
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/3130332e34342e31392e302f32342d3234203d3e20313530313931.roa
File: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (raw, json)
Hash identifier: 73zmQhG7Zu+0eZu4dZISk1NiR9ExgcKyarQj6CIDk/k=
Subject key identifier: 1F:BF:9E:4C:94:1B:91:EB:D3:F2:82:FC:79:5B:0C:EA:7E:97:83:1D
Certificate issuer: /CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0
Certificate serial: 217D79F0CCC20C05FD1A016954A1A71F91E83C29
Authority key identifier: DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/3130332e34342e31392e302f32342d3234203d3e20313530313931.roa
Signing time: Sun 03 May 2026 03:01:56 +0000
ROA not before: Sun 03 May 2026 02:56:56 +0000
ROA not after: Sun 02 May 2027 03:01:56 +0000
asID: 150191
IP address blocks: 103.44.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl
rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:7d:79:f0:cc:c2:0c:05:fd:1a:01:69:54:a1:a7:1f:91:e8:3c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0
Validity
Not Before: May 3 02:56:56 2026 GMT
Not After : May 2 03:01:56 2027 GMT
Subject: CN=1FBF9E4C941B91EBD3F282FC795B0CEA7E97831D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:8f:dc:d7:12:fe:73:a3:3b:41:34:39:6b:
2f:22:2b:8c:7a:85:3d:0c:65:c3:5a:14:d9:de:d4:
49:8b:13:0e:60:ed:e4:e4:45:6d:3d:26:8a:7c:5e:
0d:c8:e2:95:18:e5:40:0d:ca:ed:b5:20:61:14:9b:
e1:88:11:87:fc:f5:2c:70:01:46:e2:32:75:a4:3d:
6e:14:10:54:48:44:5f:ab:c3:bf:ba:28:14:3e:1a:
12:35:27:ba:68:ce:79:46:26:b2:2c:71:57:f3:53:
53:f5:76:ce:d1:26:79:e5:fe:88:4c:df:11:cd:7b:
ad:33:7b:5a:df:d9:47:e6:56:2c:0b:54:95:f1:76:
f4:b4:6e:d9:f2:be:ff:64:c1:0d:3f:a3:d3:e9:c0:
8f:e2:f6:b4:49:21:2c:42:19:e2:32:f7:60:f6:7c:
1b:a9:f4:0d:23:5b:63:8c:4c:9b:22:de:fd:58:a6:
55:55:54:26:da:75:1f:7e:53:86:c8:52:a1:83:3e:
12:59:2f:67:d8:22:f0:f3:4b:93:fc:8b:a5:ac:39:
74:75:a2:4e:ec:70:bf:fe:f7:c7:ab:14:14:fd:91:
4c:29:58:ca:cc:8b:a6:9e:ea:22:b1:bd:9a:27:96:
3b:4c:ea:b5:1a:45:e8:34:74:c5:6b:14:b3:8d:8d:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BF:9E:4C:94:1B:91:EB:D3:F2:82:FC:79:5B:0C:EA:7E:97:83:1D
X509v3 Authority Key Identifier:
keyid:DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/3130332e34342e31392e302f32342d3234203d3e20313530313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.44.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ef:ac:45:09:f8:79:b3:08:e5:91:9c:79:0f:ad:34:ac:14:
64:d0:27:f3:7d:b7:88:b7:ba:8b:d1:97:ef:10:d3:85:c1:c0:
18:b2:34:ee:0b:c9:62:ad:3e:e3:05:4c:b0:50:b9:9e:5c:96:
24:03:ac:0b:9c:17:70:50:4c:0a:77:d8:e9:89:f1:fe:d1:1e:
8d:a4:c5:15:cc:4c:53:c4:51:3c:61:83:1b:61:05:90:08:a0:
f2:79:5f:93:74:00:40:24:ee:46:d0:62:29:89:5e:73:48:68:
f0:ee:84:ee:ef:54:57:f7:00:6f:21:e8:93:a5:05:92:f8:aa:
6e:69:7d:dc:f3:fe:7c:e6:58:d2:0e:03:db:6a:6f:55:36:76:
af:8b:78:ad:39:20:82:a3:80:4b:41:15:e9:18:22:88:0f:f9:
7a:cf:3e:54:95:e3:3f:7e:f1:e7:6a:c9:3a:c3:1d:6a:71:04:
05:d0:c0:4a:75:86:7c:bb:09:e9:21:3d:7e:a9:f9:7e:4e:10:
52:e3:67:2d:20:a4:ab:4e:3a:c6:f6:70:f2:81:82:5f:60:dc:
5f:cf:5d:8f:46:70:72:8d:f6:43:ed:62:33:6c:1c:13:90:e3:
48:17:d3:84:eb:2e:ef:b8:f7:96:7e:78:45:fc:90:ab:4d:d3:
1d:14:ae:f2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIX158MzCDAX9GgFpVKGnH5HoPCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMyRTAwQjIxMjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0
ODMwQzhCMDAeFw0yNjA1MDMwMjU2NTZaFw0yNzA1MDIwMzAxNTZaMDMxMTAvBgNV
BAMTKDFGQkY5RTRDOTQxQjkxRUJEM0YyODJGQzc5NUIwQ0VBN0U5NzgzMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcI/c1xL+c6M7QTQ5ay8iK4x6
hT0MZcNaFNne1EmLEw5g7eTkRW09Jop8Xg3I4pUY5UANyu21IGEUm+GIEYf89Sxw
AUbiMnWkPW4UEFRIRF+rw7+6KBQ+GhI1J7poznlGJrIscVfzU1P1ds7RJnnl/ohM
3xHNe60ze1rf2UfmViwLVJXxdvS0btnyvv9kwQ0/o9PpwI/i9rRJISxCGeIy92D2
fBup9A0jW2OMTJsi3v1YplVVVCbadR9+U4bIUqGDPhJZL2fYIvDzS5P8i6WsOXR1
ok7scL/+98erFBT9kUwpWMrMi6ae6iKxvZonljtM6rUaReg0dMVrFLONjaILAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUH7+eTJQbkevT8oL8eVsM6n6Xgx0wHwYDVR0j
BBgwFoAU3C4AshJnpGvWlfbbvsKYn0gwyLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjgxMTdjYTgtYjRlNS00NjdhLTg4YTgtYTRiNjNlNDBjM2VkLzAvREMyRTAwQjIx
MjY3QTQ2QkQ2OTVGNkRCQkVDMjk4OUY0ODMwQzhCMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EQzJFMDBCMjEyNjdBNDZCRDY5NUY2REJCRUMyOTg5RjQ4MzBD
OEIwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I4MTE3Y2E4LWI0ZTUtNDY3YS04
OGE4LWE0YjYzZTQwYzNlZC8wLzMxMzAzMzJlMzQzNDJlMzEzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMxMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcsEzANBgkqhkiG
9w0BAQsFAAOCAQEAL++sRQn4ebMI5ZGceQ+tNKwUZNAn8323iLe6i9GX7xDThcHA
GLI07gvJYq0+4wVMsFC5nlyWJAOsC5wXcFBMCnfY6Ynx/tEejaTFFcxMU8RRPGGD
G2EFkAig8nlfk3QAQCTuRtBiKYlec0ho8O6E7u9UV/cAbyHok6UFkviqbml93PP+
fOZY0g4D22pvVTZ2r4t4rTkggqOAS0EV6RgiiA/5es8+VJXjP37x52rJOsMdanEE
BdDASnWGfLsJ6SE9fqn5fk4QUuNnLSCkq046xvZw8oGCX2DcX89dj0Zwco32Q+1i
M2wcE5DjSBfThOsu77j3ln54RfyQq03THRSu8g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:15:48 2026 by rpki-client