
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39372e302f32342d3234203d3e203535363533.roa
File: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (raw, json)
Hash identifier: QXGWZFsc9f71b86soW4vxADReeKw3WdzjpJwgfFCmCI=
Subject key identifier: D3:FA:BD:BD:1B:47:CD:17:BD:07:2B:B3:27:D9:ED:CC:39:04:D6:66
Certificate issuer: /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial: 0AEF8094FC30A06A61BAB0432AA09BEFFF9FD301
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39372e302f32342d3234203d3e203535363533.roa
Signing time: Sun 03 May 2026 03:06:17 +0000
ROA not before: Sun 03 May 2026 03:01:17 +0000
ROA not after: Sun 02 May 2027 03:06:17 +0000
asID: 55653
IP address blocks: 103.11.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ef:80:94:fc:30:a0:6a:61:ba:b0:43:2a:a0:9b:ef:ff:9f:d3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Validity
Not Before: May 3 03:01:17 2026 GMT
Not After : May 2 03:06:17 2027 GMT
Subject: CN=D3FABDBD1B47CD17BD072BB327D9EDCC3904D666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:8d:81:75:e8:68:cf:4f:64:44:d9:b6:77:
73:ff:6e:b0:24:b4:84:ae:76:ac:7d:f8:51:39:e6:
89:c5:74:c8:f4:58:0d:fc:f0:af:35:88:7c:08:0d:
bc:ec:67:cb:5d:b0:00:65:cf:73:e2:e5:2f:8d:b3:
ec:40:bd:ff:92:f5:d5:18:49:2c:fd:70:97:15:d7:
b6:40:91:c7:40:3c:ef:a1:38:41:03:76:0b:91:80:
97:b6:32:7a:93:84:8b:67:8e:36:54:e2:37:73:a8:
e2:1d:63:36:4b:9c:02:e3:72:8d:d2:59:36:30:a1:
2b:0f:33:0c:8e:a6:e8:42:ae:6d:67:3c:5e:2c:a9:
64:14:43:69:d2:b7:dd:7f:ba:02:a4:db:c7:a4:c8:
60:3a:d8:4e:c5:91:82:30:27:c0:24:48:c0:89:33:
82:04:52:a0:98:0d:ae:e1:76:cf:58:d0:e9:3c:ed:
9b:fd:a9:a0:c2:6d:ea:4f:f1:46:5a:20:ec:dd:6c:
67:64:fb:13:71:4f:15:c7:ea:a9:c5:2c:45:73:fe:
69:37:11:b8:cc:89:4f:55:12:37:b9:c0:d1:0f:e9:
68:dc:f2:f2:1e:aa:e4:6b:ec:9c:ab:3d:85:dd:a5:
41:02:d6:57:73:9f:ef:7d:c0:cd:bc:54:8f:a2:41:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FA:BD:BD:1B:47:CD:17:BD:07:2B:B3:27:D9:ED:CC:39:04:D6:66
X509v3 Authority Key Identifier:
keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e31312e39372e302f32342d3234203d3e203535363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.11.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1f:89:28:d4:5c:00:78:90:0f:5f:60:22:62:e6:cf:5e:78:
46:28:aa:08:0b:d8:eb:fa:fa:80:7e:c1:85:a1:7c:38:3a:16:
59:37:e4:d4:d5:9c:7e:57:9e:1c:87:be:4c:e0:c9:0a:18:96:
79:7a:6c:38:fe:ca:27:0e:ca:68:7b:21:13:a1:bd:7c:54:20:
46:b4:56:96:2f:c4:44:2f:44:20:89:98:a7:6f:19:08:d8:05:
31:ba:dc:f8:1d:f0:c3:2f:76:14:55:4c:f7:7c:59:6f:91:7e:
0e:31:46:d9:9f:be:73:d9:26:47:43:0f:60:3d:e6:95:eb:74:
21:a4:61:cf:d7:c8:2a:26:b1:29:01:82:64:e2:10:c9:34:8e:
47:92:06:f5:0a:76:eb:be:15:08:6d:7a:62:55:38:13:02:a2:
e0:ae:48:80:c0:fe:04:85:d2:ed:a5:e1:a1:a5:94:69:7c:a1:
cd:4a:dd:95:b7:00:c8:be:70:fc:81:e4:4c:50:90:57:da:76:
4b:89:02:1f:ee:15:d4:13:27:37:3a:5b:e8:d7:21:47:d8:cd:
50:6f:57:99:0f:96:c9:81:be:fd:4e:c5:24:c4:38:d9:b8:e5:
32:e6:11:65:3f:de:a4:91:c5:20:fe:92:c8:8f:7a:a2:e7:da:
f4:88:04:ba
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUCu+AlPwwoGphurBDKqCb7/+f0wEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJENzM4RDlDN0FCNzJDODEzRUI4OTNFMzk1NUE2OEIz
MTkwQ0ZEMjAeFw0yNjA1MDMwMzAxMTdaFw0yNzA1MDIwMzA2MTdaMDMxMTAvBgNV
BAMTKEQzRkFCREJEMUI0N0NEMTdCRDA3MkJCMzI3RDlFRENDMzkwNEQ2NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJto2Bdehoz09kRNm2d3P/brAk
tISudqx9+FE55onFdMj0WA388K81iHwIDbzsZ8tdsABlz3Pi5S+Ns+xAvf+S9dUY
SSz9cJcV17ZAkcdAPO+hOEEDdguRgJe2MnqThItnjjZU4jdzqOIdYzZLnALjco3S
WTYwoSsPMwyOpuhCrm1nPF4sqWQUQ2nSt91/ugKk28ekyGA62E7FkYIwJ8AkSMCJ
M4IEUqCYDa7hds9Y0Ok87Zv9qaDCbepP8UZaIOzdbGdk+xNxTxXH6qnFLEVz/mk3
EbjMiU9VEje5wNEP6Wjc8vIequRr7JyrPYXdpUEC1ldzn+99wM28VI+iQduTAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU0/q9vRtHzRe9ByuzJ9ntzDkE1mYwHwYDVR0j
BBgwFoAUC9c42cercsgT64k+OVWmizGQz9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yzk3NDY1ZTMtNzhhMC00OTY1LWFlMTQtZTRjYjRkMGZjMTg1LzAvMEJENzM4RDlD
N0FCNzJDODEzRUI4OTNFMzk1NUE2OEIzMTkwQ0ZEMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQkQ3MzhEOUM3QUI3MkM4MTNFQjg5M0UzOTU1QTY4QjMxOTBD
RkQyLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M5NzQ2NWUzLTc4YTAtNDk2NS1h
ZTE0LWU0Y2I0ZDBmYzE4NS8wLzMxMzAzMzJlMzEzMTJlMzkzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzUzNjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnC2EwDQYJKoZIhvcN
AQELBQADggEBAFsfiSjUXAB4kA9fYCJi5s9eeEYoqggL2Ov6+oB+wYWhfDg6Flk3
5NTVnH5XnhyHvkzgyQoYlnl6bDj+yicOymh7IROhvXxUIEa0VpYvxEQvRCCJmKdv
GQjYBTG63Pgd8MMvdhRVTPd8WW+Rfg4xRtmfvnPZJkdDD2A95pXrdCGkYc/XyCom
sSkBgmTiEMk0jkeSBvUKduu+FQhtemJVOBMCouCuSIDA/gSF0u2l4aGllGl8oc1K
3ZW3AMi+cPyB5ExQkFfadkuJAh/uFdQTJzc6W+jXIUfYzVBvV5kPlsmBvv1OxSTE
ONm45TLmEWU/3qSRxSD+ksiPeqLn2vSIBLo=
-----END CERTIFICATE-----
Generated at Wed May 13 00:43:47 2026 by rpki-client