
$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32322d3232203d3e203633383237.roa
File: 3130332e33392e31322e302f32322d3232203d3e203633383237.roa (raw, json)
Hash identifier: 76gleer34esIgeXzP55Qltcq6KQymYiw2jWBaYJM1Rs=
Subject key identifier: 90:8F:BC:07:CB:91:3C:60:58:80:A0:91:D9:97:4D:0D:8C:71:BE:57
Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial: 26AEE7932F191D041BDFAACBD4D19853891588B1
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32322d3232203d3e203633383237.roa
Signing time: Sun 03 May 2026 02:51:59 +0000
ROA not before: Sun 03 May 2026 02:46:59 +0000
ROA not after: Sun 02 May 2027 02:51:59 +0000
asID: 63827
IP address blocks: 103.39.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ae:e7:93:2f:19:1d:04:1b:df:aa:cb:d4:d1:98:53:89:15:88:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Validity
Not Before: May 3 02:46:59 2026 GMT
Not After : May 2 02:51:59 2027 GMT
Subject: CN=908FBC07CB913C605880A091D9974D0D8C71BE57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:ef:59:2e:a9:a5:9a:84:61:52:87:28:ba:
be:16:85:c5:78:1a:b8:28:a3:25:a7:1c:33:cc:29:
e7:8e:b3:f2:84:49:3f:cb:62:f8:59:04:84:28:fa:
72:d7:e4:fc:6c:59:b0:b9:8f:bc:17:4d:ac:e1:c1:
7f:16:1f:70:8b:7b:d2:41:fd:d5:66:c9:a8:61:8a:
8c:c7:fa:30:7e:d7:12:81:03:d9:7c:9d:76:f3:6c:
9f:d2:d6:e1:c6:79:0e:64:c2:88:33:ab:90:bb:44:
75:d3:68:42:0e:37:50:57:72:5b:49:0a:64:2e:26:
70:9b:03:4a:60:4d:d9:44:a6:91:5b:1a:15:dd:ba:
b9:c2:2a:7b:8e:2a:3e:5c:e8:05:d7:3f:45:ad:92:
3c:e0:c8:10:85:8b:41:de:06:fa:5c:78:12:29:7c:
02:96:fd:c3:60:c9:58:19:eb:b1:b8:3a:37:1f:32:
1f:06:67:4f:fc:ab:6a:6d:fd:22:14:8e:1a:90:28:
30:84:61:06:62:13:64:09:0f:bc:2a:3c:53:b0:45:
fa:76:2b:6f:87:b5:7e:16:97:81:39:93:dc:ec:4b:
23:5d:68:77:62:91:4c:40:0f:a1:19:5e:53:19:49:
cf:6d:68:fa:c6:f2:3a:75:fe:ca:26:bd:e1:2d:21:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8F:BC:07:CB:91:3C:60:58:80:A0:91:D9:97:4D:0D:8C:71:BE:57
X509v3 Authority Key Identifier:
keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32322d3232203d3e203633383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.12.0/22
Signature Algorithm: sha256WithRSAEncryption
84:f4:35:c3:3c:15:79:5f:1a:78:d5:4f:52:be:7b:e4:a3:cc:
23:e8:b2:f3:a6:06:b8:4f:c0:7d:01:ab:bc:2c:f6:b5:15:4c:
74:e7:5b:25:a2:d9:38:70:2e:7a:dd:33:e7:85:5a:72:ba:82:
84:6d:a1:f0:8d:80:ea:7e:d9:5f:90:b7:9b:35:86:c1:66:17:
64:51:8e:7e:c7:a7:15:9e:cb:91:3b:20:38:56:7f:0a:68:eb:
80:79:b4:03:72:b3:7e:48:61:8a:c2:fe:f3:61:3f:0f:d7:42:
a3:0a:d4:82:54:72:45:ce:37:09:8a:2d:bf:a6:0b:92:07:30:
c8:26:5c:3e:e2:e3:5e:93:8a:bf:ed:e5:cb:71:32:7c:1e:66:
8b:ff:42:73:8b:cb:9e:74:69:b4:ed:6b:c7:b7:f5:24:9c:c3:
4f:7d:b0:f0:7c:85:9c:0e:0b:5e:d2:f8:65:b9:50:ea:b7:6a:
ef:8b:34:40:dd:e9:7e:f0:82:75:1b:7b:f6:62:67:96:73:de:
e0:ad:ab:9b:ee:f7:9f:ae:70:c1:bd:68:46:58:cb:9d:e7:9f:
6f:64:80:ea:f3:9c:10:28:57:99:54:12:28:f9:a2:ff:2b:0d:
67:4d:d9:d3:ed:18:7a:90:1e:a9:76:4f:fb:a8:14:ae:5e:23:
97:09:3c:4c
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUJq7nky8ZHQQb36rL1NGYU4kViLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhEM0Q1NTZBOTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0
MDI5RTZDNDAeFw0yNjA1MDMwMjQ2NTlaFw0yNzA1MDIwMjUxNTlaMDMxMTAvBgNV
BAMTKDkwOEZCQzA3Q0I5MTNDNjA1ODgwQTA5MUQ5OTc0RDBEOEM3MUJFNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkzu9ZLqmlmoRhUocour4WhcV4
GrgooyWnHDPMKeeOs/KEST/LYvhZBIQo+nLX5PxsWbC5j7wXTazhwX8WH3CLe9JB
/dVmyahhiozH+jB+1xKBA9l8nXbzbJ/S1uHGeQ5kwogzq5C7RHXTaEION1BXcltJ
CmQuJnCbA0pgTdlEppFbGhXdurnCKnuOKj5c6AXXP0WtkjzgyBCFi0HeBvpceBIp
fAKW/cNgyVgZ67G4OjcfMh8GZ0/8q2pt/SIUjhqQKDCEYQZiE2QJD7wqPFOwRfp2
K2+HtX4Wl4E5k9zsSyNdaHdikUxAD6EZXlMZSc9taPrG8jp1/somveEtIdPHAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUkI+8B8uRPGBYgKCR2ZdNDYxxvlcwHwYDVR0j
BBgwFoAUCNPVVqmJ4OR37+uCQoVNekAp5sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTFhNjg3MTItMWQ5YS00MTQzLTgyZjEtMWM4MmMzMzE2NWVhLzAvMDhEM0Q1NTZB
OTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0MDI5RTZDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wOEQzRDU1NkE5ODlFMEU0NzdFRkVCODI0Mjg1NEQ3QTQwMjlF
NkM0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxYTY4NzEyLTFkOWEtNDE0My04
MmYxLTFjODJjMzMxNjVlYS8wLzMxMzAzMzJlMzMzOTJlMzEzMjJlMzAyZjMyMzIy
ZDMyMzIyMDNkM2UyMDM2MzMzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnJwwwDQYJKoZIhvcN
AQELBQADggEBAIT0NcM8FXlfGnjVT1K+e+SjzCPosvOmBrhPwH0Bq7ws9rUVTHTn
WyWi2ThwLnrdM+eFWnK6goRtofCNgOp+2V+Qt5s1hsFmF2RRjn7HpxWey5E7IDhW
fwpo64B5tANys35IYYrC/vNhPw/XQqMK1IJUckXONwmKLb+mC5IHMMgmXD7i416T
ir/t5ctxMnweZov/QnOLy550abTta8e39SScw099sPB8hZwOC17S+GW5UOq3au+L
NEDd6X7wgnUbe/ZiZ5Zz3uCtq5vu95+ucMG9aEZYy53nn29kgOrznBAoV5lUEij5
ov8rDWdN2dPtGHqQHql2T/uoFK5eI5cJPEw=
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:20 2026 by rpki-client