
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa
File: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (raw, json)
Hash identifier: ATgc6Id4lihO/sLAGAO1j7xGe/4awMhi2w1w0ztaLuU=
Subject key identifier: B3:93:DE:AD:68:53:CC:D1:75:E7:03:43:41:75:13:0C:C8:09:FA:7F
Certificate issuer: /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5
Certificate serial: 3C47409FD4569985CA599D50C8B04CAFDC3DE128
Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa
Signing time: Sun 03 May 2026 03:07:32 +0000
ROA not before: Sun 03 May 2026 03:02:32 +0000
ROA not after: Sun 02 May 2027 03:07:32 +0000
asID: 135439
IP address blocks: 103.214.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl
rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:47:40:9f:d4:56:99:85:ca:59:9d:50:c8:b0:4c:af:dc:3d:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5
Validity
Not Before: May 3 03:02:32 2026 GMT
Not After : May 2 03:07:32 2027 GMT
Subject: CN=B393DEAD6853CCD175E703434175130CC809FA7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:58:61:c2:3a:cd:8c:86:fc:6f:7f:58:98:
b4:f2:7a:86:9c:f5:48:de:55:ac:b6:7e:09:9f:26:
ad:41:f7:17:84:1d:c9:20:20:ef:3a:ac:cd:2f:76:
c8:7c:54:ab:99:c9:58:f5:b8:e0:92:6f:07:fc:0d:
64:31:47:fa:4d:17:30:99:20:0b:de:2a:68:13:80:
fe:a2:fb:89:99:56:fc:af:bc:14:61:bb:36:c1:7e:
d7:61:be:40:e5:20:79:65:a8:94:b5:3b:31:00:ad:
ad:fe:1d:ee:3c:50:6d:e6:32:da:3b:a2:c7:c4:fd:
c2:27:fd:0e:dc:38:d4:83:34:70:bf:a3:e2:a2:19:
c2:d7:b5:44:76:3b:a9:e0:c8:06:bd:7a:f1:11:78:
8a:71:35:3c:88:67:5d:66:90:aa:04:c6:62:08:03:
76:7f:31:e0:21:da:37:67:66:f3:68:50:38:61:f8:
ef:97:b6:01:97:24:d2:90:e9:78:93:fc:0e:eb:63:
69:e5:26:18:22:59:e7:f2:73:66:92:31:63:e3:6a:
59:e5:81:f7:a2:0a:d0:35:b9:c8:ce:b2:37:e6:23:
72:d9:7e:ce:c7:9a:fe:f1:33:86:38:5b:ce:31:9b:
e0:04:4c:58:a5:05:e2:34:e8:0a:79:da:46:87:6c:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:93:DE:AD:68:53:CC:D1:75:E7:03:43:41:75:13:0C:C8:09:FA:7F
X509v3 Authority Key Identifier:
keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:71:d5:f0:ac:9e:65:6f:86:31:da:f3:61:aa:ad:e7:ab:92:
11:13:50:ae:9c:7a:c0:01:ab:94:d1:b1:99:44:58:c4:2d:8d:
5c:fc:b1:e1:99:91:d1:f6:6f:f9:98:6c:3a:66:9b:bd:0b:b9:
4d:bd:45:47:d1:c1:9c:b1:47:55:c2:de:db:dc:4f:a2:bb:48:
0a:14:09:ce:8e:9a:fd:3d:7b:f5:4a:cd:0e:69:0b:96:b9:0e:
c2:19:ed:40:5a:55:b7:35:80:98:58:66:6a:4d:7c:3b:45:d9:
7c:2e:68:79:1b:1d:c3:d1:c9:53:9c:cb:d0:8e:f3:01:26:81:
9f:92:35:60:01:17:d7:8b:66:33:1c:df:46:cd:f4:f6:d6:45:
6d:a0:6c:42:a5:ca:d3:e5:74:67:e0:c7:3e:a9:50:30:35:35:
b1:e4:82:a1:ee:86:ad:7f:8d:ec:d8:2e:b6:9a:91:81:1c:f7:
2d:c1:f9:fb:98:0c:f8:58:0a:66:8e:98:a6:04:bc:33:b0:29:
60:f5:09:d5:37:01:6a:c7:94:46:44:84:f0:ac:3f:3e:e8:cb:
f9:a0:36:85:2f:44:25:21:a2:eb:1f:b8:0a:80:08:b5:54:77:
f4:16:b9:a9:f0:54:05:bd:ea:6d:eb:e0:90:ca:f0:0c:7c:ad:
b0:02:6b:be
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUPEdAn9RWmYXKWZ1QyLBMr9w94SgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3
QzVBQzRBNTAeFw0yNjA1MDMwMzAyMzJaFw0yNzA1MDIwMzA3MzJaMDMxMTAvBgNV
BAMTKEIzOTNERUFENjg1M0NDRDE3NUU3MDM0MzQxNzUxMzBDQzgwOUZBN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaVhhwjrNjIb8b39YmLTyeoac
9UjeVay2fgmfJq1B9xeEHckgIO86rM0vdsh8VKuZyVj1uOCSbwf8DWQxR/pNFzCZ
IAveKmgTgP6i+4mZVvyvvBRhuzbBftdhvkDlIHllqJS1OzEAra3+He48UG3mMto7
osfE/cIn/Q7cONSDNHC/o+KiGcLXtUR2O6ngyAa9evEReIpxNTyIZ11mkKoExmII
A3Z/MeAh2jdnZvNoUDhh+O+XtgGXJNKQ6XiT/A7rY2nlJhgiWefyc2aSMWPjalnl
gfeiCtA1ucjOsjfmI3LZfs7Hmv7xM4Y4W84xm+AETFilBeI06Ap52kaHbMSxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUs5PerWhTzNF15wNDQXUTDMgJ+n8wHwYDVR0j
BBgwFoAUQTjgrUZG2LWxkWSBMQXi7HxaxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2RlNzE0MzctODVmYy00N2FmLTk2ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0
NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3QzVBQzRBNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MTM4RTBBRDQ2NDZEOEI1QjE5MTY0ODEzMTA1RTJFQzdDNUFD
NEE1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NkZTcxNDM3LTg1ZmMtNDdhZi05
Njg3LTkwM2JhZmIyYzE2MS8wLzMxMzAzMzJlMzIzMTM0MmUzMjMzMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzUzNDMzMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn1u4wDQYJ
KoZIhvcNAQELBQADggEBAFxx1fCsnmVvhjHa82GqreerkhETUK6cesABq5TRsZlE
WMQtjVz8seGZkdH2b/mYbDpmm70LuU29RUfRwZyxR1XC3tvcT6K7SAoUCc6Omv09
e/VKzQ5pC5a5DsIZ7UBaVbc1gJhYZmpNfDtF2XwuaHkbHcPRyVOcy9CO8wEmgZ+S
NWABF9eLZjMc30bN9PbWRW2gbEKlytPldGfgxz6pUDA1NbHkgqHuhq1/jezYLraa
kYEc9y3B+fuYDPhYCmaOmKYEvDOwKWD1CdU3AWrHlEZEhPCsPz7oy/mgNoUvRCUh
ousfuAqACLVUd/QWuanwVAW96m3r4JDK8Ax8rbACa74=
-----END CERTIFICATE-----
Generated at Wed May 13 02:49:07 2026 by rpki-client