
$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31352e302f32342d3234203d3e203633383237.roa
File: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier: CH+q+cxW04syGQTs2qRuGVzpDs6qixBBw3uVzFWNK2g=
Subject key identifier: 60:EF:E5:18:F4:D9:FC:6A:23:2F:B9:68:24:63:6C:9C:24:B0:32:FA
Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial: 20B67A12E5902417572422A1A687837260E8EFF0
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31352e302f32342d3234203d3e203633383237.roa
Signing time: Sun 03 May 2026 02:51:56 +0000
ROA not before: Sun 03 May 2026 02:46:56 +0000
ROA not after: Sun 02 May 2027 02:51:56 +0000
asID: 63827
IP address blocks: 103.39.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b6:7a:12:e5:90:24:17:57:24:22:a1:a6:87:83:72:60:e8:ef:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Validity
Not Before: May 3 02:46:56 2026 GMT
Not After : May 2 02:51:56 2027 GMT
Subject: CN=60EFE518F4D9FC6A232FB96824636C9C24B032FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:f3:ba:79:d4:b3:fd:59:da:16:a0:f1:e1:
15:43:73:65:3b:7f:d0:d5:98:ae:71:c9:c8:67:a1:
03:99:78:0b:bb:bf:3a:2d:01:7a:2a:3e:de:e9:a6:
e8:3f:b8:95:dd:cb:ce:a1:9b:65:ac:19:90:e6:37:
ca:ec:df:19:91:94:b9:67:66:b6:4f:cd:51:f2:82:
35:75:75:28:b5:26:3a:cd:bd:d6:c4:d2:76:7d:bd:
9b:fb:af:28:ca:27:f5:31:84:a0:bf:c9:88:a0:07:
04:c3:4b:43:ee:2a:9c:21:f0:1e:fc:ad:3c:58:8b:
b2:a4:74:9a:05:8c:7c:24:5f:e9:ce:0f:e4:d1:d1:
48:5c:dd:14:86:56:36:76:92:3a:93:44:cf:cc:cd:
e3:69:8a:32:40:ae:f4:20:e9:5b:60:21:bf:4a:6a:
fc:9a:8d:3f:92:35:e9:10:89:e8:22:ca:b6:6a:e9:
7b:a6:62:e7:ae:f1:4a:e6:ab:51:3b:8e:43:e4:f9:
3d:a9:0c:3f:96:c6:66:11:36:ef:7a:e0:61:dc:dc:
59:e5:94:9f:5a:60:ba:b8:cb:00:3a:d2:f6:f1:13:
a4:37:95:a0:ca:f0:03:64:4c:82:53:56:eb:45:92:
2a:45:1d:e4:56:d0:5c:35:37:d5:f6:cb:f8:55:e1:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EF:E5:18:F4:D9:FC:6A:23:2F:B9:68:24:63:6C:9C:24:B0:32:FA
X509v3 Authority Key Identifier:
keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31352e302f32342d3234203d3e203633383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.15.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f0:75:6b:99:6a:c9:2b:a3:18:3f:52:5c:8d:ef:d6:3a:bc:
1b:bc:28:44:b5:c1:79:5e:71:be:4e:42:5a:9b:a5:10:ee:76:
78:bc:6c:c1:a4:46:f2:a0:fc:a7:c0:b2:1d:58:6e:88:af:02:
75:2e:bd:41:7b:2e:1c:30:b8:84:20:93:c3:38:5d:b1:69:80:
8f:73:dd:6c:c6:53:45:30:7f:39:c1:b2:b4:ec:d5:83:38:05:
4b:5b:e6:f1:76:b7:6f:df:66:ed:f2:d6:a0:13:d5:eb:b2:7b:
38:47:69:ef:7b:9f:de:1e:a6:16:b2:aa:25:d3:79:a8:c3:aa:
4e:8a:28:cb:de:86:72:12:b9:eb:f3:1f:ed:54:7d:3e:39:6f:
d7:77:2b:2e:66:2f:69:dd:79:f6:1a:7e:fa:84:ea:92:40:d2:
3d:48:12:d4:e6:9d:bd:f7:5d:99:49:00:4c:43:33:14:60:cc:
c1:6c:e7:db:96:2c:01:af:57:73:01:f1:00:f5:7e:aa:ed:72:
7a:e2:85:3d:98:b2:6f:fb:91:30:69:8b:02:c7:b1:6d:6f:97:
0f:51:24:1a:7e:69:4e:f1:b8:14:ca:6c:59:1f:20:53:f1:38:
5b:2b:2c:d4:ac:5d:d8:92:bb:73:37:3d:07:f5:56:97:f8:56:
3f:55:84:65
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUILZ6EuWQJBdXJCKhpoeDcmDo7/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhEM0Q1NTZBOTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0
MDI5RTZDNDAeFw0yNjA1MDMwMjQ2NTZaFw0yNzA1MDIwMjUxNTZaMDMxMTAvBgNV
BAMTKDYwRUZFNTE4RjREOUZDNkEyMzJGQjk2ODI0NjM2QzlDMjRCMDMyRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/fO6edSz/VnaFqDx4RVDc2U7
f9DVmK5xychnoQOZeAu7vzotAXoqPt7ppug/uJXdy86hm2WsGZDmN8rs3xmRlLln
ZrZPzVHygjV1dSi1JjrNvdbE0nZ9vZv7ryjKJ/UxhKC/yYigBwTDS0PuKpwh8B78
rTxYi7KkdJoFjHwkX+nOD+TR0Uhc3RSGVjZ2kjqTRM/MzeNpijJArvQg6VtgIb9K
avyajT+SNekQiegiyrZq6XumYueu8Urmq1E7jkPk+T2pDD+WxmYRNu964GHc3Fnl
lJ9aYLq4ywA60vbxE6Q3laDK8ANkTIJTVutFkipFHeRW0Fw1N9X2y/hV4XSJAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUYO/lGPTZ/GojL7loJGNsnCSwMvowHwYDVR0j
BBgwFoAUCNPVVqmJ4OR37+uCQoVNekAp5sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTFhNjg3MTItMWQ5YS00MTQzLTgyZjEtMWM4MmMzMzE2NWVhLzAvMDhEM0Q1NTZB
OTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0MDI5RTZDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wOEQzRDU1NkE5ODlFMEU0NzdFRkVCODI0Mjg1NEQ3QTQwMjlF
NkM0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkxYTY4NzEyLTFkOWEtNDE0My04
MmYxLTFjODJjMzMxNjVlYS8wLzMxMzAzMzJlMzMzOTJlMzEzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnJw8wDQYJKoZIhvcN
AQELBQADggEBAEHwdWuZaskroxg/UlyN79Y6vBu8KES1wXlecb5OQlqbpRDudni8
bMGkRvKg/KfAsh1YboivAnUuvUF7LhwwuIQgk8M4XbFpgI9z3WzGU0UwfznBsrTs
1YM4BUtb5vF2t2/fZu3y1qAT1euyezhHae97n94ephayqiXTeajDqk6KKMvehnIS
uevzH+1UfT45b9d3Ky5mL2ndefYafvqE6pJA0j1IEtTmnb33XZlJAExDMxRgzMFs
59uWLAGvV3MB8QD1fqrtcnrihT2Ysm/7kTBpiwLHsW1vlw9RJBp+aU7xuBTKbFkf
IFPxOFsrLNSsXdiSu3M3PQf1Vpf4Vj9VhGU=
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:17 2026 by rpki-client