
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa
File: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (raw, json)
Hash identifier: m4byyQ/Ci01kF9bhXe9ckh1HOnnhsJwIBUWhcPZT6ow=
Subject key identifier: C5:B4:69:2C:C4:AD:E5:0B:14:4C:39:5F:C7:64:67:03:A6:9C:70:18
Certificate issuer: /CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA
Certificate serial: 243576CA00C4175BF55FBA1FB9D2EA210282C905
Authority key identifier: 3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa
Signing time: Sun 03 May 2026 03:09:13 +0000
ROA not before: Sun 03 May 2026 03:04:13 +0000
ROA not after: Sun 02 May 2027 03:09:13 +0000
asID: 149975
IP address blocks: 103.35.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl
rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:35:76:ca:00:c4:17:5b:f5:5f:ba:1f:b9:d2:ea:21:02:82:c9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA
Validity
Not Before: May 3 03:04:13 2026 GMT
Not After : May 2 03:09:13 2027 GMT
Subject: CN=C5B4692CC4ADE50B144C395FC7646703A69C7018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:f8:17:cf:ed:cc:0c:40:f3:38:ba:a3:06:
13:11:3f:69:66:bf:d6:8c:70:dd:0c:a2:30:88:88:
e9:80:9f:a1:fd:20:73:b1:88:72:56:f5:02:b3:a2:
4a:da:56:39:76:b1:d0:35:70:45:a7:e0:40:3a:f5:
63:60:7d:7c:07:24:67:01:f4:c6:7f:d8:5a:c6:75:
e0:71:b9:69:4c:20:0d:6d:3f:f0:fe:96:8c:fb:a1:
d7:12:79:2d:2a:dc:72:6e:6b:ac:7d:a5:62:d4:b9:
fb:51:c0:ad:54:62:cb:b0:7c:f3:f4:e3:ea:53:11:
cd:81:95:39:52:95:e6:88:24:a2:ed:7b:1c:03:12:
59:aa:0c:fe:b5:26:3d:f2:1f:d7:68:d0:c4:2e:6f:
58:a2:51:0d:4f:f1:b7:18:26:8d:4a:6d:0e:ea:2a:
5d:0f:ae:5d:53:f4:6e:65:f3:b9:a1:0a:c0:d4:f9:
bc:13:7e:4a:b3:bb:a0:6f:af:08:04:96:fa:af:4f:
63:e3:d7:9d:be:78:4b:39:b9:98:de:2c:9a:fb:2d:
b8:b6:e2:3a:5e:1c:ee:4a:b2:9f:21:32:99:8e:fc:
a5:e3:63:a4:ed:3a:8c:36:bb:1a:97:51:22:c6:1e:
4a:77:d7:d8:5a:ed:dc:5b:b9:c9:8d:b2:67:2f:04:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B4:69:2C:C4:AD:E5:0B:14:4C:39:5F:C7:64:67:03:A6:9C:70:18
X509v3 Authority Key Identifier:
keyid:3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.35.219.0/24
Signature Algorithm: sha256WithRSAEncryption
94:7d:f7:35:51:8d:fd:f5:83:39:19:b5:8b:79:b7:a8:72:db:
15:a5:e4:33:d3:dd:db:9b:ea:0b:4a:d6:aa:eb:92:e1:09:7b:
44:ee:db:37:5e:22:c5:82:cc:8a:2a:9d:93:62:de:c3:46:d7:
a4:27:51:c4:6f:0b:ab:9c:8b:23:4d:fc:bb:02:06:94:db:71:
6a:09:f0:8b:66:fc:e2:a6:68:30:e9:f6:a4:53:c3:e0:55:05:
9a:fd:14:c3:58:2b:e6:0c:72:63:29:16:b3:a6:1a:b1:62:1a:
fe:f2:6d:52:5b:63:25:11:ef:b0:77:8e:05:57:a5:c7:99:a6:
40:56:83:4d:9a:e8:5b:e1:6f:74:32:81:f8:3f:04:d7:92:a6:
a1:70:bc:0a:75:48:bb:f9:4b:d8:cc:83:c7:e0:b2:1a:d0:86:
9e:d6:6f:f6:0d:c0:cf:26:89:1d:6f:c0:9d:0e:9f:33:cf:dd:
36:f7:3d:c1:77:c6:72:44:d1:c0:ac:0b:db:6b:b0:a9:a1:3f:
46:fe:53:33:e8:42:37:a0:20:17:6d:25:6b:b6:90:ef:2d:04:
86:3b:bc:60:64:50:8b:6a:b7:4e:c9:90:fa:42:ff:92:94:71:
84:20:e7:49:00:d0:f2:cc:ad:3e:88:dd:38:c0:d4:82:07:4c:
3b:e5:04:ec
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJDV2ygDEF1v1X7ofudLqIQKCyQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENGRTNC
NjY3NzNCQTAeFw0yNjA1MDMwMzA0MTNaFw0yNzA1MDIwMzA5MTNaMDMxMTAvBgNV
BAMTKEM1QjQ2OTJDQzRBREU1MEIxNDRDMzk1RkM3NjQ2NzAzQTY5QzcwMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1/gXz+3MDEDzOLqjBhMRP2lm
v9aMcN0MojCIiOmAn6H9IHOxiHJW9QKzokraVjl2sdA1cEWn4EA69WNgfXwHJGcB
9MZ/2FrGdeBxuWlMIA1tP/D+loz7odcSeS0q3HJua6x9pWLUuftRwK1UYsuwfPP0
4+pTEc2BlTlSleaIJKLtexwDElmqDP61Jj3yH9do0MQub1iiUQ1P8bcYJo1KbQ7q
Kl0Prl1T9G5l87mhCsDU+bwTfkqzu6BvrwgElvqvT2Pj152+eEs5uZjeLJr7Lbi2
4jpeHO5Ksp8hMpmO/KXjY6TtOow2uxqXUSLGHkp319ha7dxbucmNsmcvBJ8PAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUxbRpLMSt5QsUTDlfx2RnA6accBgwHwYDVR0j
BBgwFoAUPXSrwv0CFW6/iG3eIr3P47Znc7owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDJkNDJhMjktYmQ0OC00ZWY3LWFmNDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJG
RDAyMTU2RUJGODg2RERFMjJCRENGRTNCNjY3NzNCQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zRDc0QUJDMkZEMDIxNTZFQkY4ODZEREUyMkJEQ0ZFM0I2Njc3
M0JBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QyZDQyYTI5LWJkNDgtNGVmNy1h
ZjQ4LTBhYTBkMzVkYjM3Yi8wLzMxMzAzMzJlMzMzNTJlMzIzMTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyPbMA0GCSqG
SIb3DQEBCwUAA4IBAQCUffc1UY399YM5GbWLebeoctsVpeQz093bm+oLStaq65Lh
CXtE7ts3XiLFgsyKKp2TYt7DRtekJ1HEbwurnIsjTfy7AgaU23FqCfCLZvzipmgw
6fakU8PgVQWa/RTDWCvmDHJjKRazphqxYhr+8m1SW2MlEe+wd44FV6XHmaZAVoNN
muhb4W90MoH4PwTXkqahcLwKdUi7+UvYzIPH4LIa0Iae1m/2DcDPJokdb8CdDp8z
z9029z3Bd8ZyRNHArAvba7CpoT9G/lMz6EI3oCAXbSVrtpDvLQSGO7xgZFCLardO
yZD6Qv+SlHGEIOdJANDyzK0+iN04wNSCB0w75QTs
-----END CERTIFICATE-----
Generated at Wed May 13 01:35:13 2026 by rpki-client