
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa
File: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (raw, json)
Hash identifier: mjGJxH6ziPyBnTtwEJk9cCU5dFx1hVDJJz3eyJDrtfU=
Subject key identifier: CC:6B:51:DC:3E:65:E0:34:1C:83:AE:F4:A7:A1:4C:45:1E:D5:F1:32
Certificate issuer: /CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
Certificate serial: 69EA8456D1EADA77C92F55D68AA26432496ACD98
Authority key identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa
Signing time: Sun 03 May 2026 03:00:29 +0000
ROA not before: Sun 03 May 2026 02:55:29 +0000
ROA not after: Sun 02 May 2027 03:00:29 +0000
asID: 138884
IP address blocks: 103.138.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl
rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ea:84:56:d1:ea:da:77:c9:2f:55:d6:8a:a2:64:32:49:6a:cd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
Validity
Not Before: May 3 02:55:29 2026 GMT
Not After : May 2 03:00:29 2027 GMT
Subject: CN=CC6B51DC3E65E0341C83AEF4A7A14C451ED5F132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:ff:3b:ed:7d:b7:62:33:ad:72:34:cb:bf:
41:6c:b6:fd:7f:f0:81:8b:11:92:4b:2c:99:e7:4f:
7a:a9:9c:5e:3f:00:16:bb:69:6b:79:4a:a0:f2:0b:
5c:3e:3a:c2:02:97:43:27:21:f1:37:e1:a8:64:7f:
bc:c7:f9:c6:f5:fd:66:19:9b:15:b5:fa:95:50:15:
1d:51:9a:c2:d5:5c:d8:f1:53:7c:7d:43:90:62:c2:
d4:9c:ff:9a:58:7f:ff:84:ff:b8:45:db:4e:c0:0f:
5b:e3:fb:43:62:51:4a:27:fe:6a:3d:dd:4b:e2:f1:
ee:95:71:fe:ed:40:92:50:be:76:5f:c2:b9:4f:f7:
34:40:40:7d:cc:e1:80:b5:c8:2b:87:ad:38:94:5b:
c5:b7:89:b1:ba:34:9f:0f:89:1c:4a:e2:3c:05:d7:
63:30:81:f5:60:ce:4c:1c:ab:7c:70:3d:4b:e1:3a:
58:99:6e:d2:ad:38:8d:a4:77:70:b0:de:7d:57:b4:
c2:52:6e:92:a8:eb:76:9c:e7:9a:42:86:00:9d:e3:
a7:fd:46:fb:38:13:2b:5d:af:b8:0c:db:84:35:b4:
bb:f0:84:ee:51:0c:b3:23:03:fb:4f:92:21:19:51:
67:f9:78:3b:50:f2:a7:d7:fb:d3:90:55:96:d4:5f:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6B:51:DC:3E:65:E0:34:1C:83:AE:F4:A7:A1:4C:45:1E:D5:F1:32
X509v3 Authority Key Identifier:
keyid:5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.71.0/24
Signature Algorithm: sha256WithRSAEncryption
39:af:3d:fc:b6:31:63:f2:f2:eb:39:d4:e8:b4:33:9f:eb:9c:
6e:13:81:8d:65:a0:67:56:6b:c6:6d:8f:c7:f1:2b:e8:0c:f6:
5d:e8:5d:11:ba:47:f2:5f:c2:19:41:95:bc:18:33:00:69:8d:
58:a8:65:f1:54:b1:0d:73:fa:7d:bd:06:7e:16:53:77:fa:3d:
45:85:30:b9:51:70:c6:ee:f5:45:bd:94:f2:72:25:9f:9e:16:
f9:8e:64:58:cd:dd:98:9d:d4:40:54:92:65:a2:ad:46:87:8d:
c7:30:2a:16:8d:ba:c6:b9:aa:3e:19:9b:a8:51:61:a5:96:09:
fe:8b:5d:67:48:7b:0e:d0:ec:63:47:78:d5:f4:e5:22:c6:92:
49:e3:c6:71:b0:db:23:aa:6e:bf:1c:73:40:61:cc:ab:35:6f:
72:cb:55:a0:5e:99:07:75:46:09:1a:83:9b:61:c0:cc:ab:ad:
39:d3:10:3c:7a:87:7e:8e:ea:78:2a:a8:1c:60:97:aa:3f:2f:
01:6b:ed:08:db:fa:24:68:db:9f:85:0f:fa:09:7d:68:92:2d:
16:15:70:bf:ec:ab:0d:97:19:af:50:c5:59:26:cc:9a:7b:09:
41:49:d2:ba:b7:7a:b2:fc:63:0b:46:d3:8e:4c:be:01:ea:98:
aa:d9:e9:b9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUaeqEVtHq2nfJL1XWiqJkMklqzZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZDNDVCRTlFREFDN0JBRDNEMDcwNDYxMEUzNzRCODcz
RkM3QjYxQzAeFw0yNjA1MDMwMjU1MjlaFw0yNzA1MDIwMzAwMjlaMDMxMTAvBgNV
BAMTKENDNkI1MURDM0U2NUUwMzQxQzgzQUVGNEE3QTE0QzQ1MUVENUYxMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJd/877X23YjOtcjTLv0Fstv1/
8IGLEZJLLJnnT3qpnF4/ABa7aWt5SqDyC1w+OsICl0MnIfE34ahkf7zH+cb1/WYZ
mxW1+pVQFR1RmsLVXNjxU3x9Q5BiwtSc/5pYf/+E/7hF207AD1vj+0NiUUon/mo9
3Uvi8e6Vcf7tQJJQvnZfwrlP9zRAQH3M4YC1yCuHrTiUW8W3ibG6NJ8PiRxK4jwF
12MwgfVgzkwcq3xwPUvhOliZbtKtOI2kd3Cw3n1XtMJSbpKo63ac55pChgCd46f9
Rvs4Eytdr7gM24Q1tLvwhO5RDLMjA/tPkiEZUWf5eDtQ8qfX+9OQVZbUX20BAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUzGtR3D5l4DQcg670p6FMRR7V8TIwHwYDVR0j
BBgwFoAUX8Rb6e2se609BwRhDjdLhz/HthwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjIwYzZkNjktNjI5MC00MDJmLWE4NGUtZDI4OWM2ZTkzYTczLzAvNUZDNDVCRTlF
REFDN0JBRDNEMDcwNDYxMEUzNzRCODczRkM3QjYxQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RkM0NUJFOUVEQUM3QkFEM0QwNzA0NjEwRTM3NEI4NzNGQzdC
NjFDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IyMGM2ZDY5LTYyOTAtNDAyZi1h
ODRlLWQyODljNmU5M2E3My8wLzMxMzAzMzJlMzEzMzM4MmUzNzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4pHMA0GCSqG
SIb3DQEBCwUAA4IBAQA5rz38tjFj8vLrOdTotDOf65xuE4GNZaBnVmvGbY/H8Svo
DPZd6F0RukfyX8IZQZW8GDMAaY1YqGXxVLENc/p9vQZ+FlN3+j1FhTC5UXDG7vVF
vZTyciWfnhb5jmRYzd2YndRAVJJloq1Gh43HMCoWjbrGuao+GZuoUWGllgn+i11n
SHsO0OxjR3jV9OUixpJJ48ZxsNsjqm6/HHNAYcyrNW9yy1WgXpkHdUYJGoObYcDM
q6050xA8eod+jup4KqgcYJeqPy8Ba+0I2/okaNufhQ/6CX1oki0WFXC/7KsNlxmv
UMVZJsyaewlBSdK6t3qy/GMLRtOOTL4B6piq2em5
-----END CERTIFICATE-----
Generated at Wed May 13 12:39:51 2026 by rpki-client