
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa
File: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (raw, json)
Hash identifier: yRTCL3qqZl+3vfyw12FbHiGh+XgdfssrTdi86LJj3XA=
Subject key identifier: 0B:8A:03:CF:2C:85:15:26:6E:D4:BF:EB:44:52:43:DD:87:B4:C1:61
Certificate issuer: /CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1
Certificate serial: 360AC694BD29A62C8B937DD7A3BD3D52DCF12E85
Authority key identifier: 3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa
Signing time: Sun 03 May 2026 03:10:21 +0000
ROA not before: Sun 03 May 2026 03:05:21 +0000
ROA not after: Sun 02 May 2027 03:10:21 +0000
asID: 137311
IP address blocks: 103.109.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl
rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:0a:c6:94:bd:29:a6:2c:8b:93:7d:d7:a3:bd:3d:52:dc:f1:2e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1
Validity
Not Before: May 3 03:05:21 2026 GMT
Not After : May 2 03:10:21 2027 GMT
Subject: CN=0B8A03CF2C8515266ED4BFEB445243DD87B4C161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:ab:de:16:8e:30:5d:a0:8d:71:d3:b1:42:
c2:63:b6:0e:f7:18:c3:11:ef:fe:dd:65:1d:04:e0:
fe:d0:b4:21:5e:04:85:78:4b:a2:c9:af:87:49:57:
90:89:82:08:e2:08:0c:46:27:18:f6:28:ff:63:96:
bd:23:c5:55:50:9e:f2:28:d8:f9:29:93:d9:d9:d4:
5e:34:24:de:96:81:c3:1e:53:6d:12:6c:cd:7d:eb:
59:e7:33:4c:de:1c:35:c1:bf:73:30:f6:39:0e:14:
4d:25:a8:e7:5d:61:31:bc:ba:08:d3:64:76:03:07:
ce:b9:3b:6f:b4:20:82:79:61:44:ba:54:3b:7f:64:
23:7b:c9:ac:16:93:ba:0e:90:87:2e:bb:a4:b2:61:
89:0e:b9:69:0d:67:32:39:64:98:c3:19:86:93:a4:
8f:d1:62:39:fa:07:51:66:16:6c:13:db:6e:26:c9:
a5:4a:97:c1:1d:52:de:ab:77:58:9f:62:dd:4e:d9:
71:3c:fe:d3:2f:29:19:10:9c:b5:79:08:46:c5:02:
df:d7:1d:e7:36:ef:50:cf:03:73:30:d3:91:43:4e:
b1:ca:1a:55:19:47:c1:d6:c5:71:94:bd:20:c9:32:
14:b6:35:c0:0a:5d:60:f3:6a:61:25:94:c6:8d:c2:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:03:CF:2C:85:15:26:6E:D4:BF:EB:44:52:43:DD:87:B4:C1:61
X509v3 Authority Key Identifier:
keyid:3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.109.24.0/24
Signature Algorithm: sha256WithRSAEncryption
74:9c:32:62:2a:c1:32:cc:0d:4e:50:49:5b:3f:67:3c:52:d9:
e3:af:50:c8:aa:97:f3:b7:bc:f3:00:ac:6e:dd:ca:0c:69:53:
5b:57:63:57:12:93:5d:88:6d:b6:40:58:db:8c:c7:88:4e:b9:
bc:75:85:d2:d6:dd:5c:df:8f:1f:6c:9a:e2:32:0c:e7:ba:02:
cf:7c:54:32:3a:80:39:0a:15:dc:7d:c1:09:27:92:b9:50:49:
b7:9f:fd:f8:82:4c:8b:17:44:0d:0d:32:8d:ff:62:da:3e:9f:
f6:e0:bb:a0:6b:22:1b:06:09:ef:57:34:90:35:b6:35:61:58:
eb:39:a1:07:78:40:95:ea:bf:ff:50:b5:c1:15:2d:f8:35:20:
a3:f5:b4:d9:ca:0c:68:3a:fa:fb:2e:af:48:85:37:32:48:df:
1a:ec:66:ac:46:23:ae:02:d0:b7:bd:4d:f1:63:67:f5:fa:f3:
e9:b1:fd:aa:16:d4:0c:7c:98:0f:f0:a0:07:30:59:4f:67:0b:
fa:1f:4f:f9:5c:93:33:17:39:d0:0e:35:44:ff:54:25:4e:14:
e5:bb:de:8f:9f:f0:b1:ee:c1:6f:e6:e3:72:9b:92:9e:b1:c6:
0c:18:e9:64:81:f3:7c:8e:c4:f7:8d:61:0a:b8:7e:ec:bb:9a:
1a:b5:e5:ed
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUNgrGlL0ppiyLk33Xo709UtzxLoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZB
MTYxQ0JBMTAeFw0yNjA1MDMwMzA1MjFaFw0yNzA1MDIwMzEwMjFaMDMxMTAvBgNV
BAMTKDBCOEEwM0NGMkM4NTE1MjY2RUQ0QkZFQjQ0NTI0M0REODdCNEMxNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyA6veFo4wXaCNcdOxQsJjtg73
GMMR7/7dZR0E4P7QtCFeBIV4S6LJr4dJV5CJggjiCAxGJxj2KP9jlr0jxVVQnvIo
2Pkpk9nZ1F40JN6WgcMeU20SbM1961nnM0zeHDXBv3Mw9jkOFE0lqOddYTG8ugjT
ZHYDB865O2+0IIJ5YUS6VDt/ZCN7yawWk7oOkIcuu6SyYYkOuWkNZzI5ZJjDGYaT
pI/RYjn6B1FmFmwT224myaVKl8EdUt6rd1ifYt1O2XE8/tMvKRkQnLV5CEbFAt/X
Hec271DPA3Mw05FDTrHKGlUZR8HWxXGUvSDJMhS2NcAKXWDzamEllMaNwoEhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUC4oDzyyFFSZu1L/rRFJD3Ye0wWEwHwYDVR0j
BBgwFoAUPTaze94lWVES0ruSG382xqFhy6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDgzNWNiNGEtMmZiOS00MGQ3LWIxNTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JE
RTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZBMTYxQ0JBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zRDM2QjM3QkRFMjU1OTUxMTJEMkJCOTIxQjdGMzZDNkExNjFD
QkExLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4MzVjYjRhLTJmYjktNDBkNy1i
MTU1LWRjY2U3Y2IwMDI5My8wLzMxMzAzMzJlMzEzMDM5MmUzMjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ20YMA0GCSqG
SIb3DQEBCwUAA4IBAQB0nDJiKsEyzA1OUElbP2c8Utnjr1DIqpfzt7zzAKxu3coM
aVNbV2NXEpNdiG22QFjbjMeITrm8dYXS1t1c348fbJriMgznugLPfFQyOoA5ChXc
fcEJJ5K5UEm3n/34gkyLF0QNDTKN/2LaPp/24LugayIbBgnvVzSQNbY1YVjrOaEH
eECV6r//ULXBFS34NSCj9bTZygxoOvr7Lq9IhTcySN8a7GasRiOuAtC3vU3xY2f1
+vPpsf2qFtQMfJgP8KAHMFlPZwv6H0/5XJMzFznQDjVE/1QlThTlu96Pn/Cx7sFv
5uNym5KescYMGOlkgfN8jsT3jWEKuH7su5oateXt
-----END CERTIFICATE-----
Generated at Wed May 13 01:41:31 2026 by rpki-client