
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32382e3131362e302f32322d3232203d3e203535363939.roa
File: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier: 9VPJuQ90qwdehcRd8MO9eyEcwL4yQF5FxdVlD4S3VMs=
Subject key identifier: F9:47:BB:2F:9F:49:D6:AE:41:FB:5F:4D:83:E1:39:FD:72:3E:16:BC
Certificate issuer: /CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Certificate serial: 10D459EF84022A955B571E56308EF4D7FA059875
Authority key identifier: C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32382e3131362e302f32322d3232203d3e203535363939.roa
Signing time: Sun 03 May 2026 03:01:17 +0000
ROA not before: Sun 03 May 2026 02:56:17 +0000
ROA not after: Sun 02 May 2027 03:01:17 +0000
asID: 55699
IP address blocks: 103.28.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d4:59:ef:84:02:2a:95:5b:57:1e:56:30:8e:f4:d7:fa:05:98:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Validity
Not Before: May 3 02:56:17 2026 GMT
Not After : May 2 03:01:17 2027 GMT
Subject: CN=F947BB2F9F49D6AE41FB5F4D83E139FD723E16BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:80:a2:de:64:39:6e:ab:77:a9:c7:3b:07:
71:51:97:b4:05:cd:52:59:5e:e2:dd:54:a4:36:58:
06:3c:d1:87:f2:ca:41:e4:90:93:6d:ff:1e:5c:8c:
4a:55:0a:4d:1f:89:78:98:f4:be:7f:90:32:d7:86:
12:63:f5:7f:4f:a3:e9:3c:90:e4:44:86:47:1d:b3:
c7:a8:04:94:6e:b0:ff:fc:c4:b5:82:a3:ce:4b:ef:
4e:c8:dc:98:c6:87:ba:30:b0:05:a4:22:f7:ac:c4:
67:80:5c:14:dd:69:e9:05:20:84:73:dc:4e:5c:9c:
17:fd:77:9d:ce:86:33:0d:2f:17:df:ff:98:a8:bd:
99:27:ce:18:9c:c2:c2:11:79:73:d0:7f:53:46:25:
80:fe:09:35:45:15:69:39:69:72:3d:e6:45:31:a6:
f6:61:05:16:82:0b:43:e6:05:91:a9:08:55:d7:00:
c8:09:69:49:48:ed:4d:03:77:79:cd:ea:96:af:3c:
4e:5c:ff:41:89:24:c1:d3:44:39:51:f2:93:ea:e8:
2c:db:c8:66:e0:29:6b:a8:85:6b:cf:62:9e:18:09:
3c:6d:c0:1d:1c:46:00:f5:cb:64:1d:44:8b:99:77:
40:2c:c5:fd:b4:9f:10:c9:55:e7:28:ca:92:5a:cf:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:47:BB:2F:9F:49:D6:AE:41:FB:5F:4D:83:E1:39:FD:72:3E:16:BC
X509v3 Authority Key Identifier:
keyid:C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32382e3131362e302f32322d3232203d3e203535363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:39:cd:48:d1:b0:23:be:31:aa:b3:96:48:4c:e4:f4:3d:ce:
4f:4a:c8:b3:ff:95:df:9f:b6:48:d2:20:9a:70:d1:db:48:c7:
23:2d:89:22:11:89:95:e0:98:94:e5:38:1d:5f:22:92:27:39:
cf:08:16:7d:c0:c2:e5:81:9b:1e:13:6c:37:8d:af:9f:59:7e:
10:e8:8f:4b:50:db:ea:0c:d1:63:55:a3:08:14:87:dc:eb:45:
c4:b1:2b:1e:84:82:6c:c8:90:32:ef:68:fa:c0:fe:f2:91:c5:
6a:18:40:03:9b:06:c7:25:0e:a3:b2:44:f0:9a:eb:56:b3:91:
d9:2f:23:b7:66:2b:6a:ed:b9:54:b3:b1:17:1f:56:76:64:08:
fc:83:80:68:00:9e:d5:af:68:27:3e:a8:51:71:24:f0:cb:9b:
20:58:b9:8c:73:a6:be:22:b8:fb:14:f9:f0:b1:79:17:bb:97:
8b:6e:eb:55:fb:d5:bc:66:6e:e1:9d:ca:9c:4a:71:08:8a:90:
3d:56:2b:0e:22:5b:90:21:25:d3:e8:f3:11:bb:a0:fc:fd:e2:
a7:cd:16:9b:8b:12:87:ee:88:76:aa:d4:41:51:7e:84:3a:e6:
12:35:ae:c6:39:da:11:ee:8c:e3:d4:1d:d7:51:97:58:43:1d:
ab:7f:77:a8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUENRZ74QCKpVbVx5WMI701/oFmHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEyNjBBOTU4Rjg2RjFGRjIwQUUwRjMxRTg0NkJBMUM0
RTlBMjRGQTAeFw0yNjA1MDMwMjU2MTdaFw0yNzA1MDIwMzAxMTdaMDMxMTAvBgNV
BAMTKEY5NDdCQjJGOUY0OUQ2QUU0MUZCNUY0RDgzRTEzOUZENzIzRTE2QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdI4Ci3mQ5bqt3qcc7B3FRl7QF
zVJZXuLdVKQ2WAY80YfyykHkkJNt/x5cjEpVCk0fiXiY9L5/kDLXhhJj9X9Po+k8
kOREhkcds8eoBJRusP/8xLWCo85L707I3JjGh7owsAWkIvesxGeAXBTdaekFIIRz
3E5cnBf9d53OhjMNLxff/5iovZknzhicwsIReXPQf1NGJYD+CTVFFWk5aXI95kUx
pvZhBRaCC0PmBZGpCFXXAMgJaUlI7U0Dd3nN6pavPE5c/0GJJMHTRDlR8pPq6Czb
yGbgKWuohWvPYp4YCTxtwB0cRgD1y2QdRIuZd0Asxf20nxDJVecoypJaz7C9AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU+Ue7L59J1q5B+19Ng+E5/XI+FrwwHwYDVR0j
BBgwFoAUwSYKlY+G8f8grg8x6Ea6HE6aJPowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjU5OWVkOTYtZDQwOC00NDE4LWI4MmEtNWQ1YThlNjY1N2YzLzAvQzEyNjBBOTU4
Rjg2RjFGRjIwQUUwRjMxRTg0NkJBMUM0RTlBMjRGQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMTI2MEE5NThGODZGMUZGMjBBRTBGMzFFODQ2QkExQzRFOUEy
NEZBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I1OTllZDk2LWQ0MDgtNDQxOC1i
ODJhLTVkNWE4ZTY2NTdmMy8wLzMxMzAzMzJlMzIzODJlMzEzMTM2MmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzUzNTM2MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmccdDANBgkqhkiG
9w0BAQsFAAOCAQEAPDnNSNGwI74xqrOWSEzk9D3OT0rIs/+V35+2SNIgmnDR20jH
Iy2JIhGJleCYlOU4HV8ikic5zwgWfcDC5YGbHhNsN42vn1l+EOiPS1Db6gzRY1Wj
CBSH3OtFxLErHoSCbMiQMu9o+sD+8pHFahhAA5sGxyUOo7JE8JrrVrOR2S8jt2Yr
au25VLOxFx9WdmQI/IOAaACe1a9oJz6oUXEk8MubIFi5jHOmviK4+xT58LF5F7uX
i27rVfvVvGZu4Z3KnEpxCIqQPVYrDiJbkCEl0+jzEbug/P3ip80Wm4sSh+6IdqrU
QVF+hDrmEjWuxjnaEe6M49Qd11GXWEMdq393qA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:48:19 2026 by rpki-client