
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa
File: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier: 2jTqkZUMM6RgBn0H5+b2a8SLrtyFxeMaWfySgcjTtJg=
Subject key identifier: A3:D2:7A:D1:3C:A7:F2:A7:92:8E:55:96:1A:18:A8:03:B9:AB:6D:C5
Certificate issuer: /CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9
Certificate serial: 256922003573EB2BB8A2126B3D71EDA65C67475E
Authority key identifier: B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa
Signing time: Sun 03 May 2026 03:03:01 +0000
ROA not before: Sun 03 May 2026 02:58:01 +0000
ROA not after: Sun 02 May 2027 03:03:01 +0000
asID: 136052
IP address blocks: 103.242.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl
rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:69:22:00:35:73:eb:2b:b8:a2:12:6b:3d:71:ed:a6:5c:67:47:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9
Validity
Not Before: May 3 02:58:01 2026 GMT
Not After : May 2 03:03:01 2027 GMT
Subject: CN=A3D27AD13CA7F2A7928E55961A18A803B9AB6DC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:e2:f7:68:99:c8:01:b5:c5:f8:39:ff:46:
d4:cc:a0:58:63:97:11:fa:e8:d6:0b:af:d2:25:77:
2d:6c:29:e9:21:6a:d4:57:4f:05:7a:60:87:ad:02:
95:45:a8:0d:5f:92:7d:e6:e1:8a:e3:3b:13:ee:22:
bd:32:12:ab:aa:80:0d:00:9b:09:6f:f5:71:02:f5:
28:d8:26:bd:a8:98:1c:ad:e5:13:46:80:73:76:12:
8d:7d:41:af:9e:4d:a7:12:9c:a5:91:0c:17:7f:ee:
3f:44:ce:41:b5:32:0d:19:ff:c3:16:2d:ad:f6:3b:
1b:36:d8:d1:aa:be:e1:fb:19:1a:44:8b:d9:f5:2b:
c7:ba:c1:cc:22:a9:e7:77:dd:d3:bf:a6:3e:38:e3:
66:f9:3a:36:ac:05:16:14:bd:59:a8:66:c2:b6:39:
78:6e:9d:a8:ac:96:f4:27:b2:1e:7e:91:3d:7b:49:
d1:ee:d0:c3:60:c1:f6:73:e0:25:8b:a8:11:3f:31:
8a:7e:4d:36:f5:bb:4b:20:58:7c:e1:cc:c1:f7:ad:
6d:c5:2b:1e:1b:e4:b6:81:1d:78:22:0d:8b:20:32:
cb:37:c4:95:6c:e3:c5:0f:de:1d:65:ff:83:f4:95:
90:7d:ef:76:ba:0e:1e:9c:eb:09:9b:ef:78:a1:1e:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D2:7A:D1:3C:A7:F2:A7:92:8E:55:96:1A:18:A8:03:B9:AB:6D:C5
X509v3 Authority Key Identifier:
keyid:B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.242.10.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:e5:ca:14:a2:bd:f6:89:21:51:25:3f:7f:13:7b:14:22:34:
69:2c:f1:f1:ff:de:29:b6:b4:df:d6:12:18:53:8b:39:11:0a:
d0:01:5d:a0:74:8f:a3:ec:66:6a:46:58:4b:66:82:c7:c7:07:
14:f2:a0:ef:42:37:b2:cb:a0:8a:3c:37:f5:e3:9c:50:bf:f1:
25:8e:cc:5c:68:76:ad:65:c4:d4:c9:6c:50:a1:bd:f1:51:20:
52:c6:7f:e6:68:2c:bc:7d:61:b8:88:19:e9:15:fb:da:f4:6b:
31:b5:6d:d8:af:63:c6:77:a9:0f:0b:fa:0d:31:4d:2c:57:83:
d6:a6:69:2e:11:6e:6e:51:ab:0c:19:70:60:c4:6b:f6:59:41:
5c:74:07:4f:34:40:4b:04:c7:47:58:94:ff:bc:0f:35:eb:6d:
db:8a:fc:c0:f8:ff:59:d6:33:83:75:d2:f9:c6:7a:9d:61:fa:
be:3b:75:e7:19:17:5a:05:df:85:2f:99:79:8e:00:4d:4a:b0:
34:a8:e9:6b:0d:67:82:43:04:9d:ca:ce:89:c4:8e:e5:8b:a6:
b7:96:a4:a2:6f:be:cf:da:a5:80:d5:30:4c:e1:63:19:0a:e2:
4c:79:02:77:c5:cc:0e:91:0d:4a:dd:1a:4a:21:79:6b:e3:dd:
9f:0c:0c:2f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJWkiADVz6yu4ohJrPXHtplxnR14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUwNjdFNzgwMkQ3QjE5OTI4QkRGQTkzRTZENUJBNTY2
MTQxOEFGOTAeFw0yNjA1MDMwMjU4MDFaFw0yNzA1MDIwMzAzMDFaMDMxMTAvBgNV
BAMTKEEzRDI3QUQxM0NBN0YyQTc5MjhFNTU5NjFBMThBODAzQjlBQjZEQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDK+L3aJnIAbXF+Dn/RtTMoFhj
lxH66NYLr9Ildy1sKekhatRXTwV6YIetApVFqA1fkn3m4YrjOxPuIr0yEquqgA0A
mwlv9XEC9SjYJr2omByt5RNGgHN2Eo19Qa+eTacSnKWRDBd/7j9EzkG1Mg0Z/8MW
La32Oxs22NGqvuH7GRpEi9n1K8e6wcwiqed33dO/pj4442b5OjasBRYUvVmoZsK2
OXhunaislvQnsh5+kT17SdHu0MNgwfZz4CWLqBE/MYp+TTb1u0sgWHzhzMH3rW3F
Kx4b5LaBHXgiDYsgMss3xJVs48UP3h1l/4P0lZB973a6Dh6c6wmb73ihHiTDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUo9J60Tyn8qeSjlWWGhioA7mrbcUwHwYDVR0j
BBgwFoAUtQZ+eALXsZkovfqT5tW6VmFBivkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmYwYzdhMzctNWQxOS00YzVjLTkzMDEtYTE0YTdmMTg1YzkyLzAvQjUwNjdFNzgw
MkQ3QjE5OTI4QkRGQTkzRTZENUJBNTY2MTQxOEFGOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNTA2N0U3ODAyRDdCMTk5MjhCREZBOTNFNkQ1QkE1NjYxNDE4
QUY5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JmMGM3YTM3LTVkMTktNGM1Yy05
MzAxLWExNGE3ZjE4NWM5Mi8wLzMxMzAzMzJlMzIzNDMyMmUzMTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/IKMA0GCSqG
SIb3DQEBCwUAA4IBAQCL5coUor32iSFRJT9/E3sUIjRpLPHx/94ptrTf1hIYU4s5
EQrQAV2gdI+j7GZqRlhLZoLHxwcU8qDvQjeyy6CKPDf145xQv/EljsxcaHatZcTU
yWxQob3xUSBSxn/maCy8fWG4iBnpFfva9GsxtW3Yr2PGd6kPC/oNMU0sV4PWpmku
EW5uUasMGXBgxGv2WUFcdAdPNEBLBMdHWJT/vA81623bivzA+P9Z1jODddL5xnqd
Yfq+O3XnGRdaBd+FL5l5jgBNSrA0qOlrDWeCQwSdys6JxI7li6a3lqSib77P2qWA
1TBM4WMZCuJMeQJ3xcwOkQ1K3RpKIXlr492fDAwv
-----END CERTIFICATE-----
Generated at Wed May 13 06:11:38 2026 by rpki-client