
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/3130332e34392e3233312e302f32342d3234203d3e203633383638.roa
File: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (raw, json)
Hash identifier: Y2m4R38G71C4Yy/wcE7dbb3Q4JyEjJy1AWb7+OggzPM=
Subject key identifier: 3F:5B:12:6B:07:4B:E7:39:8E:F6:A7:1B:4B:D4:23:AE:0F:D7:49:79
Certificate issuer: /CN=EB314E0C129A5CAF077447531422664A0DBA21EB
Certificate serial: 19165A3B4B20668AE72EF5B59B17D8980580F6F1
Authority key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/3130332e34392e3233312e302f32342d3234203d3e203633383638.roa
Signing time: Sun 03 May 2026 03:09:20 +0000
ROA not before: Sun 03 May 2026 03:04:20 +0000
ROA not after: Sun 02 May 2027 03:09:20 +0000
asID: 63868
IP address blocks: 103.49.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl
rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:16:5a:3b:4b:20:66:8a:e7:2e:f5:b5:9b:17:d8:98:05:80:f6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB314E0C129A5CAF077447531422664A0DBA21EB
Validity
Not Before: May 3 03:04:20 2026 GMT
Not After : May 2 03:09:20 2027 GMT
Subject: CN=3F5B126B074BE7398EF6A71B4BD423AE0FD74979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:1d:16:f4:4d:38:38:7e:ad:aa:1a:39:48:
46:2f:72:6b:ca:b7:50:dc:8c:ce:16:39:60:9c:64:
c6:ce:6f:b3:e8:eb:26:bf:1e:98:e9:2d:3a:9f:22:
b1:80:e7:c9:de:e1:7c:ae:e3:a1:72:e2:df:aa:c7:
3b:42:91:21:47:a9:91:aa:be:a2:fe:98:fa:a0:dc:
e0:e8:04:0a:37:83:c8:1e:51:2d:eb:d8:73:10:50:
cc:f9:6b:ea:8d:84:00:b5:53:90:63:a1:c9:8a:31:
46:4a:36:c2:86:6b:c2:79:65:9c:96:9a:1d:1a:e1:
98:06:92:28:93:cf:47:9a:43:23:03:c6:3d:31:f6:
e8:2e:20:ff:ed:e4:7b:46:39:fa:af:84:02:48:be:
8a:9c:4b:8d:c6:b1:ba:0b:cb:73:8d:a3:14:5c:cd:
42:ad:48:6b:33:f2:d6:4e:aa:27:ad:5c:d0:1c:86:
f6:2a:b2:f7:e1:7b:00:22:51:e8:ea:5f:c4:bc:e8:
fb:d3:a4:e6:28:12:99:e6:20:49:61:d1:e2:ec:34:
2a:fb:1e:0e:34:a0:36:96:8f:2f:ba:91:9e:3e:0a:
60:e1:b0:1b:ff:1a:b6:91:36:4d:ff:e8:2f:65:3e:
0d:61:07:60:4e:08:82:06:03:c7:ba:ea:86:3a:d7:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5B:12:6B:07:4B:E7:39:8E:F6:A7:1B:4B:D4:23:AE:0F:D7:49:79
X509v3 Authority Key Identifier:
keyid:EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/3130332e34392e3233312e302f32342d3234203d3e203633383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.231.0/24
Signature Algorithm: sha256WithRSAEncryption
25:82:eb:e0:68:04:8f:ff:b8:92:14:23:0b:95:c6:06:2e:fd:
d4:6b:dc:2d:0d:7d:53:0c:76:f7:48:62:d8:f1:3a:55:89:ed:
99:60:31:35:a7:f6:ac:61:8d:f8:6d:f2:2c:b1:8f:aa:22:30:
46:ff:b5:f9:8b:ac:8f:f1:06:ae:38:83:ae:53:09:38:33:b0:
14:a5:74:5e:cb:ed:2b:43:20:89:cd:cd:86:3d:f9:d7:94:de:
8b:50:d7:e4:22:d1:0f:9c:34:ee:82:de:21:2a:69:1b:27:d3:
db:33:83:78:97:91:c9:0c:fa:df:fd:b9:1f:47:c2:14:94:36:
49:c3:c6:76:59:17:25:5d:51:b8:e0:83:0e:d5:af:7e:4c:cf:
13:87:43:8a:10:f4:8f:fb:a2:07:94:47:ae:60:64:d7:a4:8c:
a9:ab:d5:9f:5d:ed:8f:91:b2:0c:44:0f:01:3c:8e:5b:74:87:
6b:56:a7:de:78:aa:77:15:58:d9:4b:24:49:83:37:26:9d:9f:
b0:b1:0f:86:66:69:8e:a6:27:9f:3d:d4:78:ee:9b:b4:76:cf:
82:1e:f5:14:d3:df:6b:a6:4f:eb:43:8f:aa:58:79:1f:b1:86:
e1:5d:48:d4:79:c7:77:07:8e:1a:63:bb:a1:e6:30:3a:65:fd:
9e:45:5c:bf
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGRZaO0sgZornLvW1mxfYmAWA9vEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEw
REJBMjFFQjAeFw0yNjA1MDMwMzA0MjBaFw0yNzA1MDIwMzA5MjBaMDMxMTAvBgNV
BAMTKDNGNUIxMjZCMDc0QkU3Mzk4RUY2QTcxQjRCRDQyM0FFMEZENzQ5NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIex0W9E04OH6tqho5SEYvcmvK
t1DcjM4WOWCcZMbOb7Po6ya/HpjpLTqfIrGA58ne4Xyu46Fy4t+qxztCkSFHqZGq
vqL+mPqg3ODoBAo3g8geUS3r2HMQUMz5a+qNhAC1U5BjocmKMUZKNsKGa8J5ZZyW
mh0a4ZgGkiiTz0eaQyMDxj0x9uguIP/t5HtGOfqvhAJIvoqcS43GsboLy3ONoxRc
zUKtSGsz8tZOqietXNAchvYqsvfhewAiUejqX8S86PvTpOYoEpnmIElh0eLsNCr7
Hg40oDaWjy+6kZ4+CmDhsBv/GraRNk3/6C9lPg1hB2BOCIIGA8e66oY612+ZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUP1sSawdL5zmO9qcbS9Qjrg/XSXkwHwYDVR0j
BBgwFoAU6zFODBKaXK8HdEdTFCJmSg26IeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDM3MTkyOWQtYzNkMC00ZGFhLWI1ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMx
MjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEwREJBMjFFQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQjMxNEUwQzEyOUE1Q0FGMDc3NDQ3NTMxNDIyNjY0QTBEQkEy
MUVCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QzNzE5MjlkLWMzZDAtNGRhYS1i
NWZkLWEyNDk1NjBkNWQwNC8wLzMxMzAzMzJlMzQzOTJlMzIzMzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzYzMzM4MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcx5zANBgkqhkiG
9w0BAQsFAAOCAQEAJYLr4GgEj/+4khQjC5XGBi791GvcLQ19Uwx290hi2PE6VYnt
mWAxNaf2rGGN+G3yLLGPqiIwRv+1+Yusj/EGrjiDrlMJODOwFKV0XsvtK0Mgic3N
hj3515Tei1DX5CLRD5w07oLeISppGyfT2zODeJeRyQz63/25H0fCFJQ2ScPGdlkX
JV1RuOCDDtWvfkzPE4dDihD0j/uiB5RHrmBk16SMqavVn13tj5GyDEQPATyOW3SH
a1an3niqdxVY2UskSYM3Jp2fsLEPhmZpjqYnnz3UeO6btHbPgh71FNPfa6ZP60OP
qlh5H7GG4V1I1HnHdweOGmO7oeYwOmX9nkVcvw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:27 2026 by rpki-client