
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/3130332e3136312e37332e302f32342d3234203d3e203538333738.roa
File: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (raw, json)
Hash identifier: pi4GpQEqsy5D0pG1/itP4Rd3gKkO+zB1DmoOxM7Tnmw=
Subject key identifier: 93:29:85:C6:4D:D0:1A:F5:B9:36:A9:F4:FB:FD:A4:9E:53:40:E5:43
Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED
Certificate serial: 5A0AAA2AE6B4DFDE5769EF7136A681E9FCA4EBA9
Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/3130332e3136312e37332e302f32342d3234203d3e203538333738.roa
Signing time: Sun 03 May 2026 02:55:03 +0000
ROA not before: Sun 03 May 2026 02:50:03 +0000
ROA not after: Sun 02 May 2027 02:55:03 +0000
asID: 58378
IP address blocks: 103.161.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl
rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:0a:aa:2a:e6:b4:df:de:57:69:ef:71:36:a6:81:e9:fc:a4:eb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D88374740C8E344956042586CFB98762292C9BED
Validity
Not Before: May 3 02:50:03 2026 GMT
Not After : May 2 02:55:03 2027 GMT
Subject: CN=932985C64DD01AF5B936A9F4FBFDA49E5340E543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:48:10:ef:29:0d:96:f1:3d:77:72:e8:ea:
ad:fa:f8:28:c0:3a:5b:54:8f:e4:03:12:56:69:4a:
b2:7c:35:45:5d:a7:b5:2b:73:62:26:60:fb:1e:2a:
66:33:0b:eb:90:0a:8a:1b:e5:22:19:9e:06:6f:45:
e4:5b:50:34:aa:0d:dc:d6:67:97:9f:1d:a0:d3:95:
e8:96:df:55:c1:2c:d5:fa:6e:02:03:71:a0:ca:2c:
66:eb:2d:34:69:60:5a:6b:f1:e9:89:8f:a2:c7:db:
42:4c:4b:a6:b5:06:c0:c0:33:00:66:e6:6f:e5:6e:
28:b7:8f:8a:42:9b:ce:87:5d:21:4c:2b:67:56:f8:
81:5d:8e:26:61:d5:ef:b4:a8:4f:69:52:39:ef:c5:
d2:96:37:c0:33:95:e6:3f:2f:6f:fa:8c:e5:57:b5:
61:49:4d:e1:ee:d1:ec:dd:1a:6f:fe:8e:5b:4c:da:
47:6c:a6:25:1f:8e:64:7c:bc:d2:aa:36:8b:6b:2a:
8e:3d:a3:8a:5d:2e:06:fe:1d:8b:ad:ba:1d:e9:93:
62:60:ad:96:d2:b3:76:67:b4:d8:c1:7e:33:e9:57:
69:ec:c0:77:09:2e:88:00:3d:7b:68:8e:bf:a3:4d:
50:af:da:5e:44:70:2b:d7:79:74:96:9e:8d:97:20:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:29:85:C6:4D:D0:1A:F5:B9:36:A9:F4:FB:FD:A4:9E:53:40:E5:43
X509v3 Authority Key Identifier:
keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/3130332e3136312e37332e302f32342d3234203d3e203538333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.73.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6b:4e:11:b5:3b:e6:98:bb:a8:cb:27:d1:64:a7:df:66:16:
0b:17:05:ea:18:c1:66:cb:61:22:68:db:2c:58:17:8c:40:c0:
df:bb:73:6d:96:c9:ca:1e:a0:d1:45:3a:01:d2:c9:69:01:35:
c5:f4:a5:16:b2:dc:35:69:97:cc:3d:cc:89:c6:7b:b5:81:e5:
56:79:e4:38:60:df:ec:71:c8:1a:a7:34:28:b7:2f:71:3e:6f:
2e:2d:ab:3d:f5:34:bd:84:72:97:2a:a4:3b:20:49:74:b8:61:
5c:64:8b:07:38:19:c0:68:8f:84:eb:5e:09:ae:9b:24:6b:eb:
3d:62:6d:9e:9f:ce:dd:72:de:4d:3a:01:fd:fe:8d:48:3b:23:
b3:3c:6e:c8:bf:e5:1f:79:0e:77:47:4c:49:ad:b6:66:29:d4:
6c:5f:78:1c:41:c4:ea:b3:54:d9:25:3a:ba:3d:25:7a:be:3c:
ca:6a:57:76:da:6d:48:ee:6e:7e:00:a6:b7:41:b5:bc:66:65:
d3:32:df:ac:d0:47:9c:55:16:4e:a7:9b:b9:69:f2:c6:1a:af:
34:61:13:78:0a:91:3a:44:8f:28:d5:67:74:2e:e0:97:a6:cc:
04:06:14:b7:4c:21:55:45:11:26:a3:b0:7c:ae:12:53:d0:f7:
2a:07:c3:77
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWgqqKua0395Xae9xNqaB6fyk66kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIy
OTJDOUJFRDAeFw0yNjA1MDMwMjUwMDNaFw0yNzA1MDIwMjU1MDNaMDMxMTAvBgNV
BAMTKDkzMjk4NUM2NEREMDFBRjVCOTM2QTlGNEZCRkRBNDlFNTM0MEU1NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3UgQ7ykNlvE9d3Lo6q36+CjA
OltUj+QDElZpSrJ8NUVdp7Urc2ImYPseKmYzC+uQCoob5SIZngZvReRbUDSqDdzW
Z5efHaDTleiW31XBLNX6bgIDcaDKLGbrLTRpYFpr8emJj6LH20JMS6a1BsDAMwBm
5m/lbii3j4pCm86HXSFMK2dW+IFdjiZh1e+0qE9pUjnvxdKWN8AzleY/L2/6jOVX
tWFJTeHu0ezdGm/+jltM2kdspiUfjmR8vNKqNotrKo49o4pdLgb+HYutuh3pk2Jg
rZbSs3ZntNjBfjPpV2nswHcJLogAPXtojr+jTVCv2l5EcCvXeXSWno2XIOrRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUkymFxk3QGvW5Nqn0+/2knlNA5UMwHwYDVR0j
BBgwFoAU2IN0dAyONElWBCWGz7mHYiksm+0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWViZTdhZDgtZTE1Yy00MDE0LWJmYjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQw
QzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIyOTJDOUJFRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EODgzNzQ3NDBDOEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5MkM5
QkVELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzllYmU3YWQ4LWUxNWMtNDAxNC1i
ZmIzLWJlNjliN2Q1ZGU4OC8wLzMxMzAzMzJlMzEzNjMxMmUzNzMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGehSTANBgkqhkiG
9w0BAQsFAAOCAQEAe2tOEbU75pi7qMsn0WSn32YWCxcF6hjBZsthImjbLFgXjEDA
37tzbZbJyh6g0UU6AdLJaQE1xfSlFrLcNWmXzD3MicZ7tYHlVnnkOGDf7HHIGqc0
KLcvcT5vLi2rPfU0vYRylyqkOyBJdLhhXGSLBzgZwGiPhOteCa6bJGvrPWJtnp/O
3XLeTToB/f6NSDsjszxuyL/lH3kOd0dMSa22ZinUbF94HEHE6rNU2SU6uj0ler48
ympXdtptSO5ufgCmt0G1vGZl0zLfrNBHnFUWTqebuWnyxhqvNGETeAqROkSPKNVn
dC7gl6bMBAYUt0whVUURJqOwfK4SU9D3KgfDdw==
-----END CERTIFICATE-----
Generated at Tue May 12 22:49:49 2026 by rpki-client