
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32342d3234203d3e203535373031.roa
File: 3130332e32302e3130382e302f32342d3234203d3e203535373031.roa (raw, json)
Hash identifier: K1J2WLNSxTg8mS0mgqZlEWvUbNOvOM1DvLk7zTONlww=
Subject key identifier: E4:77:0E:79:23:C3:4E:98:E4:B1:E6:E2:D5:32:A2:C1:B8:8A:91:61
Certificate issuer: /CN=A337D214F1B15825AC6178574C28712521D64B38
Certificate serial: 18E702DF10F2D13912BB642B99F14FDDBC8B8375
Authority key identifier: A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32342d3234203d3e203535373031.roa
Signing time: Sat 07 Nov 2026 08:00:42 +0000
ROA not before: Sat 07 Nov 2026 07:55:42 +0000
ROA not after: Sat 06 Nov 2027 08:00:42 +0000
asID: 55701
IP address blocks: 103.20.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl
rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 21:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e7:02:df:10:f2:d1:39:12:bb:64:2b:99:f1:4f:dd:bc:8b:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A337D214F1B15825AC6178574C28712521D64B38
Validity
Not Before: Nov 7 07:55:42 2026 GMT
Not After : Nov 6 08:00:42 2027 GMT
Subject: CN=E4770E7923C34E98E4B1E6E2D532A2C1B88A9161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:e0:56:f9:f0:a4:bf:2d:a0:93:02:4d:20:
41:0a:c1:d2:2f:47:d3:4b:67:d8:c7:f8:c0:0c:d6:
a0:b7:b6:95:de:85:cb:eb:67:f0:99:89:cb:76:b3:
90:88:bd:3b:90:ae:15:49:16:70:a4:10:4a:e9:86:
59:9a:eb:16:c2:96:72:9a:5a:d1:19:ba:e3:87:46:
60:79:f2:40:49:2f:99:37:bb:1f:aa:0b:f0:04:70:
d8:44:0f:5e:c6:8f:d2:47:5f:b0:2c:76:a2:3a:9b:
b2:01:0e:6c:da:5d:ba:83:92:63:60:a9:a9:5e:bb:
00:a9:39:32:59:90:ab:3f:af:c4:a9:1d:b7:fc:7c:
35:28:36:d1:7c:0c:4b:cd:20:25:d6:68:6a:2d:3a:
01:53:de:04:03:2a:c3:8d:63:61:df:ea:a7:92:e4:
3e:2a:0b:ef:36:bb:d3:a4:d3:da:00:01:b1:95:b6:
65:fe:ee:04:35:3c:43:97:bc:29:c0:f2:64:6a:14:
67:bb:9a:e5:fa:c8:f0:43:8a:51:78:5b:45:4e:64:
6a:18:e8:43:f7:62:5b:61:c9:33:c3:65:8e:bd:f9:
84:77:7f:3c:41:83:2d:b0:92:f6:55:f0:7a:16:5d:
e5:0d:a7:89:ab:00:c1:23:2c:49:31:3e:46:a0:79:
21:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:77:0E:79:23:C3:4E:98:E4:B1:E6:E2:D5:32:A2:C1:B8:8A:91:61
X509v3 Authority Key Identifier:
keyid:A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32342d3234203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:1d:54:fd:9f:8a:50:e9:8c:ca:18:18:ba:9d:73:3d:7b:df:
de:b5:5e:ef:5d:43:eb:16:20:05:91:bd:7c:d7:3a:a9:6c:37:
b9:51:54:22:45:66:03:69:67:34:7d:99:0b:4a:b7:95:2a:c0:
a7:64:2a:7b:79:80:9f:72:5d:80:52:a3:f4:15:a0:bc:21:3b:
cd:69:09:7c:37:7d:18:2f:6a:f1:0e:7d:60:59:c8:68:8d:fe:
23:7e:d5:59:22:9c:dd:0e:26:ce:aa:04:1a:85:0f:84:ba:fe:
de:aa:0a:93:f5:a3:3b:72:b6:ad:38:1b:8c:44:48:3a:cb:0f:
c0:17:77:ca:62:be:57:42:36:51:7c:fb:55:aa:5f:1f:69:02:
20:a0:82:7f:f1:36:bd:30:11:e0:a2:6e:84:8d:b4:bd:cc:24:
71:de:b3:e2:e3:36:7d:af:3f:bb:c0:eb:96:34:92:d1:d2:97:
e0:39:85:9f:44:c1:03:c6:ee:d5:07:53:31:f5:d9:60:1b:8c:
53:2c:63:97:fe:0a:f5:de:55:7b:5b:28:96:87:70:90:ca:7e:
c7:98:2d:19:d5:9e:ac:8b:50:b9:4a:c5:99:7e:44:7f:d3:8a:
f3:66:a4:63:c8:ed:32:63:53:95:f7:9e:a5:01:b9:e0:97:f4:
6d:f4:8d:0c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGOcC3xDy0TkSu2QrmfFP3byLg3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcxMjUy
MUQ2NEIzODAeFw0yNjExMDcwNzU1NDJaFw0yNzExMDYwODAwNDJaMDMxMTAvBgNV
BAMTKEU0NzcwRTc5MjNDMzRFOThFNEIxRTZFMkQ1MzJBMkMxQjg4QTkxNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpweBW+fCkvy2gkwJNIEEKwdIv
R9NLZ9jH+MAM1qC3tpXehcvrZ/CZict2s5CIvTuQrhVJFnCkEErphlma6xbClnKa
WtEZuuOHRmB58kBJL5k3ux+qC/AEcNhED17Gj9JHX7AsdqI6m7IBDmzaXbqDkmNg
qaleuwCpOTJZkKs/r8SpHbf8fDUoNtF8DEvNICXWaGotOgFT3gQDKsONY2Hf6qeS
5D4qC+82u9Ok09oAAbGVtmX+7gQ1PEOXvCnA8mRqFGe7muX6yPBDilF4W0VOZGoY
6EP3YlthyTPDZY69+YR3fzxBgy2wkvZV8HoWXeUNp4mrAMEjLEkxPkageSEvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5HcOeSPDTpjksebi1TKiwbiKkWEwHwYDVR0j
BBgwFoAUozfSFPGxWCWsYXhXTChxJSHWSzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWNjNmJkNzMtZjliZC00ZjVhLTljNTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRG
MUIxNTgyNUFDNjE3ODU3NEMyODcxMjUyMUQ2NEIzOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMzM3RDIxNEYxQjE1ODI1QUM2MTc4NTc0QzI4NzEyNTIxRDY0
QjM4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FjYzZiZDczLWY5YmQtNGY1YS05
YzU5LWZiZWExYmQ4MzQ3My8wLzMxMzAzMzJlMzIzMDJlMzEzMDM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcUbDANBgkqhkiG
9w0BAQsFAAOCAQEAXh1U/Z+KUOmMyhgYup1zPXvf3rVe711D6xYgBZG9fNc6qWw3
uVFUIkVmA2lnNH2ZC0q3lSrAp2Qqe3mAn3JdgFKj9BWgvCE7zWkJfDd9GC9q8Q59
YFnIaI3+I37VWSKc3Q4mzqoEGoUPhLr+3qoKk/WjO3K2rTgbjERIOssPwBd3ymK+
V0I2UXz7VapfH2kCIKCCf/E2vTAR4KJuhI20vcwkcd6z4uM2fa8/u8DrljSS0dKX
4DmFn0TBA8bu1QdTMfXZYBuMUyxjl/4K9d5Ve1solodwkMp+x5gtGdWerItQuUrF
mX5Ef9OK82akY8jtMmNTlfeepQG54Jf0bfSNDA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:34 2026 by rpki-client