
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa
File: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (raw, json)
Hash identifier: UPHtghvELZ/agPcg9sdcuWcqyn+wKiYGN/LJgGlSr7U=
Subject key identifier: 9D:00:BC:F5:C5:5C:5E:A7:14:DE:EC:70:2C:96:AD:26:9B:E2:E6:7A
Certificate issuer: /CN=4916565C52234EF87B2101E4B733E4674131F669
Certificate serial: 1B43DD432F9CEF4A85CB9363F563F0D83AF4679B
Authority key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa
Signing time: Sun 03 May 2026 03:11:06 +0000
ROA not before: Sun 03 May 2026 03:06:06 +0000
ROA not after: Sun 02 May 2027 03:11:06 +0000
asID: 138070
IP address blocks: 103.123.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:43:dd:43:2f:9c:ef:4a:85:cb:93:63:f5:63:f0:d8:3a:f4:67:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4916565C52234EF87B2101E4B733E4674131F669
Validity
Not Before: May 3 03:06:06 2026 GMT
Not After : May 2 03:11:06 2027 GMT
Subject: CN=9D00BCF5C55C5EA714DEEC702C96AD269BE2E67A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d3:dc:7a:86:11:81:bc:df:34:87:04:31:35:
28:09:6b:d9:2c:fa:94:42:09:fb:aa:63:52:7f:3c:
40:91:b8:bc:b5:84:f3:19:e7:a1:97:4e:2b:b1:8a:
6f:8b:86:9d:55:e6:d9:21:e8:f5:9e:f1:fc:b1:cc:
ef:e8:83:99:e9:95:c2:03:f5:38:99:93:85:f7:89:
a5:02:bb:51:07:9c:aa:29:e9:d6:3d:fd:4d:01:41:
aa:23:03:fb:c0:d6:94:08:0b:a2:bc:79:14:f2:8c:
0e:39:d0:58:62:03:cf:72:e2:f4:d0:52:63:bd:59:
f2:22:fc:b3:66:90:36:ac:5a:da:98:4a:a6:2a:90:
fd:ab:4e:ca:43:af:d7:5e:4c:9c:c9:02:29:8a:06:
79:fa:2c:ad:cc:75:00:ec:c8:67:42:e6:c7:aa:16:
39:8b:6b:79:45:6d:f6:f1:e5:7f:76:bd:7e:89:ac:
d1:5c:46:2d:08:f2:9f:e9:b1:61:8d:24:15:eb:ed:
4b:c3:bf:66:1e:67:ac:8b:49:d2:ca:3c:ef:ec:8d:
38:d1:49:2a:d2:bf:e9:d1:33:8d:52:6c:90:4f:fd:
cb:2f:cc:f8:fa:11:e6:39:df:26:e3:5d:04:19:41:
51:f0:39:5c:09:bd:83:b4:f4:f6:6f:f2:bb:ae:18:
40:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:00:BC:F5:C5:5C:5E:A7:14:DE:EC:70:2C:96:AD:26:9B:E2:E6:7A
X509v3 Authority Key Identifier:
keyid:49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:d6:85:74:5e:54:c1:44:80:01:3c:f0:cd:f7:b6:3c:e3:f0:
5b:c7:6c:d5:b4:89:93:80:10:26:47:8b:40:60:5b:9c:84:d7:
0f:71:a3:4f:e2:6e:1c:66:ad:f8:dc:d4:ce:47:34:16:a2:47:
ca:a8:e5:b8:2a:1f:a5:49:4d:c8:bc:45:dc:82:05:cb:fe:29:
19:ff:2f:e3:18:f1:f7:ec:04:e8:0b:2c:f6:d0:45:f2:16:ee:
5c:5e:b5:08:ff:fa:dd:0e:51:79:f7:5e:7d:77:f8:01:09:0c:
3e:76:0d:00:56:72:cb:8d:f1:36:f5:54:84:c8:cf:05:18:56:
33:6c:05:97:69:72:13:5d:fb:33:1e:1d:d9:55:ce:eb:a0:e5:
75:3c:33:7c:93:da:a5:be:b7:0b:18:7a:50:f6:18:84:6f:9d:
e5:8e:f7:b0:f1:e0:c0:dd:fc:04:80:50:fa:5d:6a:a6:5b:0b:
0b:3a:ed:33:8d:87:06:a2:5a:e2:0b:3b:df:c9:81:59:e9:23:
fa:0f:db:3c:30:f0:fe:a2:21:8b:5b:ad:6a:73:39:12:66:43:
96:7c:44:bf:1e:b4:6c:b6:c0:7a:8f:c5:fe:67:df:6e:69:b1:
31:b3:cd:05:3a:59:c5:23:27:81:4d:7f:af:8a:97:0d:74:d7:
31:d4:f2:af
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUG0PdQy+c70qFy5Nj9WPw2Dr0Z5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0
MTMxRjY2OTAeFw0yNjA1MDMwMzA2MDZaFw0yNzA1MDIwMzExMDZaMDMxMTAvBgNV
BAMTKDlEMDBCQ0Y1QzU1QzVFQTcxNERFRUM3MDJDOTZBRDI2OUJFMkU2N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw09x6hhGBvN80hwQxNSgJa9ks
+pRCCfuqY1J/PECRuLy1hPMZ56GXTiuxim+Lhp1V5tkh6PWe8fyxzO/og5nplcID
9TiZk4X3iaUCu1EHnKop6dY9/U0BQaojA/vA1pQIC6K8eRTyjA450FhiA89y4vTQ
UmO9WfIi/LNmkDasWtqYSqYqkP2rTspDr9deTJzJAimKBnn6LK3MdQDsyGdC5seq
FjmLa3lFbfbx5X92vX6JrNFcRi0I8p/psWGNJBXr7UvDv2YeZ6yLSdLKPO/sjTjR
SSrSv+nRM41SbJBP/csvzPj6EeY53ybjXQQZQVHwOVwJvYO09PZv8ruuGEDBAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUnQC89cVcXqcU3uxwLJatJpvi5nowHwYDVR0j
BBgwFoAUSRZWXFIjTvh7IQHktzPkZ0Ex9mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGFkNjdkNWYtNTcxMy00MTUzLTg3MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1
MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0MTMxRjY2OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80OTE2NTY1QzUyMjM0RUY4N0IyMTAxRTRCNzMzRTQ2NzQxMzFG
NjY5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RhZDY3ZDVmLTU3MTMtNDE1My04
NzFiLTFiMDA4ZjdmZmRkMi8wLzMxMzAzMzJlMzEzMjMzMmUzMTMwMzQyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM3MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJne2gwDQYJ
KoZIhvcNAQELBQADggEBAFvWhXReVMFEgAE88M33tjzj8FvHbNW0iZOAECZHi0Bg
W5yE1w9xo0/ibhxmrfjc1M5HNBaiR8qo5bgqH6VJTci8RdyCBcv+KRn/L+MY8ffs
BOgLLPbQRfIW7lxetQj/+t0OUXn3Xn13+AEJDD52DQBWcsuN8Tb1VITIzwUYVjNs
BZdpchNd+zMeHdlVzuug5XU8M3yT2qW+twsYelD2GIRvneWO97Dx4MDd/ASAUPpd
aqZbCws67TONhwaiWuILO9/JgVnpI/oP2zww8P6iIYtbrWpzORJmQ5Z8RL8etGy2
wHqPxf5n325psTGzzQU6WcUjJ4FNf6+Klw101zHU8q8=
-----END CERTIFICATE-----
Generated at Wed May 13 11:25:42 2026 by rpki-client