
$ rpki-client -vvf rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38312e302f32342d3234203d3e20313532303031.roa
File: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (raw, json)
Hash identifier: xZnHAYFbnEc0A3njrjnrHmJ+U6dJWxONqshnQ5yBO6M=
Subject key identifier: 37:E1:16:67:CF:83:48:82:D0:53:F8:CB:36:34:C3:E8:3F:4E:01:F0
Certificate issuer: /CN=47EB5E054DA6FBFF24D9DEEAA5672F810B793830
Certificate serial: 3BBE8904F7595963635BBDFDD4827CA791131250
Authority key identifier: 47:EB:5E:05:4D:A6:FB:FF:24:D9:DE:EA:A5:67:2F:81:0B:79:38:30
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38312e302f32342d3234203d3e20313532303031.roa
Signing time: Sun 03 May 2026 03:11:40 +0000
ROA not before: Sun 03 May 2026 03:06:40 +0000
ROA not after: Sun 02 May 2027 03:11:40 +0000
asID: 152001
IP address blocks: 103.67.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl
rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:be:89:04:f7:59:59:63:63:5b:bd:fd:d4:82:7c:a7:91:13:12:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47EB5E054DA6FBFF24D9DEEAA5672F810B793830
Validity
Not Before: May 3 03:06:40 2026 GMT
Not After : May 2 03:11:40 2027 GMT
Subject: CN=37E11667CF834882D053F8CB3634C3E83F4E01F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:72:00:2b:22:24:15:5b:4d:9d:3d:00:46:
5c:cd:86:e6:40:00:a7:b6:54:ae:00:70:10:e6:9e:
96:23:1a:d7:1f:94:75:08:e3:7c:8d:59:94:8f:eb:
e7:e0:85:40:14:41:df:9b:73:4c:c0:af:28:e7:0d:
a5:c1:76:28:96:e2:27:d7:55:1c:ee:1b:47:06:01:
3b:90:ea:7e:10:eb:63:56:6d:21:10:fd:db:ea:33:
4b:d9:ba:77:17:82:64:90:86:db:5d:e1:14:db:d1:
37:35:9c:d8:df:25:5c:2a:25:9c:6b:54:d2:f4:2a:
e6:32:16:c1:35:ea:de:29:09:ee:0c:55:aa:8b:f1:
00:90:69:3c:4a:03:fe:0f:9d:7b:3b:33:1b:75:bc:
9d:cc:4d:a1:95:3d:4c:32:73:8d:7c:38:a0:50:c7:
85:ab:35:8b:45:70:71:b1:50:8f:f9:c8:b6:fa:be:
ba:c0:0a:db:97:b9:9b:bb:1b:56:7e:56:6b:1d:2a:
1c:d7:5b:71:62:e6:78:73:34:23:b6:e0:6b:60:dc:
2a:6c:7a:dc:a5:67:c0:6c:e2:94:4e:dd:a9:0c:11:
82:3f:d9:e2:61:f2:fe:87:a8:65:c1:95:60:d8:80:
dc:f6:8b:7c:a8:42:48:92:ed:09:e9:2b:29:23:42:
99:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:16:67:CF:83:48:82:D0:53:F8:CB:36:34:C3:E8:3F:4E:01:F0
X509v3 Authority Key Identifier:
keyid:47:EB:5E:05:4D:A6:FB:FF:24:D9:DE:EA:A5:67:2F:81:0B:79:38:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38312e302f32342d3234203d3e20313532303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.67.81.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:52:0f:7c:5a:a1:0e:55:c4:24:cb:57:1f:b0:22:1e:19:cc:
36:44:dd:4b:b5:f5:ce:59:59:d8:ab:65:21:c2:f5:2f:5f:0f:
5c:ca:01:2f:93:80:d9:90:64:27:fb:c2:fa:b1:08:92:f7:02:
70:a3:a9:69:c7:58:18:25:90:e0:cc:14:fb:6d:87:ad:0a:61:
84:f5:fd:4f:50:38:30:68:67:c2:06:8f:ee:3e:a2:99:5d:e4:
0e:0b:5b:ac:d7:9a:c4:d5:87:61:95:9d:0a:c0:a5:8d:a1:e1:
c3:49:bd:ef:c0:fe:9d:fb:21:ab:e0:8b:93:4a:91:13:fc:2e:
ea:ec:3d:68:20:d2:27:89:f3:1f:f4:e3:e2:5f:67:ee:2c:1d:
59:84:39:46:71:b3:c3:b6:42:43:fb:18:9b:10:74:1b:36:4b:
00:ca:56:24:c2:94:e0:49:cf:8b:8a:60:2e:e1:40:55:45:97:
ac:8d:2c:9a:38:5d:c6:ad:59:01:8a:0e:42:01:7a:f1:00:6b:
0c:7f:3d:3e:18:83:6b:86:a1:f0:14:8f:12:da:4d:4c:c0:05:
a5:04:34:a1:d4:1f:16:bf:5f:7e:b9:ab:4f:ab:2e:53:59:21:
74:5e:e4:7d:de:81:c1:34:05:8f:9b:22:56:d9:98:85:c8:26:
a6:e3:59:8f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUO76JBPdZWWNjW7391IJ8p5ETElAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdFQjVFMDU0REE2RkJGRjI0RDlERUVBQTU2NzJGODEw
Qjc5MzgzMDAeFw0yNjA1MDMwMzA2NDBaFw0yNzA1MDIwMzExNDBaMDMxMTAvBgNV
BAMTKDM3RTExNjY3Q0Y4MzQ4ODJEMDUzRjhDQjM2MzRDM0U4M0Y0RTAxRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYXIAKyIkFVtNnT0ARlzNhuZA
AKe2VK4AcBDmnpYjGtcflHUI43yNWZSP6+fghUAUQd+bc0zAryjnDaXBdiiW4ifX
VRzuG0cGATuQ6n4Q62NWbSEQ/dvqM0vZuncXgmSQhttd4RTb0Tc1nNjfJVwqJZxr
VNL0KuYyFsE16t4pCe4MVaqL8QCQaTxKA/4PnXs7Mxt1vJ3MTaGVPUwyc418OKBQ
x4WrNYtFcHGxUI/5yLb6vrrACtuXuZu7G1Z+VmsdKhzXW3Fi5nhzNCO24Gtg3Cps
etylZ8Bs4pRO3akMEYI/2eJh8v6HqGXBlWDYgNz2i3yoQkiS7QnpKykjQpkNAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUN+EWZ8+DSILQU/jLNjTD6D9OAfAwHwYDVR0j
BBgwFoAUR+teBU2m+/8k2d7qpWcvgQt5ODAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGUzZjJlOWItMTA2OC00ZmE5LWJhMWQtNTlkMDcxYTQxMmEyLzAvNDdFQjVFMDU0
REE2RkJGRjI0RDlERUVBQTU2NzJGODEwQjc5MzgzMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80N0VCNUUwNTREQTZGQkZGMjREOURFRUFBNTY3MkY4MTBCNzkz
ODMwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RlM2YyZTliLTEwNjgtNGZhOS1i
YTFkLTU5ZDA3MWE0MTJhMi8wLzMxMzAzMzJlMzYzNzJlMzgzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdDUTANBgkqhkiG
9w0BAQsFAAOCAQEAn1IPfFqhDlXEJMtXH7AiHhnMNkTdS7X1zllZ2KtlIcL1L18P
XMoBL5OA2ZBkJ/vC+rEIkvcCcKOpacdYGCWQ4MwU+22HrQphhPX9T1A4MGhnwgaP
7j6imV3kDgtbrNeaxNWHYZWdCsCljaHhw0m978D+nfshq+CLk0qRE/wu6uw9aCDS
J4nzH/Tj4l9n7iwdWYQ5RnGzw7ZCQ/sYmxB0GzZLAMpWJMKU4EnPi4pgLuFAVUWX
rI0smjhdxq1ZAYoOQgF68QBrDH89PhiDa4ah8BSPEtpNTMAFpQQ0odQfFr9ffrmr
T6suU1khdF7kfd6BwTQFj5siVtmYhcgmpuNZjw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:37:44 2026 by rpki-client