
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa
File: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (raw, json)
Hash identifier: /kAtttFbe36wHQ930SSRc642mBWubZeea+be7w2XSf8=
Subject key identifier: 07:0D:4C:70:D8:19:21:29:90:D1:E9:9E:71:F6:DD:6E:57:31:CB:2D
Certificate issuer: /CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF
Certificate serial: 4FE85BCC6AC3CC73EE106900A716BD00D37A5C6C
Authority key identifier: D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa
Signing time: Sun 03 May 2026 02:51:01 +0000
ROA not before: Sun 03 May 2026 02:46:01 +0000
ROA not after: Sun 02 May 2027 02:51:01 +0000
asID: 134620
IP address blocks: 103.203.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl
rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e8:5b:cc:6a:c3:cc:73:ee:10:69:00:a7:16:bd:00:d3:7a:5c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF
Validity
Not Before: May 3 02:46:01 2026 GMT
Not After : May 2 02:51:01 2027 GMT
Subject: CN=070D4C70D819212990D1E99E71F6DD6E5731CB2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cb:62:27:0f:e0:8a:3f:f3:83:f6:f3:b3:29:
74:85:0e:08:9f:b2:d1:2a:41:ac:02:4b:fe:a4:79:
04:ab:ca:9d:ba:cb:e2:c0:64:92:61:c9:11:3d:cb:
5f:e4:3b:41:ae:58:4d:33:43:b5:76:d8:43:dd:18:
7f:b2:3a:ca:77:65:84:cd:68:7a:f0:c5:9c:0f:8d:
15:8f:77:21:5e:28:9a:1f:6c:3b:c5:57:b6:e0:6b:
b7:92:65:48:3b:cc:12:27:8d:81:e3:02:de:7c:2b:
6f:8c:37:8c:d5:a3:f3:66:96:42:e1:86:eb:5d:04:
f4:f0:30:da:de:dd:8b:9a:8d:be:a8:2c:14:16:b4:
d3:5d:b6:ed:b7:32:06:20:80:73:a2:dc:72:3a:98:
0a:59:34:72:14:e6:29:ea:68:ba:ea:18:65:56:a3:
c7:e1:de:76:ca:d7:72:71:04:b6:24:ca:e3:2f:17:
3b:e6:93:60:98:d4:45:47:b9:48:52:ac:b3:e1:72:
75:15:50:7f:b2:31:98:b6:7a:26:c6:93:0c:1b:2e:
5f:ab:28:02:47:b9:b3:c7:f8:21:dd:70:74:c8:63:
af:67:ab:d3:ab:cc:12:5a:47:04:32:13:ce:80:9f:
2c:1e:3a:ec:be:a5:0c:6a:21:84:e9:c7:b2:2d:d2:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0D:4C:70:D8:19:21:29:90:D1:E9:9E:71:F6:DD:6E:57:31:CB:2D
X509v3 Authority Key Identifier:
keyid:D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.203.76.0/22
Signature Algorithm: sha256WithRSAEncryption
35:b5:c2:c3:c6:f8:ac:ab:9f:7a:32:6f:19:a0:3c:d9:b2:67:
35:f0:4f:61:4b:09:ee:29:97:22:77:cf:47:d4:37:60:10:b3:
62:0b:43:68:e7:ae:5d:45:2b:b7:0e:72:4e:9d:f7:05:7d:e9:
ab:05:15:50:8b:82:3d:f1:fe:29:f2:f4:7a:b3:36:55:ec:6a:
86:a2:e1:f6:74:36:63:fb:4b:2a:3d:67:58:39:24:28:4d:be:
f7:ce:50:6a:7d:f6:f8:6d:4d:88:e9:00:5a:37:e1:dd:b8:66:
c2:62:e0:a2:27:43:3a:f2:b2:4f:33:82:c6:aa:28:8d:47:ea:
e7:c6:12:8c:db:a7:6b:9e:0d:95:85:fe:48:03:d0:57:da:09:
50:fa:94:65:55:32:ee:21:e8:af:5a:59:f1:9e:29:40:bb:85:
96:ad:f2:67:1a:ad:33:c3:1a:49:31:53:55:25:12:53:57:96:
6f:c4:db:e2:aa:c4:7d:bc:fe:b0:f4:b4:c6:1a:54:c1:db:7f:
10:0d:ff:a7:a0:f8:ae:19:b7:c4:81:fa:d8:52:a9:09:5f:ae:
42:d5:a1:0b:ae:e2:39:ff:fa:d1:7a:f2:c8:6d:68:f8:6b:6c:
eb:ec:23:97:c7:ca:46:fe:15:13:23:39:2a:ca:d1:bb:ec:87:
76:3e:12:2a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUT+hbzGrDzHPuEGkApxa9ANN6XGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZEOEM1N0Y0RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkND
OTFGRURCRjAeFw0yNjA1MDMwMjQ2MDFaFw0yNzA1MDIwMjUxMDFaMDMxMTAvBgNV
BAMTKDA3MEQ0QzcwRDgxOTIxMjk5MEQxRTk5RTcxRjZERDZFNTczMUNCMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDky2InD+CKP/OD9vOzKXSFDgif
stEqQawCS/6keQSryp26y+LAZJJhyRE9y1/kO0GuWE0zQ7V22EPdGH+yOsp3ZYTN
aHrwxZwPjRWPdyFeKJofbDvFV7bga7eSZUg7zBInjYHjAt58K2+MN4zVo/NmlkLh
hutdBPTwMNre3Yuajb6oLBQWtNNdtu23MgYggHOi3HI6mApZNHIU5inqaLrqGGVW
o8fh3nbK13JxBLYkyuMvFzvmk2CY1EVHuUhSrLPhcnUVUH+yMZi2eibGkwwbLl+r
KAJHubPH+CHdcHTIY69nq9OrzBJaRwQyE86AnyweOuy+pQxqIYTpx7It0mmZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUBw1McNgZISmQ0emecfbdblcxyy0wHwYDVR0j
BBgwFoAU1tjFf06UP4gTLuQsZhGObMkf7b8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGRhYTRjMGYtOTk5Mi00MmZjLWE1NDItZWZmNzQwOTFiMzM0LzAvRDZEOEM1N0Y0
RTk0M0Y4ODEzMkVFNDJDNjYxMThFNkNDOTFGRURCRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENkQ4QzU3RjRFOTQzRjg4MTMyRUU0MkM2NjExOEU2Q0M5MUZF
REJGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhkYWE0YzBmLTk5OTItNDJmYy1h
NTQyLWVmZjc0MDkxYjMzNC8wLzMxMzAzMzJlMzIzMDMzMmUzNzM2MmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzEzMzM0MzYzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ8tMMA0GCSqG
SIb3DQEBCwUAA4IBAQA1tcLDxvisq596Mm8ZoDzZsmc18E9hSwnuKZcid89H1Ddg
ELNiC0No565dRSu3DnJOnfcFfemrBRVQi4I98f4p8vR6szZV7GqGouH2dDZj+0sq
PWdYOSQoTb73zlBqffb4bU2I6QBaN+HduGbCYuCiJ0M68rJPM4LGqiiNR+rnxhKM
26drng2Vhf5IA9BX2glQ+pRlVTLuIeivWlnxnilAu4WWrfJnGq0zwxpJMVNVJRJT
V5ZvxNviqsR9vP6w9LTGGlTB238QDf+noPiuGbfEgfrYUqkJX65C1aELruI5//rR
evLIbWj4a2zr7COXx8pG/hUTIzkqytG77Id2PhIq
-----END CERTIFICATE-----
Generated at Wed May 13 03:55:31 2026 by rpki-client