
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa
File: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (raw, json)
Hash identifier: 0aDHxXMr4KUimzxt4JkDC404Ezku76mxRU40fEJqQUU=
Subject key identifier: D3:AF:62:C3:87:BD:F3:D9:BC:EF:72:5A:7E:27:94:51:D7:BB:EB:38
Certificate issuer: /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Certificate serial: 21628D01707DB979659D85518C88D9CCBEF1A029
Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa
Signing time: Sun 03 May 2026 03:09:09 +0000
ROA not before: Sun 03 May 2026 03:04:09 +0000
ROA not after: Sun 02 May 2027 03:09:09 +0000
asID: 136869
IP address blocks: 103.104.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:62:8d:01:70:7d:b9:79:65:9d:85:51:8c:88:d9:cc:be:f1:a0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Validity
Not Before: May 3 03:04:09 2026 GMT
Not After : May 2 03:09:09 2027 GMT
Subject: CN=D3AF62C387BDF3D9BCEF725A7E279451D7BBEB38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:08:bf:7b:32:2c:66:b5:bb:fb:e8:ac:b1:
7b:19:5d:33:5a:aa:02:e4:55:5f:9d:59:db:90:5e:
4b:55:27:d0:21:81:2d:f3:fc:35:df:8e:1e:7d:29:
fa:28:a2:82:73:69:7b:b5:4d:8c:61:43:5f:26:fd:
bf:2a:58:ac:e8:42:a1:4d:29:e2:61:18:4b:26:53:
cc:2d:ca:c6:09:31:77:ce:7a:27:e9:a3:b1:2a:3d:
24:3a:3f:e2:65:1f:84:2e:83:a2:71:9c:7d:4b:b7:
5c:58:08:53:83:65:d5:8a:3b:4d:42:7d:a4:39:f7:
60:c5:a0:a1:16:c3:44:6f:fe:e0:f7:00:4d:1c:23:
81:24:ab:d4:4d:0f:35:a0:27:75:80:0f:89:46:91:
cf:fb:30:fd:e1:f6:11:2c:c7:45:cb:ca:a5:6b:0d:
de:2c:dc:5f:5d:55:d9:46:9f:c3:12:d4:05:12:90:
e2:78:b8:92:a5:12:d6:42:f7:02:60:dd:95:c6:a9:
07:f6:1a:81:45:73:11:31:52:27:23:65:5f:f3:14:
23:5d:07:24:34:04:b6:e5:07:83:9d:eb:c6:09:97:
ed:08:1a:aa:f4:87:b7:e9:7f:ed:81:ab:41:0b:1d:
b7:fe:23:71:c4:38:18:ff:cb:4d:27:62:ea:82:52:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AF:62:C3:87:BD:F3:D9:BC:EF:72:5A:7E:27:94:51:D7:BB:EB:38
X509v3 Authority Key Identifier:
keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.104.204.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f9:65:48:4d:d0:81:c9:ba:26:2f:c3:5d:2c:5e:eb:b7:41:
c0:5f:8c:4b:63:8e:39:ed:07:0a:a5:97:05:15:73:1b:38:aa:
38:c0:c1:3d:ec:62:8b:ba:79:90:fd:8d:8e:0a:4c:9b:b6:33:
4f:35:25:c4:3e:52:1e:7c:8e:09:27:f1:db:92:01:eb:24:ee:
60:5b:ea:81:20:a3:db:86:c0:ec:10:97:6f:22:93:0f:30:f8:
75:6c:bc:c4:13:56:3c:c1:6a:e1:8c:17:9b:97:ee:cb:9b:ed:
c6:dc:89:b1:84:6e:ab:49:3d:3f:22:29:fe:19:39:74:5b:62:
2f:1b:ab:f3:91:51:68:2e:e4:ab:91:00:d8:a6:60:32:38:c8:
be:60:d4:84:59:f3:84:75:7c:04:c1:b4:d7:2e:ab:cc:5f:b9:
09:c1:fc:8d:00:11:ef:da:37:f2:4f:69:c8:ce:fb:e6:c7:ff:
9b:d1:cf:88:20:38:f0:90:61:55:26:a6:df:62:83:e1:03:5d:
63:51:dd:0e:3d:60:92:c7:38:3b:22:49:8c:88:d4:24:eb:0f:
bf:f2:a2:14:68:fc:5c:b6:4b:63:bd:81:d7:7b:2e:41:d3:90:
95:94:11:52:28:a5:57:6c:5e:22:1f:55:aa:a0:70:19:27:e7:
9b:4c:7e:bf
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUIWKNAXB9uXllnYVRjIjZzL7xoCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYyNkNDMjU5NzJCRjk5NDhDNkIzQkRFNEUzNTRDNzFG
MjU3MDg4MDAeFw0yNjA1MDMwMzA0MDlaFw0yNzA1MDIwMzA5MDlaMDMxMTAvBgNV
BAMTKEQzQUY2MkMzODdCREYzRDlCQ0VGNzI1QTdFMjc5NDUxRDdCQkVCMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoGwi/ezIsZrW7++issXsZXTNa
qgLkVV+dWduQXktVJ9AhgS3z/DXfjh59KfooooJzaXu1TYxhQ18m/b8qWKzoQqFN
KeJhGEsmU8wtysYJMXfOeifpo7EqPSQ6P+JlH4Qug6JxnH1Lt1xYCFODZdWKO01C
faQ592DFoKEWw0Rv/uD3AE0cI4Ekq9RNDzWgJ3WAD4lGkc/7MP3h9hEsx0XLyqVr
Dd4s3F9dVdlGn8MS1AUSkOJ4uJKlEtZC9wJg3ZXGqQf2GoFFcxExUicjZV/zFCNd
ByQ0BLblB4Od68YJl+0IGqr0h7fpf+2Bq0ELHbf+I3HEOBj/y00nYuqCUhvnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU069iw4e989m873JafieUUde76zgwHwYDVR0j
BBgwFoAU1ibMJZcr+ZSMazveTjVMcfJXCIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDIzMWU2YjEtMTg0MS00NzZkLWI0NmItYjQ0YjljYjk2OGIwLzAvRDYyNkNDMjU5
NzJCRjk5NDhDNkIzQkRFNEUzNTRDNzFGMjU3MDg4MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENjI2Q0MyNTk3MkJGOTk0OEM2QjNCREU0RTM1NEM3MUYyNTcw
ODgwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QyMzFlNmIxLTE4NDEtNDc2ZC1i
NDZiLWI0NGI5Y2I5NjhiMC8wLzMxMzAzMzJlMzEzMDM0MmUzMjMwMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnaMwwDQYJ
KoZIhvcNAQELBQADggEBADD5ZUhN0IHJuiYvw10sXuu3QcBfjEtjjjntBwqllwUV
cxs4qjjAwT3sYou6eZD9jY4KTJu2M081JcQ+Uh58jgkn8duSAesk7mBb6oEgo9uG
wOwQl28ikw8w+HVsvMQTVjzBauGMF5uX7sub7cbcibGEbqtJPT8iKf4ZOXRbYi8b
q/ORUWgu5KuRANimYDI4yL5g1IRZ84R1fATBtNcuq8xfuQnB/I0AEe/aN/JPacjO
++bH/5vRz4ggOPCQYVUmpt9ig+EDXWNR3Q49YJLHODsiSYyI1CTrD7/yohRo/Fy2
S2O9gdd7LkHTkJWUEVIopVdsXiIfVaqgcBkn55tMfr8=
-----END CERTIFICATE-----
Generated at Wed May 13 04:47:33 2026 by rpki-client