
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa
File: 3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa (raw, json)
Hash identifier: /ia91hqzHCBrX/q+7Rzu1zW0X5ukwcV1dwBpHbDRCBI=
Subject key identifier: 98:F8:C2:24:9C:9D:B0:88:68:D1:BE:5B:95:50:72:08:48:17:08:56
Certificate issuer: /CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
Certificate serial: 1E93C932D6044ADAFC7B72B12E38741BE7335904
Authority key identifier: C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa
Signing time: Sun 03 May 2026 03:03:15 +0000
ROA not before: Sun 03 May 2026 02:58:15 +0000
ROA not after: Sun 02 May 2027 03:03:15 +0000
asID: 138887
IP address blocks: 103.141.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl
rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:93:c9:32:d6:04:4a:da:fc:7b:72:b1:2e:38:74:1b:e7:33:59:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9E3CF72C347D28B4B430DB737BE80CB0172B106
Validity
Not Before: May 3 02:58:15 2026 GMT
Not After : May 2 03:03:15 2027 GMT
Subject: CN=98F8C2249C9DB08868D1BE5B9550720848170856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:ce:94:e7:b3:fe:b3:c6:d6:8c:09:bf:f0:
24:db:32:6d:b6:14:77:8b:fd:fc:90:1c:9c:70:14:
ff:47:3c:93:38:0f:ed:83:cb:c8:c2:a9:5f:d4:be:
85:4c:d7:29:9a:ea:52:36:10:b7:b3:f0:9e:59:a3:
03:3e:e9:d9:07:b7:0a:f5:95:78:a9:d9:32:a5:f3:
46:25:4d:18:5b:00:2e:2e:02:11:eb:e8:9d:71:54:
ab:07:f5:a2:3a:a2:a9:a1:d2:f4:74:b4:0f:d5:53:
4b:62:bd:74:b7:f3:3c:85:91:d7:9b:01:e0:5c:5f:
2c:be:6a:ef:2b:36:64:d9:6d:1c:d1:f7:2f:3a:a5:
53:51:9d:cd:dd:ea:0d:46:a5:87:c8:61:73:89:72:
a3:3d:c2:a5:e0:94:5e:78:3c:09:9f:41:23:92:df:
a2:f7:73:97:7d:8c:90:09:4c:fc:63:bd:dc:c4:0c:
ee:cb:75:74:08:f0:85:78:bf:28:b0:f0:d3:9f:91:
51:4e:33:2c:63:f3:2a:94:70:3c:b9:d0:9a:e7:50:
dc:72:ae:88:f2:94:25:69:e4:33:79:07:7e:a9:a1:
5d:40:e7:40:3b:75:4a:79:3b:b6:28:13:08:80:8b:
2c:0e:68:6a:a5:36:28:7f:76:61:c8:a6:fb:a0:e1:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F8:C2:24:9C:9D:B0:88:68:D1:BE:5B:95:50:72:08:48:17:08:56
X509v3 Authority Key Identifier:
keyid:C9:E3:CF:72:C3:47:D2:8B:4B:43:0D:B7:37:BE:80:CB:01:72:B1:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/C9E3CF72C347D28B4B430DB737BE80CB0172B106.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E3CF72C347D28B4B430DB737BE80CB0172B106.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:69:0a:fa:ec:d8:65:a3:1a:19:5b:ed:e2:64:f3:b1:7b:52:
ae:fa:e3:5d:a9:6d:3d:b1:a0:a9:bc:f3:0d:25:7f:e3:ea:15:
47:f8:04:4e:a8:ab:db:1b:7e:d1:4b:56:99:e6:c6:a3:3d:99:
f9:97:63:a7:1a:06:ee:23:26:c1:15:99:7f:af:e0:fe:9c:56:
cc:6e:d5:9a:04:33:17:c0:0b:b4:4c:0b:ad:ba:67:53:22:f2:
0e:f3:4c:18:b9:de:5e:f4:31:48:98:1f:fe:87:cc:43:e2:dd:
01:00:36:1c:63:1c:71:a4:35:29:76:5c:19:87:39:52:0e:b9:
76:39:4f:f0:17:16:7b:be:05:cb:64:e7:d3:44:6f:3b:9d:e3:
fd:e1:3b:86:01:25:3d:fa:78:14:e1:a1:1f:43:d2:7d:af:83:
94:c2:10:d9:95:82:6b:8f:30:b5:19:1c:43:6a:26:64:39:9c:
2c:b5:4d:98:3a:87:cf:b3:5a:d1:69:66:f2:8b:64:74:e5:92:
47:dc:7d:07:5e:cb:b6:d0:f8:67:33:11:e9:10:27:78:ad:a2:
e6:ff:fc:47:12:7c:d5:52:02:18:bd:dd:a3:57:c9:23:bd:fa:
8f:01:86:e8:1d:ed:5e:ea:69:a6:06:db:e4:d2:5d:b1:a3:85:
bc:95:f9:6a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHpPJMtYEStr8e3KxLjh0G+czWQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlFM0NGNzJDMzQ3RDI4QjRCNDMwREI3MzdCRTgwQ0Iw
MTcyQjEwNjAeFw0yNjA1MDMwMjU4MTVaFw0yNzA1MDIwMzAzMTVaMDMxMTAvBgNV
BAMTKDk4RjhDMjI0OUM5REIwODg2OEQxQkU1Qjk1NTA3MjA4NDgxNzA4NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1s6U57P+s8bWjAm/8CTbMm22
FHeL/fyQHJxwFP9HPJM4D+2Dy8jCqV/UvoVM1yma6lI2ELez8J5ZowM+6dkHtwr1
lXip2TKl80YlTRhbAC4uAhHr6J1xVKsH9aI6oqmh0vR0tA/VU0tivXS38zyFkdeb
AeBcXyy+au8rNmTZbRzR9y86pVNRnc3d6g1GpYfIYXOJcqM9wqXglF54PAmfQSOS
36L3c5d9jJAJTPxjvdzEDO7LdXQI8IV4vyiw8NOfkVFOMyxj8yqUcDy50JrnUNxy
rojylCVp5DN5B36poV1A50A7dUp5O7YoEwiAiywOaGqlNih/dmHIpvug4WfHAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUmPjCJJydsIho0b5blVByCEgXCFYwHwYDVR0j
BBgwFoAUyePPcsNH0otLQw23N76AywFysQYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzA3Yzg4ZGEtMmI1Ni00ODdlLTllZmUtNTcxMTcwYjEwMjg2LzAvQzlFM0NGNzJD
MzQ3RDI4QjRCNDMwREI3MzdCRTgwQ0IwMTcyQjEwNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DOUUzQ0Y3MkMzNDdEMjhCNEI0MzBEQjczN0JFODBDQjAxNzJC
MTA2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MwN2M4OGRhLTJiNTYtNDg3ZS05
ZWZlLTU3MTE3MGIxMDI4Ni8wLzMxMzAzMzJlMzEzNDMxMmUzMjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ40UMA0GCSqG
SIb3DQEBCwUAA4IBAQBvaQr67NhloxoZW+3iZPOxe1Ku+uNdqW09saCpvPMNJX/j
6hVH+AROqKvbG37RS1aZ5sajPZn5l2OnGgbuIybBFZl/r+D+nFbMbtWaBDMXwAu0
TAutumdTIvIO80wYud5e9DFImB/+h8xD4t0BADYcYxxxpDUpdlwZhzlSDrl2OU/w
FxZ7vgXLZOfTRG87neP94TuGASU9+ngU4aEfQ9J9r4OUwhDZlYJrjzC1GRxDaiZk
OZwstU2YOofPs1rRaWbyi2R05ZJH3H0HXsu20PhnMxHpECd4raLm//xHEnzVUgIY
vd2jV8kjvfqPAYboHe1e6mmmBtvk0l2xo4W8lflq
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:24 2026 by rpki-client