
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa
File: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (raw, json)
Hash identifier: 7Xohzs3qzHwElj+iGxc/XgWir/J3Steo6jFstKpP8Y0=
Subject key identifier: 79:89:5F:24:CB:55:D9:04:77:FE:22:18:8F:26:72:F1:A2:2B:94:48
Certificate issuer: /CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF
Certificate serial: 51372CC899E557751A5F8DFD99BB3B2CC90F3396
Authority key identifier: A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa
Signing time: Sun 03 May 2026 02:56:56 +0000
ROA not before: Sun 03 May 2026 02:51:56 +0000
ROA not after: Sun 02 May 2027 02:56:56 +0000
asID: 150211
IP address blocks: 103.196.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl
rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:37:2c:c8:99:e5:57:75:1a:5f:8d:fd:99:bb:3b:2c:c9:0f:33:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF
Validity
Not Before: May 3 02:51:56 2026 GMT
Not After : May 2 02:56:56 2027 GMT
Subject: CN=79895F24CB55D90477FE22188F2672F1A22B9448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:ce:a5:61:e2:d6:b5:a7:77:70:39:ef:5f:
cb:2b:33:de:2f:d6:e7:6b:0e:45:98:ce:1f:43:07:
f0:3b:78:69:3c:8a:55:b6:da:5e:8a:73:22:57:01:
5c:81:ab:86:cd:49:a9:05:41:e6:57:9b:0f:ff:1a:
89:c3:57:70:97:70:cf:14:50:c1:c5:4c:1e:58:aa:
4f:77:a5:f9:ee:9a:3d:48:aa:7f:82:ee:f6:b7:62:
f7:6a:75:bf:49:c0:e2:90:38:d6:f0:5f:bd:da:d9:
4c:e5:54:31:87:10:f9:96:8b:b5:bf:17:69:7d:e2:
ce:b3:8c:29:4d:7d:97:e4:d7:a0:e8:18:bb:60:fe:
ec:6b:c9:c1:8e:c8:6e:85:5e:03:95:65:32:5f:d9:
4f:68:c1:42:7a:3d:85:76:17:b6:e5:83:39:09:1e:
ef:b6:63:6c:89:3a:cb:ae:81:31:a5:76:62:fd:44:
c1:eb:0d:04:83:85:e3:d1:b1:15:58:c6:c0:67:ba:
3c:ac:96:28:e8:ac:64:80:2d:68:a7:52:cb:fc:1e:
b8:5d:6d:96:94:60:83:8e:ed:86:22:c9:54:2a:19:
f1:e6:22:52:d8:5a:d1:7b:44:a3:cc:52:cf:fd:22:
82:11:98:f2:61:0a:af:c9:19:cd:a0:81:d8:4d:e5:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:5F:24:CB:55:D9:04:77:FE:22:18:8F:26:72:F1:A2:2B:94:48
X509v3 Authority Key Identifier:
keyid:A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.196.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e0:23:fc:9f:ea:f7:3c:85:d0:62:9e:55:9a:f1:24:ab:c7:
86:cc:25:6e:e3:09:20:77:9e:0a:60:42:59:4c:7c:23:a2:d2:
39:c3:2f:46:87:d5:88:a1:c1:9e:63:44:bd:84:2e:ed:b0:5b:
34:ef:05:63:80:5b:45:05:ee:07:a3:c7:7c:99:c9:55:b4:51:
12:e7:5a:a2:55:47:87:39:6f:86:ac:ee:3b:04:89:9c:4e:68:
cd:d2:82:11:69:c5:c9:3a:4a:70:44:a7:45:db:00:ff:aa:96:
41:d8:46:61:6c:f5:e9:a6:96:8d:a6:b3:50:ab:f3:fd:cf:62:
1a:a1:5b:95:44:38:e9:aa:46:72:ab:f3:29:f9:1b:0f:49:29:
4b:8c:e1:8a:af:44:ed:58:6d:51:b0:27:a4:e6:b4:3c:67:45:
e1:74:a3:bf:ab:1a:64:91:0f:a4:c4:9e:34:81:8e:05:ca:c7:
60:ec:37:0a:5b:bf:70:d5:a3:86:0c:c9:55:6e:31:4a:1f:d2:
a4:f7:91:17:ed:7b:62:f4:f2:f2:f4:a0:13:29:2f:cd:87:fa:
e3:03:11:14:c3:89:aa:09:d8:07:11:34:7a:33:80:5a:0c:2c:
12:cc:2c:8e:fd:ed:88:64:68:f6:d4:2f:b1:e9:0b:ae:eb:f5:
45:78:7a:e4
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUUTcsyJnlV3UaX439mbs7LMkPM5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMw
RTZDMUFFRjAeFw0yNjA1MDMwMjUxNTZaFw0yNzA1MDIwMjU2NTZaMDMxMTAvBgNV
BAMTKDc5ODk1RjI0Q0I1NUQ5MDQ3N0ZFMjIxODhGMjY3MkYxQTIyQjk0NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKM6lYeLWtad3cDnvX8srM94v
1udrDkWYzh9DB/A7eGk8ilW22l6KcyJXAVyBq4bNSakFQeZXmw//GonDV3CXcM8U
UMHFTB5Yqk93pfnumj1Iqn+C7va3Yvdqdb9JwOKQONbwX73a2UzlVDGHEPmWi7W/
F2l94s6zjClNfZfk16DoGLtg/uxrycGOyG6FXgOVZTJf2U9owUJ6PYV2F7blgzkJ
Hu+2Y2yJOsuugTGldmL9RMHrDQSDhePRsRVYxsBnujyslijorGSALWinUsv8Hrhd
bZaUYIOO7YYiyVQqGfHmIlLYWtF7RKPMUs/9IoIRmPJhCq/JGc2ggdhN5Xk3AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUeYlfJMtV2QR3/iIYjyZy8aIrlEgwHwYDVR0j
BBgwFoAUqJ4oAI9DtwTC/cPq0/rwgw5sGu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTY0MGFiZTYtOGRlZS00YmQxLTgxNGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4
RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMwRTZDMUFFRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BODlFMjgwMDhGNDNCNzA0QzJGREMzRUFEM0ZBRjA4MzBFNkMx
QUVGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2NDBhYmU2LThkZWUtNGJkMS04
MTRjLTJhZjMxYTNkOWNkZi8wLzMxMzAzMzJlMzEzOTM2MmUzMTMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzMjMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnxHcwDQYJ
KoZIhvcNAQELBQADggEBAFzgI/yf6vc8hdBinlWa8SSrx4bMJW7jCSB3ngpgQllM
fCOi0jnDL0aH1YihwZ5jRL2ELu2wWzTvBWOAW0UF7gejx3yZyVW0URLnWqJVR4c5
b4as7jsEiZxOaM3SghFpxck6SnBEp0XbAP+qlkHYRmFs9emmlo2ms1Cr8/3PYhqh
W5VEOOmqRnKr8yn5Gw9JKUuM4YqvRO1YbVGwJ6TmtDxnReF0o7+rGmSRD6TEnjSB
jgXKx2DsNwpbv3DVo4YMyVVuMUof0qT3kRfte2L08vL0oBMpL82H+uMDERTDiaoJ
2AcRNHozgFoMLBLMLI797YhkaPbUL7HpC67r9UV4euQ=
-----END CERTIFICATE-----
Generated at Wed May 13 07:35:53 2026 by rpki-client