
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa
File: 3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa (raw, json)
Hash identifier: c92Ozjnq7svCLrrjEbFGyASoSulZ/x0HLm65BX9w5Mw=
Subject key identifier: 7E:9C:54:00:A7:CD:0C:A6:66:0C:B1:44:E8:11:CE:FE:93:D2:2E:7C
Certificate issuer: /CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
Certificate serial: 020852D79852F0337B36C1C4129453CE14BE4B22
Authority key identifier: 8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa
Signing time: Sun 03 May 2026 02:58:56 +0000
ROA not before: Sun 03 May 2026 02:53:56 +0000
ROA not after: Sun 02 May 2027 02:58:56 +0000
asID: 141926
IP address blocks: 103.165.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl
rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:08:52:d7:98:52:f0:33:7b:36:c1:c4:12:94:53:ce:14:be:4b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6
Validity
Not Before: May 3 02:53:56 2026 GMT
Not After : May 2 02:58:56 2027 GMT
Subject: CN=7E9C5400A7CD0CA6660CB144E811CEFE93D22E7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:ec:a1:b3:01:dc:5c:f6:d6:75:7c:bf:68:
f5:62:20:d0:4a:75:61:11:b4:92:19:b6:fd:61:d7:
f6:e2:ee:50:81:c2:08:06:a6:82:4a:4d:4e:a3:d7:
a2:ba:a9:bd:aa:94:ea:d1:24:44:3c:f2:17:74:8a:
16:98:9b:19:f9:e8:ca:f6:56:9d:99:81:2e:ad:dd:
04:fb:a2:aa:d6:54:c5:9b:ef:ac:59:47:5f:2b:bf:
b1:07:89:b3:9d:aa:30:8a:6d:79:e7:4b:ac:6a:f9:
cf:5b:da:8d:d7:f7:56:ee:0c:ac:be:de:3f:18:2a:
e8:ff:94:6c:38:e1:33:c5:63:76:64:32:2c:55:45:
4c:ff:2f:12:fc:10:b7:c4:a1:45:f4:e8:61:45:de:
c0:2f:0d:44:67:63:20:cd:4a:ca:45:de:04:a2:3c:
b1:d9:b4:23:78:3e:c6:55:ad:ea:43:f4:7f:b6:72:
2c:bb:7b:60:52:9e:f3:74:6b:70:6e:85:5d:e3:9d:
ca:7f:56:8c:b6:6f:3b:2b:0c:f8:7d:43:39:8d:9c:
30:d0:de:12:76:22:9e:ce:df:ba:be:41:64:2f:28:
70:c3:57:78:4d:54:92:4b:54:70:10:96:36:01:44:
23:b6:ff:84:d9:7c:50:f9:27:ab:b7:09:14:17:25:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:54:00:A7:CD:0C:A6:66:0C:B1:44:E8:11:CE:FE:93:D2:2E:7C
X509v3 Authority Key Identifier:
keyid:8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.146.0/24
Signature Algorithm: sha256WithRSAEncryption
96:55:4d:33:97:f0:14:26:b6:29:75:bd:ec:c4:13:14:3f:86:
16:4d:fd:04:0a:ba:5e:6c:3d:8d:8f:a7:f1:eb:e6:94:1d:9e:
ad:7b:7f:9f:70:02:42:1f:17:e1:c3:80:be:95:c5:00:3f:92:
2a:f0:ff:54:7e:8c:9e:ed:3d:08:0d:2e:d9:c5:a1:3e:fb:0c:
4d:c2:a8:45:eb:f3:86:26:97:c3:67:1a:ff:75:ff:31:71:ef:
0c:e5:cf:37:9c:e3:09:f0:59:90:d4:30:23:0b:40:19:aa:81:
c6:6e:02:2d:66:61:8b:51:2f:d2:8e:53:8c:77:1d:8d:5c:90:
1f:13:5e:de:ed:56:b6:6b:34:32:ed:5e:91:f5:18:17:33:cf:
16:d6:cc:75:01:09:77:65:ff:89:2b:df:1e:8d:f6:d0:00:58:
a1:37:03:18:59:85:8b:ba:db:5d:d5:ae:d0:7d:db:47:ac:7b:
36:e2:45:b9:56:28:22:d8:e6:6f:76:ee:99:9b:25:02:46:f5:
6d:ab:34:a5:c5:12:74:64:84:66:ee:47:4d:cc:dd:16:41:9f:
87:a8:8d:ac:b4:31:bb:93:ff:85:9b:dd:46:39:d8:f9:c7:f4:
2d:4e:08:3e:f0:35:b0:74:c4:b1:98:2b:c0:51:60:ad:d7:21:
5d:81:35:41
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUAghS15hS8DN7NsHEEpRTzhS+SyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJBMjIxRUNDRDkyQzhDQjhERDU5NTAzQjI3MjJDNTdD
MzM2N0JGNjAeFw0yNjA1MDMwMjUzNTZaFw0yNzA1MDIwMjU4NTZaMDMxMTAvBgNV
BAMTKDdFOUM1NDAwQTdDRDBDQTY2NjBDQjE0NEU4MTFDRUZFOTNEMjJFN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCst+yhswHcXPbWdXy/aPViINBK
dWERtJIZtv1h1/bi7lCBwggGpoJKTU6j16K6qb2qlOrRJEQ88hd0ihaYmxn56Mr2
Vp2ZgS6t3QT7oqrWVMWb76xZR18rv7EHibOdqjCKbXnnS6xq+c9b2o3X91buDKy+
3j8YKuj/lGw44TPFY3ZkMixVRUz/LxL8ELfEoUX06GFF3sAvDURnYyDNSspF3gSi
PLHZtCN4PsZVrepD9H+2ciy7e2BSnvN0a3BuhV3jncp/Voy2bzsrDPh9QzmNnDDQ
3hJ2Ip7O37q+QWQvKHDDV3hNVJJLVHAQljYBRCO2/4TZfFD5J6u3CRQXJQLlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUfpxUAKfNDKZmDLFE6BHO/pPSLnwwHwYDVR0j
BBgwFoAUi6Ih7M2SyMuN1ZUDsnIsV8M2e/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWQ0NDBjODUtMzQ3MS00NDYxLWI1OTAtMTYwMWUxOWY1MzE4LzAvOEJBMjIxRUND
RDkyQzhDQjhERDU5NTAzQjI3MjJDNTdDMzM2N0JGNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84QkEyMjFFQ0NEOTJDOENCOERENTk1MDNCMjcyMkM1N0MzMzY3
QkY2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FkNDQwYzg1LTM0NzEtNDQ2MS1i
NTkwLTE2MDFlMTlmNTMxOC8wLzMxMzAzMzJlMzEzNjM1MmUzMTM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMyMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpZIwDQYJ
KoZIhvcNAQELBQADggEBAJZVTTOX8BQmtil1vezEExQ/hhZN/QQKul5sPY2Pp/Hr
5pQdnq17f59wAkIfF+HDgL6VxQA/kirw/1R+jJ7tPQgNLtnFoT77DE3CqEXr84Ym
l8NnGv91/zFx7wzlzzec4wnwWZDUMCMLQBmqgcZuAi1mYYtRL9KOU4x3HY1ckB8T
Xt7tVrZrNDLtXpH1GBczzxbWzHUBCXdl/4kr3x6N9tAAWKE3AxhZhYu6213VrtB9
20esezbiRblWKCLY5m927pmbJQJG9W2rNKXFEnRkhGbuR03M3RZBn4eojay0MbuT
/4Wb3UY52PnH9C1OCD7wNbB0xLGYK8BRYK3XIV2BNUE=
-----END CERTIFICATE-----
Generated at Wed May 13 15:35:37 2026 by rpki-client