f5:5b:f5:31:f7:
07:c4:66:9f:9b:35:10:b8:b2:a0:c2:e5:e7:d9:10:
c8:b2:e6:f9:a4:8d:89:9b:35:5c:4f:60:ff:0c:b7:
2d:fa:4a:23:12:87:14:93:9e:45:2c:40:50:f4:af:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:70:3C:25:C4:76:CD:B0:59:8E:99:1C:F5:DA:BD:8F:9D:4E:1B:D6
X509v3 Authority Key Identifier:
keyid:95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3130332e32322e3234302e302f32322d3234203d3e203234353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.240.0/22
Signature Algorithm: sha256WithRSAEncryption
af:69:4c:80:5c:8e:3f:63:ff:5d:f3:2c:b9:20:ce:60:19:18:
01:ab:1d:7b:4f:cf:29:ee:cd:74:3f:bb:ac:98:81:8a:6f:c6:
a2:9b:61:5a:86:e5:21:b9:1b:b5:dd:39:92:48:30:23:e8:1d:
66:7e:00:3d:01:bc:a9:13:01:04:48:a6:2c:fa:ca:0e:f5:2c:
5b:1c:f4:02:05:04:14:20:a3:c4:aa:3d:60:bb:f3:da:b1:ef:
2e:5b:80:69:1d:a0:58:d1:cc:b7:08:58:fe:ea:da:1c:09:e7:
65:2e:ee:d5:1f:8d:cd:21:20:14:61:91:16:14:07:2d:fe:24:
7b:17:18:5a:3d:9b:26:f7:96:92:bf:de:1b:8e:5a:9c:d5:ff:
37:55:89:da:76:5c:b0:fd:6f:59:d3:6f:73:39:e0:8b:56:31:
55:1e:02:cc:69:af:8a:27:e0:3e:11:5c:4d:52:bd:39:c4:80:
a8:80:d5:1c:67:0b:17:d8:17:74:a2:40:7f:6f:b6:9b:7f:fb:
88:b2:4f:ac:5d:36:8a:50:3b:35:da:bd:44:94:b9:65:65:82:
85:1d:3c:86:5c:1f:bb:a6:de:71:88:d0:9d:6a:32:c5:b7:e0:
be:57:12:45:53:da:8e:76:4c:f5:b2:06:b2:13:2f:90:38:05:
fe:18:d9:73
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFAlwDUW6CarPuDjqH/PUup4RQ8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU0MUY3QTc0OTVBQTg5MThBNkZFMTUwMTZDQjM5NkVG
MjczMzkyMjAeFw0yNjA1MDMwMjQ0NTJaFw0yNzA1MDIwMjQ5NTJaMDMxMTAvBgNV
BAMTKERDNzAzQzI1QzQ3NkNEQjA1OThFOTkxQ0Y1REFCRDhGOUQ0RTFCRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4TYGMKgIQeCMI4XFDgMmCcIN
TvewIZWTQqa+bncJIb68aeUMkOJDProOSr14mRaHoyw+1U0+jSD+70sljfqg5YPY
KkkBqRnwexvmift86h6GLySy7Pw90dhl94dPNveH/y7pB4aO4aZ9QsIKD3pwWQ8d
YwT+zkfOC1muZatDxXw0/qluy49KIuyc/s+Pfp0xb3DHPj8CBFAgI+/FYbxfWdg1
+iMbL+F8zUYx7mYDOXX+77ZblSmKYmG46+PgdKW/F88a47zhqsTSo971W/Ux9wfE
Zp+bNRC4sqDC5efZEMiy5vmkjYmbNVxPYP8Mty36SiMShxSTnkUsQFD0rydJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU3HA8JcR2zbBZjpkc9dq9j51OG9YwHwYDVR0j
BBgwFoAUlUH3p0laqJGKb+FQFss5bvJzOSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGM2Njc3NjktODBkYy00MDkzLWI1ZjctZGZlN2M1NzIwNDg2LzAvOTU0MUY3QTc0
OTVBQTg5MThBNkZFMTUwMTZDQjM5NkVGMjczMzkyMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NTQxRjdBNzQ5NUFBODkxOEE2RkUxNTAxNkNCMzk2RUYyNzMz
OTIyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjNjY3NzY5LTgwZGMtNDA5My1i
NWY3LWRmZTdjNTcyMDQ4Ni8wLzMxMzAzMzJlMzIzMjJlMzIzNDMwMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzIzNDM1MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcW8DANBgkqhkiG
9w0BAQsFAAOCAQEAr2lMgFyOP2P/XfMsuSDOYBkYAasde0/PKe7NdD+7rJiBim/G
opthWoblIbkbtd05kkgwI+gdZn4APQG8qRMBBEimLPrKDvUsWxz0AgUEFCCjxKo9
YLvz2rHvLluAaR2gWNHMtwhY/uraHAnnZS7u1R+NzSEgFGGRFhQHLf4kexcYWj2b
JveWkr/eG45anNX/N1WJ2nZcsP1vWdNvczngi1YxVR4CzGmviifgPhFcTVK9OcSA
qIDVHGcLF9gXdKJAf2+2m3/7iLJPrF02ilA7Ndq9RJS5ZWWChR08hlwfu6becYjQ
nWoyxbfgvlcSRVPajnZM9bIGshMvkDgF/hjZcw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:12:28 2026 by rpki-client