
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa
File: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (raw, json)
Hash identifier: ADXGlMGf5Kb+tXCSNEvEFMbQ1O+wDlMr9doBES2hSe0=
Subject key identifier: EE:17:D5:01:C1:FE:A6:6E:9D:E0:5A:20:02:9A:8C:71:11:8D:35:DB
Certificate issuer: /CN=5340DB769DA0690FFA8A696A6047EDC148F1991A
Certificate serial: 0C3C00B5E35629A40F6F8434DA1645A000D98821
Authority key identifier: 53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa
Signing time: Sun 03 May 2026 02:58:38 +0000
ROA not before: Sun 03 May 2026 02:53:38 +0000
ROA not after: Sun 02 May 2027 02:58:38 +0000
asID: 17769
IP address blocks: 103.147.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl
rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3c:00:b5:e3:56:29:a4:0f:6f:84:34:da:16:45:a0:00:d9:88:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5340DB769DA0690FFA8A696A6047EDC148F1991A
Validity
Not Before: May 3 02:53:38 2026 GMT
Not After : May 2 02:58:38 2027 GMT
Subject: CN=EE17D501C1FEA66E9DE05A20029A8C71118D35DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:f8:7f:b3:8f:ec:4b:8d:8a:0e:58:90:5a:
b0:f6:21:73:c8:28:ff:dc:92:2c:91:a4:9a:e2:f6:
42:88:4f:a0:5c:d9:e1:69:33:2d:d5:ce:e1:74:60:
37:db:09:29:2b:cd:98:33:e7:0c:d1:86:d1:c3:d2:
a5:0d:9b:9b:8c:61:d0:e3:d1:22:fe:c3:67:61:0c:
62:6c:3b:2b:8f:80:33:db:ea:83:cc:57:2e:f6:c4:
31:d0:e4:be:2b:80:b9:f0:e5:2b:d6:02:6e:2d:4a:
46:80:eb:75:30:d8:f5:c3:61:b8:7d:8f:f0:17:e5:
f8:f0:3c:86:82:50:fc:eb:33:65:1a:6f:91:8b:b2:
8c:1e:44:c2:7e:03:58:7a:9d:ac:ee:63:6a:9d:6a:
61:c0:d9:35:f9:e5:5f:f2:49:a5:4c:22:3a:45:16:
72:58:8b:ce:37:74:c0:03:6e:c5:70:65:b1:b7:de:
69:c5:82:c4:94:e8:6e:6b:fc:3f:40:00:a7:e3:89:
11:fc:79:3f:c7:b8:82:69:36:3c:16:98:d2:d6:61:
e1:69:4c:ef:29:07:43:4f:b5:84:60:94:54:2e:45:
f2:43:2b:ca:e8:0c:f6:1f:c0:57:0c:50:c1:11:8f:
08:d7:9b:96:24:e3:4a:31:d7:b6:e1:dd:af:01:f9:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:17:D5:01:C1:FE:A6:6E:9D:E0:5A:20:02:9A:8C:71:11:8D:35:DB
X509v3 Authority Key Identifier:
keyid:53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.140.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:0e:26:b8:bf:e9:64:12:a7:41:48:b5:87:49:e0:6a:d4:3d:
5e:76:30:d2:b8:96:87:e2:5b:05:23:bb:19:14:ec:bc:76:bf:
e2:b4:08:01:07:99:96:cc:53:7a:22:4a:7e:9d:60:97:e5:89:
02:79:da:3f:a0:5c:87:0e:61:96:72:3e:5f:99:60:60:56:a1:
40:5c:3b:e2:fc:15:14:1e:ad:36:44:66:82:21:46:6e:e0:8c:
be:27:06:27:f8:07:4c:14:6c:2b:e3:90:a9:cd:82:4e:bc:8a:
29:a6:2f:38:5d:d5:1a:95:e7:6f:b4:2d:7b:78:21:14:21:54:
06:18:95:ee:a6:e4:e2:f4:82:c6:8c:f7:18:6c:ee:25:b3:4f:
dc:9e:a1:55:2b:02:36:0c:b1:bc:ff:24:ed:91:97:71:13:49:
04:e3:13:6b:9d:3f:a7:d1:aa:75:0c:41:4a:dd:99:99:23:08:
d7:ae:70:20:05:8b:a6:a8:d8:71:fc:cb:5d:42:b9:3c:30:c2:
b5:f5:ee:90:2f:7e:d2:51:d8:b0:02:b5:51:ac:f2:f6:52:c1:
db:95:82:59:d7:a2:7f:77:63:6c:4b:84:bb:27:7b:9d:6b:ad:
4e:d3:87:c5:0c:3d:0f:c9:f5:51:b2:17:c7:37:c0:3a:7d:a1:
d9:2d:79:d8
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDDwAteNWKaQPb4Q02hZFoADZiCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM0MERCNzY5REEwNjkwRkZBOEE2OTZBNjA0N0VEQzE0
OEYxOTkxQTAeFw0yNjA1MDMwMjUzMzhaFw0yNzA1MDIwMjU4MzhaMDMxMTAvBgNV
BAMTKEVFMTdENTAxQzFGRUE2NkU5REUwNUEyMDAyOUE4QzcxMTE4RDM1REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXNfh/s4/sS42KDliQWrD2IXPI
KP/ckiyRpJri9kKIT6Bc2eFpMy3VzuF0YDfbCSkrzZgz5wzRhtHD0qUNm5uMYdDj
0SL+w2dhDGJsOyuPgDPb6oPMVy72xDHQ5L4rgLnw5SvWAm4tSkaA63Uw2PXDYbh9
j/AX5fjwPIaCUPzrM2Uab5GLsoweRMJ+A1h6nazuY2qdamHA2TX55V/ySaVMIjpF
FnJYi843dMADbsVwZbG33mnFgsSU6G5r/D9AAKfjiRH8eT/HuIJpNjwWmNLWYeFp
TO8pB0NPtYRglFQuRfJDK8roDPYfwFcMUMERjwjXm5Yk40ox17bh3a8B+RGvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU7hfVAcH+pm6d4FogApqMcRGNNdswHwYDVR0j
BBgwFoAUU0Dbdp2gaQ/6imlqYEftwUjxmRowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWM3MTQxMjItODYwYy00MTRlLWE2N2EtNjg0YTFiZTk2MGRlLzAvNTM0MERCNzY5
REEwNjkwRkZBOEE2OTZBNjA0N0VEQzE0OEYxOTkxQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MzQwREI3NjlEQTA2OTBGRkE4QTY5NkE2MDQ3RURDMTQ4RjE5
OTFBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FjNzE0MTIyLTg2MGMtNDE0ZS1h
NjdhLTY4NGExYmU5NjBkZS8wLzMxMzAzMzJlMzEzNDM3MmUzMTM0MzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzczNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5OMMA0GCSqG
SIb3DQEBCwUAA4IBAQCaDia4v+lkEqdBSLWHSeBq1D1edjDSuJaH4lsFI7sZFOy8
dr/itAgBB5mWzFN6Ikp+nWCX5YkCedo/oFyHDmGWcj5fmWBgVqFAXDvi/BUUHq02
RGaCIUZu4Iy+JwYn+AdMFGwr45CpzYJOvIoppi84XdUaledvtC17eCEUIVQGGJXu
puTi9ILGjPcYbO4ls0/cnqFVKwI2DLG8/yTtkZdxE0kE4xNrnT+n0ap1DEFK3ZmZ
IwjXrnAgBYumqNhx/MtdQrk8MMK19e6QL37SUdiwArVRrPL2UsHblYJZ16J/d2Ns
S4S7J3uda61O04fFDD0PyfVRshfHN8A6faHZLXnY
-----END CERTIFICATE-----
Generated at Wed May 13 10:04:00 2026 by rpki-client