
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa
File: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (raw, json)
Hash identifier: a4IK1VqkQFifgbVqGFjspnePVTV/YkKjfKoaIwFfqZw=
Subject key identifier: 6D:65:69:56:BB:CB:6D:5B:B6:C1:ED:9D:CF:C1:63:7F:30:B4:E3:40
Certificate issuer: /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Certificate serial: 71048E45BD4D55D6B45D7A7EA38A67FA7AEEB192
Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa
Signing time: Sun 03 May 2026 03:07:28 +0000
ROA not before: Sun 03 May 2026 03:02:28 +0000
ROA not after: Sun 02 May 2027 03:07:28 +0000
asID: 138134
IP address blocks: 103.133.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:04:8e:45:bd:4d:55:d6:b4:5d:7a:7e:a3:8a:67:fa:7a:ee:b1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Validity
Not Before: May 3 03:02:28 2026 GMT
Not After : May 2 03:07:28 2027 GMT
Subject: CN=6D656956BBCB6D5BB6C1ED9DCFC1637F30B4E340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:a7:e8:73:d6:15:51:88:2e:97:5c:54:03:
cd:f9:2d:bb:39:d1:9c:da:f5:8d:e3:48:ea:75:8d:
ca:e8:48:0e:14:fb:46:64:22:67:8a:e6:4e:8c:6b:
2a:a3:57:8f:d0:27:ff:96:47:a7:ab:1f:9d:46:08:
ff:3f:47:af:76:82:09:73:02:97:8e:dd:ef:96:4c:
fc:1b:0a:a1:0d:46:86:b0:bb:5d:7e:cd:b0:74:90:
f7:66:60:9d:3e:e8:e2:03:83:47:cb:af:b5:d7:a0:
dc:e3:3b:f3:e0:55:cc:50:4c:30:d9:a3:fd:49:51:
a2:b4:af:86:c0:11:a4:12:35:bc:40:f5:53:dc:4f:
68:0c:94:c5:fd:2c:c8:66:f5:2f:21:31:04:1c:dd:
19:d0:ea:87:6f:02:7e:68:5f:67:65:79:d9:89:37:
6a:a3:f1:54:e1:49:c2:de:5c:d0:89:c7:b3:ca:71:
0f:f9:65:26:2c:4e:e2:51:8b:bf:77:ca:d0:5c:87:
6f:a4:b3:8d:e6:4a:20:71:61:5f:ff:0c:51:32:18:
7e:66:99:14:23:6b:c0:ea:23:b9:7a:55:bc:67:9e:
ae:9c:d3:59:92:8a:97:e6:ec:6e:12:8e:9a:73:34:
91:3b:e6:15:39:86:d9:5a:df:23:37:07:01:d1:d3:
c2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:65:69:56:BB:CB:6D:5B:B6:C1:ED:9D:CF:C1:63:7F:30:B4:E3:40
X509v3 Authority Key Identifier:
keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:8e:a4:dc:d0:ac:00:b4:bf:ee:bb:36:a6:20:70:48:28:61:
e6:83:0d:4a:d0:bf:ab:35:38:0a:0a:b3:a2:94:97:f2:56:ba:
63:35:d1:bb:ad:a9:68:76:00:24:41:bb:3d:ed:61:c8:ca:b6:
c2:5b:d0:67:90:95:b9:8c:04:6a:43:75:eb:6a:fb:a9:00:e1:
55:4f:23:c0:18:61:9a:34:bf:04:ea:fb:1f:ec:8d:d1:7c:59:
42:bc:a6:38:7a:64:7b:5b:33:93:7e:72:45:93:b9:52:bc:bc:
4c:90:4e:8a:76:18:47:c8:93:9a:a2:40:91:ea:fb:35:50:b0:
b9:74:ef:cb:e7:43:fd:a1:dc:6b:a3:25:df:dd:be:f8:93:be:
34:b8:74:e7:4f:cf:f5:e8:f7:3a:98:9c:f3:57:af:c9:70:48:
7c:cd:0d:e8:24:67:a4:e9:1a:51:cc:e3:b8:06:3e:49:0f:0d:
e3:08:68:ed:7c:2d:1e:16:cc:d8:00:b8:8b:0d:ee:a2:8d:f5:
bc:5d:56:c1:d4:f8:09:b1:5d:d7:f0:9f:bb:5f:33:ca:42:42:
3c:d6:2a:a3:28:1e:7f:df:d7:a9:78:ee:a8:f8:ee:3d:28:97:
ea:58:a6:d6:d3:0a:63:52:5f:cf:64:2e:29:be:1d:15:6c:f1:
1e:07:ed:56
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcQSORb1NVda0XXp+o4pn+nrusZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYxNDg0OUEzMEM5OEMxRjAxNjIwRTRDNUVDQkFERERG
NTA5OTkyQTAeFw0yNjA1MDMwMzAyMjhaFw0yNzA1MDIwMzA3MjhaMDMxMTAvBgNV
BAMTKDZENjU2OTU2QkJDQjZENUJCNkMxRUQ5RENGQzE2MzdGMzBCNEUzNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPhKfoc9YVUYgul1xUA835Lbs5
0Zza9Y3jSOp1jcroSA4U+0ZkImeK5k6MayqjV4/QJ/+WR6erH51GCP8/R692gglz
ApeO3e+WTPwbCqENRoawu11+zbB0kPdmYJ0+6OIDg0fLr7XXoNzjO/PgVcxQTDDZ
o/1JUaK0r4bAEaQSNbxA9VPcT2gMlMX9LMhm9S8hMQQc3RnQ6odvAn5oX2dledmJ
N2qj8VThScLeXNCJx7PKcQ/5ZSYsTuJRi793ytBch2+ks43mSiBxYV//DFEyGH5m
mRQja8DqI7l6Vbxnnq6c01mSipfm7G4SjppzNJE75hU5htla3yM3BwHR08KfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUbWVpVrvLbVu2we2dz8FjfzC040AwHwYDVR0j
BBgwFoAUHxSEmjDJjB8BYg5MXsut3fUJmSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2NmNjhhYmEtOTUxNS00ZDEyLWFhYzItOGNlZTVkYjJhNDhmLzAvMUYxNDg0OUEz
MEM5OEMxRjAxNjIwRTRDNUVDQkFERERGNTA5OTkyQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xRjE0ODQ5QTMwQzk4QzFGMDE2MjBFNEM1RUNCQUREREY1MDk5
OTJBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NjZjY4YWJhLTk1MTUtNGQxMi1h
YWMyLThjZWU1ZGIyYTQ4Zi8wLzMxMzAzMzJlMzEzMzMzMmUzNjMwMmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzEzMzM4MzEzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4U8MA0GCSqG
SIb3DQEBCwUAA4IBAQBOjqTc0KwAtL/uuzamIHBIKGHmgw1K0L+rNTgKCrOilJfy
VrpjNdG7ralodgAkQbs97WHIyrbCW9BnkJW5jARqQ3XravupAOFVTyPAGGGaNL8E
6vsf7I3RfFlCvKY4emR7WzOTfnJFk7lSvLxMkE6KdhhHyJOaokCR6vs1ULC5dO/L
50P9odxroyXf3b74k740uHTnT8/16Pc6mJzzV6/JcEh8zQ3oJGek6RpRzOO4Bj5J
Dw3jCGjtfC0eFszYALiLDe6ijfW8XVbB1PgJsV3X8J+7XzPKQkI81iqjKB5/39ep
eO6o+O49KJfqWKbW0wpjUl/PZC4pvh0VbPEeB+1W
-----END CERTIFICATE-----
Generated at Wed May 13 03:23:19 2026 by rpki-client