
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230362e302f32342d3234203d3e203538343737.roa
File: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=
Subject key identifier: 78:E3:5A:A7:39:A7:E6:F7:58:CE:2B:F9:72:1C:D6:0C:F8:FD:91:91
Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F
Certificate serial: 0DC1E3F69D67F05B652F925A951644B253D526BD
Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230362e302f32342d3234203d3e203538343737.roa
Signing time: Sun 03 May 2026 03:09:30 +0000
ROA not before: Sun 03 May 2026 03:04:30 +0000
ROA not after: Sun 02 May 2027 03:09:30 +0000
asID: 58477
IP address blocks: 103.56.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl
rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:c1:e3:f6:9d:67:f0:5b:65:2f:92:5a:95:16:44:b2:53:d5:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F
Validity
Not Before: May 3 03:04:30 2026 GMT
Not After : May 2 03:09:30 2027 GMT
Subject: CN=78E35AA739A7E6F758CE2BF9721CD60CF8FD9191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:c5:18:9d:b6:14:a2:1c:e0:7e:0b:af:7a:
db:f7:ea:2e:88:04:1a:e1:41:33:d7:ec:b5:92:8f:
80:17:e9:b9:d4:58:69:87:43:f4:48:0a:97:50:ed:
d5:86:56:e0:e2:39:95:9c:d5:b8:0c:f2:2c:66:91:
57:dd:51:dd:4a:cc:12:88:b6:c7:ba:d3:4f:94:dd:
e0:be:0d:c1:ab:23:8e:f3:8b:48:7a:5e:ef:3e:ba:
40:51:75:8e:1c:ae:7a:a4:1b:d7:84:5c:06:07:73:
f7:8f:b4:0d:38:c7:ff:18:59:fc:30:c5:d9:0e:5b:
fd:b3:b1:62:2f:b2:9a:ae:23:76:79:38:41:f9:ed:
51:1d:dc:0c:5b:86:b6:af:df:b8:54:f3:32:ae:b9:
c9:23:d6:dc:1b:d4:ac:82:6d:16:d5:ed:ee:13:66:
21:4d:97:4e:d7:8b:e1:94:de:d1:41:ad:f8:57:3e:
90:a3:03:ef:22:ef:0c:22:9d:f5:6f:16:68:1b:55:
f2:13:9e:5a:95:06:ee:4d:12:4c:a5:7c:23:d7:7e:
37:48:7b:b1:c5:40:6d:17:e9:a5:a7:cd:a4:e3:32:
6c:34:72:08:6a:04:56:cd:d4:90:61:45:2e:97:77:
39:ed:31:c8:35:b3:f3:58:2c:f0:c0:e7:72:a0:11:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E3:5A:A7:39:A7:E6:F7:58:CE:2B:F9:72:1C:D6:0C:F8:FD:91:91
X509v3 Authority Key Identifier:
keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230362e302f32342d3234203d3e203538343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.206.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c6:3a:fe:7b:25:9c:6b:62:8c:bc:bb:41:9d:d8:81:b1:f7:
da:d7:cc:5f:73:68:da:e5:5b:6e:97:ef:94:66:f6:15:a0:4e:
9d:32:d0:21:04:f9:d5:e5:ef:74:5b:06:e4:3d:0a:1b:4e:91:
3b:c5:4d:21:e7:dd:20:55:79:15:22:68:1d:a8:9c:14:b0:96:
cd:f8:f6:32:d4:fe:49:a2:19:bc:a3:67:ba:6f:ed:f9:f1:27:
ed:49:dc:d0:46:b3:4a:a7:60:9c:3d:44:86:ca:93:5d:70:e8:
04:e2:f4:22:af:f6:27:6d:a1:04:93:95:ac:3e:44:b5:cb:84:
95:14:89:b5:39:ce:68:a2:57:70:d3:d3:9f:2b:a6:8a:ad:98:
42:7d:4c:d4:c3:b6:0b:b5:89:07:88:9f:3b:ee:90:8f:0e:c4:
2b:d7:26:55:21:08:cf:57:eb:b6:63:61:21:b7:3a:95:7f:09:
1f:35:f3:9c:11:49:eb:dd:2c:04:cd:7d:fd:f4:72:5c:28:44:
49:62:67:64:76:be:56:c5:d1:71:d0:d2:15:97:25:14:dd:91:
3c:ae:31:f8:99:16:a2:f3:82:bf:cb:27:2c:0c:19:0e:d8:52:
5a:c4:3e:ad:96:41:77:ca:1e:7d:b5:ba:ef:76:80:53:5d:b5:
21:4f:2c:fc
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDcHj9p1n8FtlL5JalRZEslPVJr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0
RThDRUM4RjAeFw0yNjA1MDMwMzA0MzBaFw0yNzA1MDIwMzA5MzBaMDMxMTAvBgNV
BAMTKDc4RTM1QUE3MzlBN0U2Rjc1OENFMkJGOTcyMUNENjBDRjhGRDkxOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvscUYnbYUohzgfguvetv36i6I
BBrhQTPX7LWSj4AX6bnUWGmHQ/RICpdQ7dWGVuDiOZWc1bgM8ixmkVfdUd1KzBKI
tse600+U3eC+DcGrI47zi0h6Xu8+ukBRdY4crnqkG9eEXAYHc/ePtA04x/8YWfww
xdkOW/2zsWIvspquI3Z5OEH57VEd3Axbhrav37hU8zKuuckj1twb1KyCbRbV7e4T
ZiFNl07Xi+GU3tFBrfhXPpCjA+8i7wwinfVvFmgbVfITnlqVBu5NEkylfCPXfjdI
e7HFQG0X6aWnzaTjMmw0cghqBFbN1JBhRS6XdzntMcg1s/NYLPDA53KgEWY3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUeONapzmn5vdYziv5chzWDPj9kZEwHwYDVR0j
BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw
MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF
QzhGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04
OTBmLTBkZTNlMjQwNDYxMS8wLzMxMzAzMzJlMzUzNjJlMzIzMDM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc4zjANBgkqhkiG
9w0BAQsFAAOCAQEAicY6/nslnGtijLy7QZ3YgbH32tfMX3No2uVbbpfvlGb2FaBO
nTLQIQT51eXvdFsG5D0KG06RO8VNIefdIFV5FSJoHaicFLCWzfj2MtT+SaIZvKNn
um/t+fEn7Unc0EazSqdgnD1EhsqTXXDoBOL0Iq/2J22hBJOVrD5EtcuElRSJtTnO
aKJXcNPTnyumiq2YQn1M1MO2C7WJB4ifO+6Qjw7EK9cmVSEIz1frtmNhIbc6lX8J
HzXznBFJ690sBM19/fRyXChESWJnZHa+VsXRcdDSFZclFN2RPK4x+JkWovOCv8sn
LAwZDthSWsQ+rZZBd8oefbW673aAU121IU8s/A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:24 2026 by rpki-client