
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa
File: 3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (raw, json)
Hash identifier: ePjyykmLAPcuoIW4PxvnsIf6Mnk1VG8I5wQF6R8ChtM=
Subject key identifier: 13:F3:54:92:3A:95:69:71:91:A4:03:6C:09:3A:95:01:60:D4:6F:B9
Certificate issuer: /CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537
Certificate serial: 76D45269ECC6E05D895D6ABD13A9271C7085BF4E
Authority key identifier: EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa
Signing time: Sun 03 May 2026 02:58:11 +0000
ROA not before: Sun 03 May 2026 02:53:11 +0000
ROA not after: Sun 02 May 2027 02:58:11 +0000
asID: 147150
IP address blocks: 103.255.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl
rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d4:52:69:ec:c6:e0:5d:89:5d:6a:bd:13:a9:27:1c:70:85:bf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537
Validity
Not Before: May 3 02:53:11 2026 GMT
Not After : May 2 02:58:11 2027 GMT
Subject: CN=13F354923A95697191A4036C093A950160D46FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:85:ce:f8:89:05:aa:f3:95:f5:35:4a:63:
3b:e9:b0:1b:91:11:6d:29:3f:5b:90:17:f2:6d:c2:
a0:a9:07:6f:4f:f1:5f:5d:08:82:9b:2b:65:e9:2a:
b1:23:95:08:05:bb:6a:1b:5f:f9:56:0e:17:71:d3:
26:64:5a:66:26:34:93:1d:48:36:b7:d8:a9:ff:71:
e3:c1:e9:69:d7:92:1a:82:19:9e:26:af:90:8a:63:
01:50:9e:72:0a:f3:e3:dc:ef:d0:b1:a9:56:8c:fb:
5c:a5:d5:78:9e:58:ba:97:4c:08:c5:a9:af:e7:8c:
e7:2a:0e:de:d3:7c:cf:62:ca:20:69:23:2a:26:86:
e8:c4:36:37:65:28:0b:1d:8b:e1:f1:8b:e2:0c:75:
e5:0a:6f:d6:e8:4c:82:b3:ff:fa:85:f8:fe:2c:b5:
42:3d:05:b7:cb:ce:7f:c7:07:5b:06:9b:e4:b7:02:
40:c0:d9:0d:aa:ed:03:6d:4c:23:58:16:09:5d:c4:
af:43:10:a5:7e:d6:8f:ec:59:01:c1:60:1f:00:69:
fa:cb:0f:5c:47:bd:8d:40:1b:c7:92:22:83:66:53:
04:26:28:9e:55:68:53:4c:40:90:0d:87:98:5f:9d:
cd:14:ca:e7:c5:4d:38:89:98:1e:cc:b7:86:69:9e:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F3:54:92:3A:95:69:71:91:A4:03:6C:09:3A:95:01:60:D4:6F:B9
X509v3 Authority Key Identifier:
keyid:EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.255.108.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e7:22:bf:d0:38:72:35:d8:f1:8a:45:28:b3:c8:c8:0e:bc:
da:80:02:54:5f:ae:83:79:7a:ee:e2:a4:fd:ec:28:73:1b:ba:
89:4d:dd:4a:0f:33:b3:ab:ca:7e:bf:a3:6e:19:06:d4:4a:20:
7f:9d:83:da:9f:25:6b:5f:b5:7f:9e:15:d4:ad:3f:e1:25:1c:
44:74:55:b0:bb:bc:3f:52:68:a8:7c:75:2b:04:a8:d3:06:2e:
0e:10:41:2a:63:21:e7:6e:97:63:c6:39:8d:21:9b:17:17:7e:
c1:96:88:a3:77:05:47:e1:af:8c:47:af:b7:26:71:83:3c:6c:
42:8a:df:49:a9:c2:39:68:10:16:cc:2f:f8:7c:81:e7:e7:3d:
b9:1c:84:b8:9d:d0:6b:ba:5f:5c:0e:fb:c1:36:23:54:1c:cb:
e1:32:51:73:9c:df:63:ad:1e:27:d9:e4:e6:14:3d:01:e6:85:
d0:af:dd:71:9c:a2:5f:5e:61:52:51:2e:89:ce:63:90:d0:ae:
ca:bf:a3:e1:f0:bf:32:18:a2:ae:9d:64:3e:96:11:52:aa:70:
ce:14:0b:4d:f5:b8:da:3c:32:1e:6b:0b:0f:5b:26:66:74:a1:
ac:90:0e:c3:e3:bd:cd:01:91:c0:c3:e7:ca:ca:15:35:de:83:
eb:9b:7e:f2
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUdtRSaezG4F2JXWq9E6knHHCFv04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIxQTdFRTUzOUU2RjFFRkEzRDMwQzYyMTQ5QzI2NUVC
RjMwQjUzNzAeFw0yNjA1MDMwMjUzMTFaFw0yNzA1MDIwMjU4MTFaMDMxMTAvBgNV
BAMTKDEzRjM1NDkyM0E5NTY5NzE5MUE0MDM2QzA5M0E5NTAxNjBENDZGQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BYXO+IkFqvOV9TVKYzvpsBuR
EW0pP1uQF/JtwqCpB29P8V9dCIKbK2XpKrEjlQgFu2obX/lWDhdx0yZkWmYmNJMd
SDa32Kn/cePB6WnXkhqCGZ4mr5CKYwFQnnIK8+Pc79CxqVaM+1yl1XieWLqXTAjF
qa/njOcqDt7TfM9iyiBpIyomhujENjdlKAsdi+Hxi+IMdeUKb9boTIKz//qF+P4s
tUI9BbfLzn/HB1sGm+S3AkDA2Q2q7QNtTCNYFgldxK9DEKV+1o/sWQHBYB8AafrL
D1xHvY1AG8eSIoNmUwQmKJ5VaFNMQJANh5hfnc0UyufFTTiJmB7Mt4ZpnoBXAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUE/NUkjqVaXGRpANsCTqVAWDUb7kwHwYDVR0j
BBgwFoAU6xp+5Tnm8e+j0wxiFJwmXr8wtTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWExMWU2ZDctNTdhMS00OTM2LWI3YTctZGUwOTM1MjVjYjI3LzAvRUIxQTdFRTUz
OUU2RjFFRkEzRDMwQzYyMTQ5QzI2NUVCRjMwQjUzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQjFBN0VFNTM5RTZGMUVGQTNEMzBDNjIxNDlDMjY1RUJGMzBC
NTM3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FhMTFlNmQ3LTU3YTEtNDkzNi1i
N2E3LWRlMDkzNTI1Y2IyNy8wLzMxMzAzMzJlMzIzNTM1MmUzMTMwMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMTM1MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn/2wwDQYJ
KoZIhvcNAQELBQADggEBAIDnIr/QOHI12PGKRSizyMgOvNqAAlRfroN5eu7ipP3s
KHMbuolN3UoPM7Oryn6/o24ZBtRKIH+dg9qfJWtftX+eFdStP+ElHER0VbC7vD9S
aKh8dSsEqNMGLg4QQSpjIedul2PGOY0hmxcXfsGWiKN3BUfhr4xHr7cmcYM8bEKK
30mpwjloEBbML/h8gefnPbkchLid0Gu6X1wO+8E2I1Qcy+EyUXOc32OtHifZ5OYU
PQHmhdCv3XGcol9eYVJRLonOY5DQrsq/o+HwvzIYoq6dZD6WEVKqcM4UC031uNo8
Mh5rCw9bJmZ0oayQDsPjvc0BkcDD58rKFTXeg+ubfvI=
-----END CERTIFICATE-----
Generated at Wed May 13 11:22:35 2026 by rpki-client