
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa
File: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (raw, json)
Hash identifier: aoz9FF3zaBxJcTS/CNaTKvg2hS72RZ/WIHtE0qTjGI0=
Subject key identifier: 27:1C:27:C4:D1:C0:7B:96:A6:D2:79:EF:A8:6B:88:C6:3C:6A:8F:68
Certificate issuer: /CN=A1E11F793F01828AF09B99BCD923D78E53C244F8
Certificate serial: 2E3F1BA21DFFC71CDBD27E96A6BE8C018C298AFD
Authority key identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa
Signing time: Sun 03 May 2026 03:07:42 +0000
ROA not before: Sun 03 May 2026 03:02:42 +0000
ROA not after: Sun 02 May 2027 03:07:42 +0000
asID: 142387
IP address blocks: 103.172.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl
rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:3f:1b:a2:1d:ff:c7:1c:db:d2:7e:96:a6:be:8c:01:8c:29:8a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1E11F793F01828AF09B99BCD923D78E53C244F8
Validity
Not Before: May 3 03:02:42 2026 GMT
Not After : May 2 03:07:42 2027 GMT
Subject: CN=271C27C4D1C07B96A6D279EFA86B88C63C6A8F68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:f4:bd:f9:bd:61:f3:0c:e9:89:5e:ab:8c:
50:92:66:8d:11:5c:5a:8f:5a:2d:4d:c9:77:87:44:
bc:ad:68:32:d9:1b:f5:9a:8a:23:c5:db:0e:0b:19:
14:2f:73:18:04:f3:c8:46:e6:2f:cb:f2:d8:dc:81:
0c:ca:93:dc:29:38:d3:be:8d:b3:c5:b8:d8:f6:a0:
92:0f:2a:7f:d6:e1:e8:ad:0d:67:00:8b:44:71:76:
ee:b7:66:64:fb:87:2a:e6:4c:94:78:a1:22:51:cf:
5f:69:d5:d5:3c:18:15:ab:68:4c:94:1e:e4:ac:8c:
c0:a7:86:d7:68:d7:4d:3a:5e:df:64:91:8e:75:8c:
80:7e:40:51:bd:48:81:c4:30:46:4c:82:7f:fe:a0:
8b:3a:0b:6f:0e:20:5f:84:60:87:4e:c6:b7:d8:55:
ac:1e:8f:65:75:d7:5a:7a:1e:b9:68:2d:5b:ef:b5:
47:b0:6d:2d:0a:76:b8:44:a5:2e:fa:78:f4:80:61:
fa:0c:61:b3:f4:be:f3:61:15:57:2d:09:14:eb:a0:
7a:ee:d3:84:ea:34:d9:7b:67:76:02:86:d9:57:b4:
a7:31:b5:4b:df:26:8d:3d:8b:00:02:f9:2e:32:77:
3e:3f:16:f2:eb:e3:c3:12:aa:8f:68:a3:4d:9b:03:
b1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1C:27:C4:D1:C0:7B:96:A6:D2:79:EF:A8:6B:88:C6:3C:6A:8F:68
X509v3 Authority Key Identifier:
keyid:A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.24.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8e:81:2b:ee:1c:7e:b5:be:c3:ac:e0:42:cd:ce:c1:7b:b0:
3a:e0:ff:5b:66:6c:62:b0:f2:db:2a:58:65:44:fb:fc:15:a8:
c4:72:d0:75:5a:42:e9:80:ed:b6:57:01:db:c0:c8:b9:13:78:
f4:ca:0f:8f:7a:87:47:be:87:a0:48:9e:fe:14:a4:90:ff:01:
92:c7:c1:27:7f:71:4a:a6:03:3c:c8:3c:99:67:62:7e:18:9d:
a4:44:5e:8b:12:6e:cc:25:fc:a6:a1:45:71:7a:0b:8c:1b:49:
9d:41:23:90:5b:d7:df:eb:ea:2e:90:bd:43:76:dd:dc:07:a1:
46:6e:1a:df:5c:33:21:f7:ff:9a:12:08:83:0d:a2:5f:49:cc:
a7:44:f1:14:51:03:d0:95:0e:de:9e:5b:80:a0:55:b7:84:a8:
79:be:06:1d:cd:21:7e:fd:61:4a:b4:d9:df:bf:d8:5f:60:24:
31:9e:ef:34:dd:4e:e1:87:7e:a6:ca:82:64:6a:20:c8:0e:29:
f1:88:f0:ec:2a:3b:e9:67:35:a3:60:aa:2a:3e:d6:9a:1f:39:
03:06:b5:06:49:9f:3f:92:c2:88:aa:bd:95:6c:54:28:f7:cb:
b9:c3:06:79:58:2d:06:26:3c:e1:dd:68:7b:6a:c8:93:db:61:
dd:cc:61:4d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULj8boh3/xxzb0n6Wpr6MAYwpiv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFFMTFGNzkzRjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1
M0MyNDRGODAeFw0yNjA1MDMwMzAyNDJaFw0yNzA1MDIwMzA3NDJaMDMxMTAvBgNV
BAMTKDI3MUMyN0M0RDFDMDdCOTZBNkQyNzlFRkE4NkI4OEM2M0M2QThGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNivS9+b1h8wzpiV6rjFCSZo0R
XFqPWi1NyXeHRLytaDLZG/WaiiPF2w4LGRQvcxgE88hG5i/L8tjcgQzKk9wpONO+
jbPFuNj2oJIPKn/W4eitDWcAi0Rxdu63ZmT7hyrmTJR4oSJRz19p1dU8GBWraEyU
HuSsjMCnhtdo1006Xt9kkY51jIB+QFG9SIHEMEZMgn/+oIs6C28OIF+EYIdOxrfY
Vawej2V111p6HrloLVvvtUewbS0KdrhEpS76ePSAYfoMYbP0vvNhFVctCRTroHru
04TqNNl7Z3YChtlXtKcxtUvfJo09iwAC+S4ydz4/FvLr48MSqo9oo02bA7FjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUJxwnxNHAe5am0nnvqGuIxjxqj2gwHwYDVR0j
BBgwFoAUoeEfeT8Bgorwm5m82SPXjlPCRPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2YwYmExZTctZDE0Mi00N2NkLThkOGYtMmEzNzJiOTIyMjIzLzAvQTFFMTFGNzkz
RjAxODI4QUYwOUI5OUJDRDkyM0Q3OEU1M0MyNDRGOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMUUxMUY3OTNGMDE4MjhBRjA5Qjk5QkNEOTIzRDc4RTUzQzI0
NEY4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NmMGJhMWU3LWQxNDItNDdjZC04
ZDhmLTJhMzcyYjkyMjIyMy8wLzMxMzAzMzJlMzEzNzMyMmUzMjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6wYMA0GCSqG
SIb3DQEBCwUAA4IBAQCIjoEr7hx+tb7DrOBCzc7Be7A64P9bZmxisPLbKlhlRPv8
FajEctB1WkLpgO22VwHbwMi5E3j0yg+PeodHvoegSJ7+FKSQ/wGSx8Enf3FKpgM8
yDyZZ2J+GJ2kRF6LEm7MJfymoUVxeguMG0mdQSOQW9ff6+oukL1Ddt3cB6FGbhrf
XDMh9/+aEgiDDaJfScynRPEUUQPQlQ7enluAoFW3hKh5vgYdzSF+/WFKtNnfv9hf
YCQxnu803U7hh36myoJkaiDIDinxiPDsKjvpZzWjYKoqPtaaHzkDBrUGSZ8/ksKI
qr2VbFQo98u5wwZ5WC0GJjzh3Wh7asiT22HdzGFN
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:09 2026 by rpki-client