
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39392e302f32342d3234203d3e20313530323435.roa
File: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (raw, json)
Hash identifier: /Ar9BLD37pzpWiMramvnEnpVLlVnDEgU4xEdcB/AMOA=
Subject key identifier: 27:C6:0E:ED:36:0D:06:E2:E5:42:3A:F2:8D:08:83:5A:91:CF:EE:60
Certificate issuer: /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C
Certificate serial: 4D24343D50CDCFF445025E2D3EEAD43E57237705
Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39392e302f32342d3234203d3e20313530323435.roa
Signing time: Sun 03 May 2026 03:06:02 +0000
ROA not before: Sun 03 May 2026 03:01:02 +0000
ROA not after: Sun 02 May 2027 03:06:02 +0000
asID: 150245
IP address blocks: 103.23.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl
rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:24:34:3d:50:cd:cf:f4:45:02:5e:2d:3e:ea:d4:3e:57:23:77:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C
Validity
Not Before: May 3 03:01:02 2026 GMT
Not After : May 2 03:06:02 2027 GMT
Subject: CN=27C60EED360D06E2E5423AF28D08835A91CFEE60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:0c:6f:a8:da:55:be:fd:4d:51:c8:6b:15:
93:a8:27:af:46:a5:91:58:f6:c5:f7:9d:55:dc:13:
e9:2c:da:eb:43:53:79:88:f4:92:f3:c1:72:6a:fd:
99:37:1b:11:45:c4:bd:0d:2d:9f:5a:fb:2e:0e:f4:
1b:a0:dd:e2:d0:4f:9e:ff:33:cd:eb:ed:ad:0f:4d:
0e:d2:49:a3:49:df:74:d8:90:b7:49:ca:5c:f4:37:
27:85:8d:53:43:b3:1f:fa:fe:59:91:fa:93:cb:ea:
46:3f:94:5b:76:0e:bd:5f:15:df:52:b7:8a:3e:32:
a4:7f:3f:5d:07:cf:7e:1e:70:5a:44:ec:63:4a:2a:
39:b4:9e:f8:62:cc:d7:36:95:88:7c:5c:4b:ee:5d:
de:b4:94:3e:28:26:e1:b3:0d:dd:f9:82:1b:91:e4:
6a:7d:28:89:5b:97:3f:1f:e5:57:46:ad:35:86:05:
f6:30:6a:c2:cd:89:f6:0e:1e:a3:82:4e:fc:da:13:
de:3e:ce:e6:e9:4e:15:fe:a5:7e:a1:f6:40:29:0c:
7e:bf:e9:20:6b:95:14:77:21:30:26:1d:72:9d:65:
73:b7:a7:57:e0:d0:04:b9:d7:bb:c2:f8:10:a2:aa:
a4:78:ca:28:f7:9f:a6:41:ce:52:c2:60:b3:bc:1a:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C6:0E:ED:36:0D:06:E2:E5:42:3A:F2:8D:08:83:5A:91:CF:EE:60
X509v3 Authority Key Identifier:
keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39392e302f32342d3234203d3e20313530323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.99.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d5:a2:fa:28:6a:0b:fa:44:1d:16:d7:b1:e0:6d:47:cb:99:
24:c3:f4:74:1b:53:8f:e8:26:35:e1:ab:90:b5:a1:b2:3c:e8:
64:2c:1f:e0:4c:c1:68:17:6d:37:61:39:a7:84:4e:d5:d4:2f:
f8:f3:24:55:6f:1d:56:1a:ad:ac:e4:2e:97:1e:97:08:e4:4f:
07:bd:01:2d:d0:d6:e1:cf:08:16:6b:a4:64:36:4a:36:a0:1e:
7b:6f:8f:a6:cb:25:62:15:26:c4:e7:6d:80:44:a3:f6:e4:7a:
f2:4c:ef:3e:67:7c:48:e8:d1:d6:c8:f7:99:2c:44:f4:e2:dc:
0d:7c:c5:c3:a4:88:54:24:e7:35:86:ca:df:84:e7:65:04:02:
b8:8f:09:72:a5:36:ee:02:10:2f:72:65:fc:36:58:dc:24:34:
a7:4b:4a:c9:14:83:db:2c:bc:6d:6b:c3:1d:87:b4:12:18:d4:
aa:73:32:eb:2f:c4:ec:e3:c6:13:7c:8b:bd:11:15:d0:bb:a1:
81:30:97:b7:6b:fc:1b:82:ac:64:98:79:a5:37:01:45:fd:8a:
56:4f:7a:7b:d3:33:4b:1d:8b:30:2c:f3:6e:b4:41:1d:59:f8:
9a:7a:1e:cf:f5:74:29:f6:25:e3:73:56:f3:0a:c8:46:16:48:
62:98:28:8b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTSQ0PVDNz/RFAl4tPurUPlcjdwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENFOEVB
ODJBMDM4QzAeFw0yNjA1MDMwMzAxMDJaFw0yNzA1MDIwMzA2MDJaMDMxMTAvBgNV
BAMTKDI3QzYwRUVEMzYwRDA2RTJFNTQyM0FGMjhEMDg4MzVBOTFDRkVFNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cgxvqNpVvv1NUchrFZOoJ69G
pZFY9sX3nVXcE+ks2utDU3mI9JLzwXJq/Zk3GxFFxL0NLZ9a+y4O9Bug3eLQT57/
M83r7a0PTQ7SSaNJ33TYkLdJylz0NyeFjVNDsx/6/lmR+pPL6kY/lFt2Dr1fFd9S
t4o+MqR/P10Hz34ecFpE7GNKKjm0nvhizNc2lYh8XEvuXd60lD4oJuGzDd35ghuR
5Gp9KIlblz8f5VdGrTWGBfYwasLNifYOHqOCTvzaE94+zubpThX+pX6h9kApDH6/
6SBrlRR3ITAmHXKdZXO3p1fg0AS517vC+BCiqqR4yij3n6ZBzlLCYLO8GsIVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJ8YO7TYNBuLlQjryjQiDWpHP7mAwHwYDVR0j
BBgwFoAUnfx6UUnT/MCs2bvtVcTOjqgqA4wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yzg0NmY0MjItYzMwMi00NDYyLWI1ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0
OUQzRkNDMEFDRDlCQkVENTVDNENFOEVBODJBMDM4Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85REZDN0E1MTQ5RDNGQ0MwQUNEOUJCRUQ1NUM0Q0U4RUE4MkEw
MzhDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M4NDZmNDIyLWMzMDItNDQ2Mi1i
NTg0LTcwMGU5MzQ2Y2EwOS8wLzMxMzAzMzJlMzIzMzJlMzkzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcXYzANBgkqhkiG
9w0BAQsFAAOCAQEAMtWi+ihqC/pEHRbXseBtR8uZJMP0dBtTj+gmNeGrkLWhsjzo
ZCwf4EzBaBdtN2E5p4RO1dQv+PMkVW8dVhqtrOQulx6XCORPB70BLdDW4c8IFmuk
ZDZKNqAee2+PpsslYhUmxOdtgESj9uR68kzvPmd8SOjR1sj3mSxE9OLcDXzFw6SI
VCTnNYbK34TnZQQCuI8JcqU27gIQL3Jl/DZY3CQ0p0tKyRSD2yy8bWvDHYe0EhjU
qnMy6y/E7OPGE3yLvREV0LuhgTCXt2v8G4KsZJh5pTcBRf2KVk96e9MzSx2LMCzz
brRBHVn4mnoez/V0KfYl43NW8wrIRhZIYpgoiw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:35:11 2026 by rpki-client