
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa
File: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (raw, json)
Hash identifier: m1k0AK6mRy+Mwv1J09v+vjwtPbeYTImxk1I5pN2FqiY=
Subject key identifier: A7:1C:D7:81:A5:3D:39:27:9E:A5:AD:E4:E3:B9:44:60:B1:18:09:FD
Certificate issuer: /CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8
Certificate serial: 66474C1DBF40A13724247F0F97AC08864773F9FA
Authority key identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa
Signing time: Sun 03 May 2026 03:05:59 +0000
ROA not before: Sun 03 May 2026 03:00:59 +0000
ROA not after: Sun 02 May 2027 03:05:59 +0000
asID: 151011
IP address blocks: 103.222.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl
rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:47:4c:1d:bf:40:a1:37:24:24:7f:0f:97:ac:08:86:47:73:f9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8
Validity
Not Before: May 3 03:00:59 2026 GMT
Not After : May 2 03:05:59 2027 GMT
Subject: CN=A71CD781A53D39279EA5ADE4E3B94460B11809FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:81:41:cd:32:93:65:bd:49:69:41:fb:aa:25:
ee:94:e7:bc:41:ab:b3:71:5d:ae:8e:05:cd:bd:33:
09:fb:67:32:bf:60:b7:5f:1b:29:91:67:40:cb:8e:
6f:e3:fc:cf:c5:65:57:50:df:fa:1e:d2:0e:fd:90:
7e:c9:59:73:09:b7:02:00:f8:2e:98:be:7e:66:c7:
17:3a:83:23:38:f6:24:19:3c:43:da:5f:e8:c4:ff:
d0:7a:9b:69:51:d9:e4:80:ff:c6:84:18:5b:cb:7f:
a0:d3:8d:1a:6b:46:6b:22:27:33:20:9d:60:ce:71:
36:4b:0a:07:d8:9e:38:52:36:98:bf:9b:5b:78:ed:
7c:b1:c8:88:66:72:98:26:51:fb:24:5b:ae:ba:0e:
2e:fa:cc:5c:24:3b:fe:ef:d6:a8:1c:ff:6c:e7:cc:
ac:1d:4d:32:2a:dd:4a:ee:c1:33:13:c7:37:15:8d:
e9:4d:08:5d:2b:6c:4d:00:4d:dc:a2:11:a1:09:72:
24:a6:a0:48:c7:8d:94:15:66:0f:25:3b:8d:04:18:
e1:c8:db:30:53:15:ab:9f:bd:bb:a5:fa:08:da:93:
10:a9:5e:11:62:ba:c4:ad:c0:38:70:01:89:3f:a5:
3a:52:14:8e:7a:3a:96:b7:52:ee:1f:a7:57:a9:e1:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1C:D7:81:A5:3D:39:27:9E:A5:AD:E4:E3:B9:44:60:B1:18:09:FD
X509v3 Authority Key Identifier:
keyid:BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.222.254.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f4:8b:63:c5:56:7f:14:3f:47:6a:a5:fe:92:a9:ed:62:95:
81:4e:95:bb:72:87:3f:44:58:bd:1b:18:00:d2:3a:8f:2f:7d:
05:50:0f:14:24:2f:fd:33:54:aa:1a:ec:0b:cd:5e:e0:96:ed:
44:5b:a2:fd:30:a4:74:c2:df:6e:0a:15:be:3b:4e:70:81:1d:
c8:03:d8:3d:98:54:b7:2a:e7:7c:7b:a4:cd:62:30:04:3c:e8:
c1:3c:27:73:b4:3d:2a:5b:a5:50:e2:fe:0f:7b:2e:ce:1e:fe:
5a:6d:48:32:8c:7b:41:1d:d0:f6:9b:be:6b:ff:07:14:ab:9b:
12:da:24:e1:01:f3:e8:4c:df:8b:84:d5:fc:19:72:40:29:6e:
db:78:0b:92:2a:a8:9d:45:be:37:5e:d6:02:0e:98:2a:71:9d:
17:77:bb:4f:32:6d:37:8d:bf:c8:20:7b:64:47:d8:7f:7c:d0:
3b:7e:5a:ad:c6:a2:b2:25:75:b2:ae:33:94:da:96:14:85:b6:
28:1d:39:a4:b6:05:20:c8:54:1f:f3:a2:c9:af:93:9f:e3:02:
f2:98:18:36:8e:28:5c:69:b9:46:12:7f:9d:8b:b4:93:7a:44:
84:a5:66:33:07:37:1a:62:28:dd:59:a4:87:63:76:12:b1:68:
26:df:b4:ff
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZkdMHb9AoTckJH8Pl6wIhkdz+fowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVF
NEZGQkFCODAeFw0yNjA1MDMwMzAwNTlaFw0yNzA1MDIwMzA1NTlaMDMxMTAvBgNV
BAMTKEE3MUNENzgxQTUzRDM5Mjc5RUE1QURFNEUzQjk0NDYwQjExODA5RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpgUHNMpNlvUlpQfuqJe6U57xB
q7NxXa6OBc29Mwn7ZzK/YLdfGymRZ0DLjm/j/M/FZVdQ3/oe0g79kH7JWXMJtwIA
+C6Yvn5mxxc6gyM49iQZPEPaX+jE/9B6m2lR2eSA/8aEGFvLf6DTjRprRmsiJzMg
nWDOcTZLCgfYnjhSNpi/m1t47XyxyIhmcpgmUfskW666Di76zFwkO/7v1qgc/2zn
zKwdTTIq3UruwTMTxzcVjelNCF0rbE0ATdyiEaEJciSmoEjHjZQVZg8lO40EGOHI
2zBTFaufvbul+gjakxCpXhFiusStwDhwAYk/pTpSFI56Opa3Uu4fp1ep4VjdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUpxzXgaU9OSeepa3k47lEYLEYCf0wHwYDVR0j
BBgwFoAUu9Thtndshi97MvxQNYfsbuT/urgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzgwZGRlOTQtZTViZS00ZDI5LWJiMTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3
NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVFNEZGQkFCOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQkQ0RTFCNjc3NkM4NjJGN0IzMkZDNTAzNTg3RUM2RUU0RkZC
QUI4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M4MGRkZTk0LWU1YmUtNGQyOS1i
YjEyLTQ1ZmI1YzFkMmM3OS8wLzMxMzAzMzJlMzIzMjMyMmUzMjM1MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzMDMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn3v4wDQYJ
KoZIhvcNAQELBQADggEBAAT0i2PFVn8UP0dqpf6Sqe1ilYFOlbtyhz9EWL0bGADS
Oo8vfQVQDxQkL/0zVKoa7AvNXuCW7URbov0wpHTC324KFb47TnCBHcgD2D2YVLcq
53x7pM1iMAQ86ME8J3O0PSpbpVDi/g97Ls4e/lptSDKMe0Ed0Pabvmv/BxSrmxLa
JOEB8+hM34uE1fwZckApbtt4C5IqqJ1Fvjde1gIOmCpxnRd3u08ybTeNv8gge2RH
2H980Dt+Wq3GorIldbKuM5TalhSFtigdOaS2BSDIVB/zosmvk5/jAvKYGDaOKFxp
uUYSf52LtJN6RISlZjMHNxpiKN1ZpIdjdhKxaCbftP8=
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:48 2026 by rpki-client