
$ rpki-client -vvf rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa
File: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (raw, json)
Hash identifier: KOBMUeuuJtkuzoTiB4FBFCyBVV1+45BqlCrbct7wq3M=
Subject key identifier: 64:17:ED:08:03:14:8D:0B:63:C3:1C:E4:E5:69:82:F9:5A:4C:12:FD
Certificate issuer: /CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC
Certificate serial: 481A15E6BCC485068D940E1EC9BDA1CBCB18949E
Authority key identifier: B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa
Signing time: Sun 03 May 2026 03:10:55 +0000
ROA not before: Sun 03 May 2026 03:05:55 +0000
ROA not after: Sun 02 May 2027 03:10:55 +0000
asID: 151010
IP address blocks: 103.215.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl
rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:1a:15:e6:bc:c4:85:06:8d:94:0e:1e:c9:bd:a1:cb:cb:18:94:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC
Validity
Not Before: May 3 03:05:55 2026 GMT
Not After : May 2 03:10:55 2027 GMT
Subject: CN=6417ED0803148D0B63C31CE4E56982F95A4C12FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:d0:61:e9:8f:1f:9d:78:88:c8:0e:31:eb:
1e:c9:0f:3b:2b:19:f9:4e:8b:95:3a:5c:0b:35:31:
74:f0:6b:e5:a7:79:ea:21:8a:8e:55:cd:2c:05:27:
82:e1:b0:6d:89:bd:2b:7a:85:09:e1:8c:1e:86:83:
b8:bb:d6:5d:87:cf:06:f8:d5:05:2b:b6:ba:6b:9c:
bb:43:3e:90:41:79:13:67:9d:3d:4f:a2:a8:64:17:
3e:a3:c9:6b:80:f6:55:73:62:3b:9b:36:54:a1:a7:
c8:e1:20:33:1e:db:d3:b3:0b:d2:38:f9:98:90:a5:
30:68:5b:98:98:6b:e3:f1:eb:8e:83:78:7f:ad:3f:
2a:d7:62:18:d2:02:dc:3c:27:f8:db:ca:36:7b:d4:
91:2d:36:8f:42:68:ec:33:e3:5d:d4:7c:04:e4:6a:
31:ec:94:a7:52:fd:81:4c:27:88:b4:e9:26:2e:b1:
2b:99:71:7d:c1:70:3f:b7:e7:e6:bb:db:09:43:7d:
06:69:0f:11:5e:71:70:2d:e5:bc:fb:69:26:11:c4:
68:a8:e1:f5:37:3d:a0:08:9a:2d:56:98:cb:96:c4:
23:3d:22:ed:81:c6:95:03:73:24:78:da:66:3e:99:
b0:08:cf:aa:87:8d:87:a3:5a:1d:49:4d:79:08:a5:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:17:ED:08:03:14:8D:0B:63:C3:1C:E4:E5:69:82:F9:5A:4C:12:FD
X509v3 Authority Key Identifier:
keyid:B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:26:03:fa:81:eb:20:82:de:6b:a9:98:d8:86:0e:89:8b:7d:
3f:80:8f:4c:b5:08:b6:1a:22:af:39:fd:15:02:71:ae:63:2e:
cf:84:b9:55:76:94:92:d1:2b:63:d8:fc:e1:ab:5c:8a:9a:c4:
f0:4a:95:39:45:ff:f3:87:5c:b8:d6:9d:89:d7:19:0b:cf:46:
87:31:43:24:8f:f4:a2:46:1d:54:4f:7d:fc:b1:7d:c4:43:5e:
f6:f3:74:0e:54:6f:c7:0e:dc:ce:3d:f5:f1:26:72:6a:b0:bd:
1c:a4:9c:2e:bc:f2:c4:26:04:be:99:ba:e9:4a:b3:fe:d1:50:
dd:1a:82:8d:a4:0d:1f:1f:5c:ae:86:7b:a0:bd:0b:d3:24:24:
47:a3:b2:c4:a7:36:51:d5:02:ae:07:51:23:a0:91:44:95:ec:
9f:24:84:34:37:1d:4d:bb:2a:14:69:26:7c:2e:a3:c4:99:4a:
2a:8f:50:7c:f4:83:67:31:ed:cc:1c:5a:54:89:c9:87:70:14:
69:b3:c6:93:93:bb:19:c2:9e:b4:19:78:83:90:11:64:a9:ab:
c7:0e:91:a0:91:56:75:ad:6f:04:5f:15:46:4f:a7:2b:cc:4c:
28:15:a6:51:4c:03:49:b6:37:e6:35:cd:f8:36:fd:34:38:9c:
d8:ab:f2:c1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSBoV5rzEhQaNlA4eyb2hy8sYlJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3
Mzg3NDlDQzAeFw0yNjA1MDMwMzA1NTVaFw0yNzA1MDIwMzEwNTVaMDMxMTAvBgNV
BAMTKDY0MTdFRDA4MDMxNDhEMEI2M0MzMUNFNEU1Njk4MkY5NUE0QzEyRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnBtBh6Y8fnXiIyA4x6x7JDzsr
GflOi5U6XAs1MXTwa+Wneeohio5VzSwFJ4LhsG2JvSt6hQnhjB6Gg7i71l2Hzwb4
1QUrtrprnLtDPpBBeRNnnT1PoqhkFz6jyWuA9lVzYjubNlShp8jhIDMe29OzC9I4
+ZiQpTBoW5iYa+Px646DeH+tPyrXYhjSAtw8J/jbyjZ71JEtNo9CaOwz413UfATk
ajHslKdS/YFMJ4i06SYusSuZcX3BcD+35+a72wlDfQZpDxFecXAt5bz7aSYRxGio
4fU3PaAImi1WmMuWxCM9Iu2BxpUDcyR42mY+mbAIz6qHjYejWh1JTXkIpTLNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZBftCAMUjQtjwxzk5WmC+VpMEv0wHwYDVR0j
BBgwFoAUtc+gIN1Lv9SYxeTYSo1jCXOHScwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGEwZmJiNTUtMWRkOC00ZjhiLWI4OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBE
RDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3Mzg3NDlDQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNUNGQTAyMERENEJCRkQ0OThDNUU0RDg0QThENjMwOTczODc0
OUNDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RhMGZiYjU1LTFkZDgtNGY4Yi1i
ODkwLTRhMmMwYTAxMTFkYi8wLzMxMzAzMzJlMzIzMTM1MmUzNjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzAzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9c/MA0GCSqG
SIb3DQEBCwUAA4IBAQBrJgP6gesggt5rqZjYhg6Ji30/gI9MtQi2GiKvOf0VAnGu
Yy7PhLlVdpSS0Stj2Pzhq1yKmsTwSpU5Rf/zh1y41p2J1xkLz0aHMUMkj/SiRh1U
T338sX3EQ17283QOVG/HDtzOPfXxJnJqsL0cpJwuvPLEJgS+mbrpSrP+0VDdGoKN
pA0fH1yuhnugvQvTJCRHo7LEpzZR1QKuB1EjoJFEleyfJIQ0Nx1NuyoUaSZ8LqPE
mUoqj1B89INnMe3MHFpUicmHcBRps8aTk7sZwp60GXiDkBFkqavHDpGgkVZ1rW8E
XxVGT6crzEwoFaZRTANJtjfmNc34Nv00OJzYq/LB
-----END CERTIFICATE-----
Generated at Wed May 13 03:56:22 2026 by rpki-client