
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa
File: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (raw, json)
Hash identifier: OqiAXacTaTMvrJqwT1wd9NgwR8chI6fLuF/nnIi/ym4=
Subject key identifier: F8:5C:7E:AD:15:A9:57:51:ED:D4:56:7D:95:3E:47:89:87:28:AA:E0
Certificate issuer: /CN=68ECB00B63436E13214F12C7732F716D44E5E72D
Certificate serial: 37F236F5C693A892484B6ACAFECC83913E76AD67
Authority key identifier: 68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa
Signing time: Sun 03 May 2026 02:56:22 +0000
ROA not before: Sun 03 May 2026 02:51:22 +0000
ROA not after: Sun 02 May 2027 02:56:22 +0000
asID: 150249
IP address blocks: 103.87.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl
rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f2:36:f5:c6:93:a8:92:48:4b:6a:ca:fe:cc:83:91:3e:76:ad:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ECB00B63436E13214F12C7732F716D44E5E72D
Validity
Not Before: May 3 02:51:22 2026 GMT
Not After : May 2 02:56:22 2027 GMT
Subject: CN=F85C7EAD15A95751EDD4567D953E47898728AAE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:17:c8:32:d0:34:9b:a1:3d:fd:f1:38:42:
c8:5b:e1:ec:28:49:3a:e3:15:05:67:b8:fb:31:b2:
0b:29:18:52:5d:2c:ce:24:68:b6:ff:1b:dc:67:c3:
a9:c3:c6:35:ea:67:0f:09:6c:f2:d9:55:f8:87:be:
65:10:17:44:99:f9:53:71:9b:aa:f8:d9:c9:ea:f0:
95:c2:16:a8:df:a1:52:18:15:a8:bc:01:a5:a7:89:
a6:ec:9a:1e:fd:52:e9:f3:a9:46:42:4a:a9:33:bc:
b6:6f:a3:ad:ef:5c:af:58:d6:81:07:b2:99:3f:c8:
e4:f5:a4:8d:3b:b1:75:0b:b1:0c:ce:28:3f:41:50:
a8:73:a1:ef:ec:ed:17:32:e5:1e:72:63:08:7d:35:
57:29:f8:ff:22:ef:91:a9:51:a6:76:9c:bf:1b:3c:
71:0f:ca:f6:be:5c:61:62:86:53:c0:a1:0c:5d:c4:
62:eb:9d:20:5f:00:56:22:01:e5:95:bc:bb:03:43:
2e:e2:21:f6:18:d0:a3:b4:b5:fa:89:75:f2:c4:7e:
d8:bc:89:d3:c3:96:a0:29:11:2a:11:52:b8:13:c5:
96:ef:e8:67:12:03:cd:ef:ea:b3:dc:98:94:46:72:
45:98:b1:3e:36:d9:28:6d:2e:f3:f4:76:49:d3:3b:
fe:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5C:7E:AD:15:A9:57:51:ED:D4:56:7D:95:3E:47:89:87:28:AA:E0
X509v3 Authority Key Identifier:
keyid:68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.68.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a3:78:ad:5b:dd:db:95:98:f3:42:c9:c7:45:eb:52:09:86:
59:8e:15:66:eb:82:60:57:46:4f:fb:43:45:34:f4:f3:17:3c:
26:29:bb:b1:9e:9b:05:33:e6:3d:b0:98:5b:c7:6b:4f:51:77:
66:76:d1:7d:51:b9:20:94:b3:d6:c8:49:f5:be:dc:23:10:30:
7d:18:5b:66:12:f7:8e:cf:79:5d:07:74:36:71:30:1e:b1:9b:
11:7d:db:53:7a:05:2d:04:64:3f:21:9a:4e:2a:df:26:9f:95:
04:8b:b8:bf:a5:db:f4:dd:ed:a1:79:1a:cf:cf:95:f5:4b:fd:
43:9a:26:a9:ac:9d:3a:6b:48:0b:3a:1d:a2:3b:af:91:a8:35:
49:ae:e9:ae:14:e8:e7:6e:1d:2e:52:08:0b:e1:15:c4:3c:29:
b8:1b:ee:f1:c1:fa:bc:ed:10:29:ae:73:c3:c3:b2:06:a1:e1:
83:2f:3f:67:53:87:b5:f6:c2:39:7e:1d:40:01:70:48:66:02:
bf:92:bd:73:af:55:fb:f2:7e:a7:1c:4d:a3:fa:8b:62:35:79:
15:f4:5e:03:8d:9a:f3:cb:c6:7e:1c:8c:b2:6f:8c:1d:8d:04:
a4:f0:6d:bc:2e:1f:e2:81:a0:01:58:b6:2a:c5:71:d9:9f:28:
7a:52:d9:07
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUN/I29caTqJJIS2rK/syDkT52rWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0
NEU1RTcyRDAeFw0yNjA1MDMwMjUxMjJaFw0yNzA1MDIwMjU2MjJaMDMxMTAvBgNV
BAMTKEY4NUM3RUFEMTVBOTU3NTFFREQ0NTY3RDk1M0U0Nzg5ODcyOEFBRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66BfIMtA0m6E9/fE4Qshb4ewo
STrjFQVnuPsxsgspGFJdLM4kaLb/G9xnw6nDxjXqZw8JbPLZVfiHvmUQF0SZ+VNx
m6r42cnq8JXCFqjfoVIYFai8AaWniabsmh79UunzqUZCSqkzvLZvo63vXK9Y1oEH
spk/yOT1pI07sXULsQzOKD9BUKhzoe/s7Rcy5R5yYwh9NVcp+P8i75GpUaZ2nL8b
PHEPyva+XGFihlPAoQxdxGLrnSBfAFYiAeWVvLsDQy7iIfYY0KO0tfqJdfLEfti8
idPDlqApESoRUrgTxZbv6GcSA83v6rPcmJRGckWYsT422ShtLvP0dknTO/7VAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU+Fx+rRWpV1Ht1FZ9lT5HiYcoquAwHwYDVR0j
BBgwFoAUaOywC2NDbhMhTxLHcy9xbUTl5y0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTM5YzU0ODQtMmUzNy00OGY5LThlYmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2
MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0NEU1RTcyRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82OEVDQjAwQjYzNDM2RTEzMjE0RjEyQzc3MzJGNzE2RDQ0RTVF
NzJELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EzOWM1NDg0LTJlMzctNDhmOS04
ZWJhLTBhZjRlZjYyOTQ3ZC8wLzMxMzAzMzJlMzgzNzJlMzYzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdXRDANBgkqhkiG
9w0BAQsFAAOCAQEAJqN4rVvd25WY80LJx0XrUgmGWY4VZuuCYFdGT/tDRTT08xc8
Jim7sZ6bBTPmPbCYW8drT1F3ZnbRfVG5IJSz1shJ9b7cIxAwfRhbZhL3js95XQd0
NnEwHrGbEX3bU3oFLQRkPyGaTirfJp+VBIu4v6Xb9N3toXkaz8+V9Uv9Q5omqayd
OmtICzodojuvkag1Sa7prhTo524dLlIIC+EVxDwpuBvu8cH6vO0QKa5zw8OyBqHh
gy8/Z1OHtfbCOX4dQAFwSGYCv5K9c69V+/J+pxxNo/qLYjV5FfReA42a88vGfhyM
sm+MHY0EpPBtvC4f4oGgAVi2KsVx2Z8oelLZBw==
-----END CERTIFICATE-----
Generated at Wed May 13 10:20:54 2026 by rpki-client