
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa
File: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (raw, json)
Hash identifier: +kmrv9UVKd6Gr+842CRBNPUYtLDCG179+fO5/CRRqOw=
Subject key identifier: B2:FE:31:EA:59:40:E0:6C:7F:36:D7:97:7B:82:45:99:EB:47:E0:AB
Certificate issuer: /CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF
Certificate serial: 338008ADA7BCE25096F2CA441C017B1F81DA3892
Authority key identifier: 3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa
Signing time: Sun 03 May 2026 03:03:24 +0000
ROA not before: Sun 03 May 2026 02:58:24 +0000
ROA not after: Sun 02 May 2027 03:03:24 +0000
asID: 142369
IP address blocks: 103.170.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl
rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:80:08:ad:a7:bc:e2:50:96:f2:ca:44:1c:01:7b:1f:81:da:38:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF
Validity
Not Before: May 3 02:58:24 2026 GMT
Not After : May 2 03:03:24 2027 GMT
Subject: CN=B2FE31EA5940E06C7F36D7977B824599EB47E0AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:19:58:94:8c:a7:83:77:30:1d:19:02:0c:
bd:bf:ed:cc:11:05:33:06:e0:35:a8:e5:32:b1:a6:
91:3a:91:78:5a:c5:02:8d:22:9f:40:52:4a:18:41:
09:83:91:a1:47:f9:c2:b5:4f:53:89:ad:74:e8:10:
24:2d:2a:ac:27:c6:7d:80:0d:09:ff:14:f4:49:e9:
96:8f:26:35:71:8c:d5:42:74:16:18:02:45:36:1b:
f4:88:70:e2:0a:89:c8:b3:6e:e1:8f:46:e3:e0:9c:
15:72:42:9d:d1:4f:ec:ca:9d:8d:b4:08:91:66:57:
4c:74:8a:69:75:e3:35:0c:89:93:3c:54:16:2f:63:
9a:aa:6c:3c:04:5c:f6:da:fd:61:50:b0:51:af:cb:
b8:21:96:14:14:a2:76:66:8c:85:ff:30:f1:79:96:
59:94:8a:00:7c:2a:8a:82:37:b7:1f:c5:d6:88:42:
04:bf:eb:06:e9:ae:f1:f3:f9:af:0a:33:c6:23:93:
2c:a8:33:66:d8:ba:85:d3:b2:4f:9e:ee:34:71:25:
d8:b8:3b:73:4d:e1:f7:b2:88:51:ad:80:43:0a:64:
37:83:be:8e:dc:63:80:c3:84:d7:2b:8d:b1:11:f5:
20:06:e6:ce:4a:3d:b8:1c:e0:36:1c:c4:56:65:0f:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FE:31:EA:59:40:E0:6C:7F:36:D7:97:7B:82:45:99:EB:47:E0:AB
X509v3 Authority Key Identifier:
keyid:3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e4:6f:72:0f:9e:2b:e4:54:4d:8e:0a:5e:c3:f7:46:5a:3b:
3f:f9:c3:7a:a5:72:86:c5:17:e5:27:52:2f:86:ad:2b:49:8e:
f0:f0:62:4c:92:8d:72:c9:78:1c:e3:a0:15:0b:a1:d5:9f:28:
84:90:94:20:0b:47:ca:36:94:38:68:6a:2e:4c:05:8c:9a:57:
51:20:39:ef:63:32:33:8e:3c:ef:7d:ec:3e:1a:37:39:b5:c4:
46:de:b3:b2:c7:e3:12:94:75:44:45:f0:17:22:16:b5:8e:75:
46:0d:05:1b:c9:9b:76:91:75:47:ea:12:df:79:de:61:57:6d:
e3:4f:ff:4a:10:36:ae:d6:13:ad:c9:64:a6:82:6c:c4:7a:c2:
a2:2b:13:45:db:18:1f:ac:47:d1:f6:5e:d0:c9:cd:c9:2f:2d:
f2:92:76:42:c3:df:da:aa:06:7f:aa:03:45:56:91:68:4e:08:
36:7f:ea:51:d8:79:6e:fd:bf:df:0b:03:5d:b9:dd:c0:1e:4a:
93:63:13:ac:74:ff:30:d9:e5:3e:fa:88:cf:cf:41:5c:79:c8:
8b:75:4c:81:a4:49:f4:8a:2a:0e:94:59:a5:80:71:ea:20:b5:
8f:d5:24:d8:30:b7:f4:08:18:4f:d0:bc:fe:1d:e9:b6:39:47:
35:b2:6b:84
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUM4AIrae84lCW8spEHAF7H4HaOJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZB
QUMxRUVFRjAeFw0yNjA1MDMwMjU4MjRaFw0yNzA1MDIwMzAzMjRaMDMxMTAvBgNV
BAMTKEIyRkUzMUVBNTk0MEUwNkM3RjM2RDc5NzdCODI0NTk5RUI0N0UwQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBShlYlIyng3cwHRkCDL2/7cwR
BTMG4DWo5TKxppE6kXhaxQKNIp9AUkoYQQmDkaFH+cK1T1OJrXToECQtKqwnxn2A
DQn/FPRJ6ZaPJjVxjNVCdBYYAkU2G/SIcOIKicizbuGPRuPgnBVyQp3RT+zKnY20
CJFmV0x0iml14zUMiZM8VBYvY5qqbDwEXPba/WFQsFGvy7ghlhQUonZmjIX/MPF5
llmUigB8KoqCN7cfxdaIQgS/6wbprvHz+a8KM8YjkyyoM2bYuoXTsk+e7jRxJdi4
O3NN4feyiFGtgEMKZDeDvo7cY4DDhNcrjbER9SAG5s5KPbgc4DYcxFZlD99ZAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUsv4x6llA4Gx/NteXe4JFmetH4KswHwYDVR0j
BBgwFoAUPLaDYcrHqAj3/cS66oYNpqrB7u8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzFiYzNmMjktNmY5ZC00N2QzLTllNzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFD
QUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZBQUMxRUVFRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zQ0I2ODM2MUNBQzdBODA4RjdGREM0QkFFQTg2MERBNkFBQzFF
RUVGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MxYmMzZjI5LTZmOWQtNDdkMy05
ZTc3LWMyODllNWZlZTc4ZS8wLzMxMzAzMzJlMzEzNzMwMmUzMTMxMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqnMwDQYJ
KoZIhvcNAQELBQADggEBALbkb3IPnivkVE2OCl7D90ZaOz/5w3qlcobFF+UnUi+G
rStJjvDwYkySjXLJeBzjoBULodWfKISQlCALR8o2lDhoai5MBYyaV1EgOe9jMjOO
PO997D4aNzm1xEbes7LH4xKUdURF8BciFrWOdUYNBRvJm3aRdUfqEt953mFXbeNP
/0oQNq7WE63JZKaCbMR6wqIrE0XbGB+sR9H2XtDJzckvLfKSdkLD39qqBn+qA0VW
kWhOCDZ/6lHYeW79v98LA1253cAeSpNjE6x0/zDZ5T76iM/PQVx5yIt1TIGkSfSK
Kg6UWaWAceogtY/VJNgwt/QIGE/QvP4d6bY5RzWya4Q=
-----END CERTIFICATE-----
Generated at Wed May 13 08:24:57 2026 by rpki-client