
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa
File: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier: 8OYioJHXFDxSOXWT6kL63xMJJjG7Wo+wmLm6z+bx6x0=
Subject key identifier: E4:7E:11:B2:5A:EE:D6:1B:2D:BF:E8:03:03:A2:24:2E:4C:F0:E6:E2
Certificate issuer: /CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D
Certificate serial: 7B2B662221F735A4F5FEC8FF761FF263A5B7AD5A
Authority key identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa
Signing time: Sun 03 May 2026 03:08:04 +0000
ROA not before: Sun 03 May 2026 03:03:04 +0000
ROA not after: Sun 02 May 2027 03:08:04 +0000
asID: 138131
IP address blocks: 103.115.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl
rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2b:66:22:21:f7:35:a4:f5:fe:c8:ff:76:1f:f2:63:a5:b7:ad:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D
Validity
Not Before: May 3 03:03:04 2026 GMT
Not After : May 2 03:08:04 2027 GMT
Subject: CN=E47E11B25AEED61B2DBFE80303A2242E4CF0E6E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:6c:8e:cd:6b:95:80:80:2b:8c:61:a5:a0:
21:57:8b:ef:e7:c8:3b:16:5c:7a:b9:fa:a1:0a:46:
ed:24:50:a1:74:99:e1:74:5e:11:36:40:bf:b3:f8:
26:67:30:6d:fe:a8:bb:e8:7a:0c:e1:f8:4c:78:4f:
27:80:d0:75:72:1f:f8:2b:9d:d5:b2:bd:18:97:3a:
53:c9:06:97:de:8d:ef:60:e5:32:d7:80:b9:68:78:
fd:24:ab:b2:d7:b0:d4:c8:81:ff:31:bb:fe:52:49:
a2:a9:1d:4c:18:59:f7:02:3b:07:5c:a7:5e:78:78:
97:95:dc:26:d7:98:3a:85:68:5c:9c:4e:1f:ca:d7:
2d:ee:a8:52:9f:ee:79:e9:26:9f:77:70:59:42:14:
4b:c6:bf:72:74:db:64:31:6b:46:4e:da:41:9b:60:
26:8a:4b:72:ec:83:a4:28:5f:bc:32:32:41:ee:97:
20:de:c3:cb:d7:f2:59:63:ac:09:0f:f1:c3:be:a9:
a2:4e:f2:7e:e7:7d:57:98:b0:1b:53:48:d5:1d:f0:
7f:35:14:01:93:e9:ce:0b:b4:4a:4a:1f:b1:eb:ed:
d1:e2:6e:fa:bf:b2:32:1f:7f:55:ed:0a:46:9f:c8:
78:8c:25:f9:bd:b2:26:64:f3:f0:79:ba:c4:2e:df:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7E:11:B2:5A:EE:D6:1B:2D:BF:E8:03:03:A2:24:2E:4C:F0:E6:E2
X509v3 Authority Key Identifier:
keyid:C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.115.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e4:ef:56:a4:8c:31:59:5e:1f:23:c3:87:bb:4c:e2:31:71:
99:aa:d2:4f:fa:44:bc:dc:9d:bc:d8:5c:74:23:b0:6e:85:8d:
a5:65:34:dc:d6:15:52:84:a0:65:70:c0:a6:20:91:92:2f:72:
03:f5:c4:6f:e7:68:f7:ec:52:e1:e8:a2:11:b5:7b:7c:0e:62:
14:80:49:8f:01:9b:2a:13:cc:b7:f6:6e:38:b5:b9:3e:55:96:
da:41:c3:ce:89:cb:e4:62:62:4a:ea:aa:ef:29:13:51:57:db:
e6:d5:07:56:23:5d:10:18:81:fc:9d:aa:15:a8:df:90:d8:2a:
89:9f:37:4e:fd:35:be:b8:be:4d:75:3d:14:b9:70:44:09:cf:
54:b6:df:f7:7e:86:7f:57:b0:5c:22:68:f2:b4:8f:cc:cb:79:
4d:1a:76:d6:94:fe:b0:f1:75:33:6d:38:5a:62:81:d3:9d:95:
1d:63:17:e0:21:d0:38:4a:53:98:be:04:fe:ca:7a:e5:17:f5:
05:e8:d6:f8:d7:7a:c9:13:3e:b2:59:ad:bb:4e:9c:00:19:fa:
3a:58:6c:82:53:45:31:78:1c:d0:5c:5f:50:bc:fb:29:d4:3e:
3e:74:67:2a:d4:a3:3b:f2:47:4f:7b:63:c0:a8:9a:55:8a:85:
3b:b0:82:43
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUeytmIiH3NaT1/sj/dh/yY6W3rVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFG
QjZCQkExRDAeFw0yNjA1MDMwMzAzMDRaFw0yNzA1MDIwMzA4MDRaMDMxMTAvBgNV
BAMTKEU0N0UxMUIyNUFFRUQ2MUIyREJGRTgwMzAzQTIyNDJFNENGMEU2RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUt2yOzWuVgIArjGGloCFXi+/n
yDsWXHq5+qEKRu0kUKF0meF0XhE2QL+z+CZnMG3+qLvoegzh+Ex4TyeA0HVyH/gr
ndWyvRiXOlPJBpfeje9g5TLXgLloeP0kq7LXsNTIgf8xu/5SSaKpHUwYWfcCOwdc
p154eJeV3CbXmDqFaFycTh/K1y3uqFKf7nnpJp93cFlCFEvGv3J022Qxa0ZO2kGb
YCaKS3Lsg6QoX7wyMkHulyDew8vX8lljrAkP8cO+qaJO8n7nfVeYsBtTSNUd8H81
FAGT6c4LtEpKH7Hr7dHibvq/sjIff1XtCkafyHiMJfm9siZk8/B5usQu37J3AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU5H4Rslru1hstv+gDA6IkLkzw5uIwHwYDVR0j
BBgwFoAUyVDcNSjhdJxyHUOYUj2huvtruh0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUy
OEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFGQjZCQkExRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DOTUwREMzNTI4RTE3NDlDNzIxRDQzOTg1MjNEQTFCQUZCNkJC
QTFELmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QwNjM0N2Y0LWVhMjYtNGQ0Yy1h
NTY4LTFkODYzMzYwZTQyMS8wLzMxMzAzMzJlMzEzMTM1MmUzMTM2MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMzMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnc6QwDQYJ
KoZIhvcNAQELBQADggEBACrk71akjDFZXh8jw4e7TOIxcZmq0k/6RLzcnbzYXHQj
sG6FjaVlNNzWFVKEoGVwwKYgkZIvcgP1xG/naPfsUuHoohG1e3wOYhSASY8BmyoT
zLf2bji1uT5VltpBw86Jy+RiYkrqqu8pE1FX2+bVB1YjXRAYgfydqhWo35DYKomf
N079Nb64vk11PRS5cEQJz1S23/d+hn9XsFwiaPK0j8zLeU0adtaU/rDxdTNtOFpi
gdOdlR1jF+Ah0DhKU5i+BP7KeuUX9QXo1vjXeskTPrJZrbtOnAAZ+jpYbIJTRTF4
HNBcX1C8+ynUPj50ZyrUozvyR097Y8ComlWKhTuwgkM=
-----END CERTIFICATE-----
Generated at Wed May 13 05:58:16 2026 by rpki-client