
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa
File: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (raw, json)
Hash identifier: MIfS/eHMskBKSqBbwRfOeUTCESkdJmMT09TJQUGAcLg=
Subject key identifier: 2E:15:DA:C1:4D:1B:E5:29:34:51:95:65:7F:1B:20:F1:A8:9F:57:AD
Certificate issuer: /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5
Certificate serial: 0F8342E6D82E6B81C8B60E31C9EF8075C6DDFD25
Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa
Signing time: Sun 03 May 2026 03:07:32 +0000
ROA not before: Sun 03 May 2026 03:02:32 +0000
ROA not after: Sun 02 May 2027 03:07:32 +0000
asID: 135439
IP address blocks: 103.214.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl
rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:83:42:e6:d8:2e:6b:81:c8:b6:0e:31:c9:ef:80:75:c6:dd:fd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5
Validity
Not Before: May 3 03:02:32 2026 GMT
Not After : May 2 03:07:32 2027 GMT
Subject: CN=2E15DAC14D1BE529345195657F1B20F1A89F57AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:23:5c:ee:b0:1e:e4:71:2d:9b:68:aa:43:
f4:7c:43:b9:1d:f3:bd:e9:3f:bf:2a:ac:d0:4c:9e:
52:7f:7a:00:72:3a:9b:ce:a2:7d:ae:fe:c3:31:3d:
96:36:c2:e6:ee:e8:f2:52:02:ef:73:07:b9:99:ce:
4e:ca:46:55:cb:6c:31:db:65:98:24:72:b0:3c:9b:
fb:06:f4:12:38:14:c8:54:d5:27:97:f4:7c:94:f1:
b9:66:38:b5:ee:0d:e8:3f:44:7f:08:90:b2:d6:4e:
76:e5:d0:f7:ce:0f:e7:2d:31:75:c3:b8:c2:9a:fa:
42:5d:f1:53:54:aa:fc:c0:e9:6d:31:40:45:2b:1a:
5f:2f:e5:08:57:04:3d:a2:4e:c9:56:22:53:2d:83:
5c:7c:28:ba:59:15:90:1f:4f:7d:c6:ce:75:0e:7e:
2f:ba:91:e8:45:b9:ad:0e:f3:b5:d4:0e:02:24:7a:
5d:7b:ba:6e:27:ab:65:e6:1f:94:bd:91:a7:8b:4b:
d1:c7:32:42:8b:88:60:da:59:ba:85:fa:b4:f0:a6:
49:1b:c7:1a:8b:6c:5c:05:40:4c:70:93:a7:6f:6e:
be:bf:94:4f:a5:0c:a9:ec:00:16:c7:85:20:5a:0b:
15:dc:a0:4b:9b:ee:87:9c:b8:21:c5:26:e1:ad:d3:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:15:DA:C1:4D:1B:E5:29:34:51:95:65:7F:1B:20:F1:A8:9F:57:AD
X509v3 Authority Key Identifier:
keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.239.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0c:a7:71:6c:fd:42:38:de:d3:ad:06:3b:3f:40:d4:ab:8a:
78:7b:1a:01:e3:0e:a8:08:c9:3a:40:01:96:29:f2:35:e2:8d:
f3:11:ee:78:e6:25:ca:30:66:f6:38:9c:10:00:61:4e:20:16:
8d:cf:28:e7:40:a9:47:56:1a:a7:04:15:6b:2b:e3:30:e7:33:
de:7c:56:78:8a:33:6b:b1:96:a2:4c:cb:96:5b:d9:c4:8d:83:
22:5c:ea:66:3f:6e:c9:92:db:6f:47:cf:42:06:86:f4:84:5d:
19:13:e5:72:68:ed:f0:5a:8e:ca:55:1c:e6:38:87:32:fa:6a:
8a:e5:6e:03:7f:0d:97:c7:5c:cb:f8:e6:29:fd:e5:ca:e4:17:
67:8d:96:39:b9:8b:da:19:4d:e4:74:f5:e6:33:00:1e:40:19:
dd:bc:16:69:de:6d:72:fe:99:e2:e2:c7:0e:dd:8e:4e:53:b7:
62:39:d2:4f:3e:4b:ca:9b:dd:d4:bd:99:14:cc:c3:6f:b1:5a:
54:17:65:bf:17:ff:09:b4:71:fb:44:93:3d:2c:e9:06:c3:89:
bf:83:67:82:de:db:8d:98:98:02:1d:07:4e:e9:54:f9:6a:4c:
a8:fe:93:24:1f:28:1a:63:d9:82:0b:4b:58:43:5a:8e:a5:92:
e1:58:4a:a4
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUD4NC5tgua4HItg4xye+Adcbd/SUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3
QzVBQzRBNTAeFw0yNjA1MDMwMzAyMzJaFw0yNzA1MDIwMzA3MzJaMDMxMTAvBgNV
BAMTKDJFMTVEQUMxNEQxQkU1MjkzNDUxOTU2NTdGMUIyMEYxQTg5RjU3QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFyNc7rAe5HEtm2iqQ/R8Q7kd
873pP78qrNBMnlJ/egByOpvOon2u/sMxPZY2wubu6PJSAu9zB7mZzk7KRlXLbDHb
ZZgkcrA8m/sG9BI4FMhU1SeX9HyU8blmOLXuDeg/RH8IkLLWTnbl0PfOD+ctMXXD
uMKa+kJd8VNUqvzA6W0xQEUrGl8v5QhXBD2iTslWIlMtg1x8KLpZFZAfT33GznUO
fi+6kehFua0O87XUDgIkel17um4nq2XmH5S9kaeLS9HHMkKLiGDaWbqF+rTwpkkb
xxqLbFwFQExwk6dvbr6/lE+lDKnsABbHhSBaCxXcoEub7oecuCHFJuGt0xLLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQULhXawU0b5Sk0UZVlfxsg8aifV60wHwYDVR0j
BBgwFoAUQTjgrUZG2LWxkWSBMQXi7HxaxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2RlNzE0MzctODVmYy00N2FmLTk2ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0
NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3QzVBQzRBNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MTM4RTBBRDQ2NDZEOEI1QjE5MTY0ODEzMTA1RTJFQzdDNUFD
NEE1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NkZTcxNDM3LTg1ZmMtNDdhZi05
Njg3LTkwM2JhZmIyYzE2MS8wLzMxMzAzMzJlMzIzMTM0MmUzMjMzMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzUzNDMzMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn1u8wDQYJ
KoZIhvcNAQELBQADggEBABYMp3Fs/UI43tOtBjs/QNSrinh7GgHjDqgIyTpAAZYp
8jXijfMR7njmJcowZvY4nBAAYU4gFo3PKOdAqUdWGqcEFWsr4zDnM958VniKM2ux
lqJMy5Zb2cSNgyJc6mY/bsmS229Hz0IGhvSEXRkT5XJo7fBajspVHOY4hzL6aorl
bgN/DZfHXMv45in95crkF2eNljm5i9oZTeR09eYzAB5AGd28FmnebXL+meLixw7d
jk5Tt2I50k8+S8qb3dS9mRTMw2+xWlQXZb8X/wm0cftEkz0s6QbDib+DZ4Le242Y
mAIdB07pVPlqTKj+kyQfKBpj2YILS1hDWo6lkuFYSqQ=
-----END CERTIFICATE-----
Generated at Wed May 13 02:59:32 2026 by rpki-client