
$ rpki-client -vvf rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa
File: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (raw, json)
Hash identifier: g3Z9fptq9GjJPdegO4ng7rY8ayX1C1nitJgBmqVwMJ4=
Subject key identifier: 6A:58:BD:71:25:D2:93:AC:B2:88:6F:8B:DB:FA:5E:A5:62:64:AE:99
Certificate issuer: /CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0
Certificate serial: 66A6F9E2C4F5426452D6429B9C19CD2727439DC5
Authority key identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa
Signing time: Sun 03 May 2026 03:11:43 +0000
ROA not before: Sun 03 May 2026 03:06:43 +0000
ROA not after: Sun 02 May 2027 03:11:43 +0000
asID: 139962
IP address blocks: 103.147.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl
rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a6:f9:e2:c4:f5:42:64:52:d6:42:9b:9c:19:cd:27:27:43:9d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0
Validity
Not Before: May 3 03:06:43 2026 GMT
Not After : May 2 03:11:43 2027 GMT
Subject: CN=6A58BD7125D293ACB2886F8BDBFA5EA56264AE99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:4d:d8:91:bb:92:26:1f:d0:59:ab:e0:7c:
2e:29:4f:32:c4:e8:eb:bc:76:27:6f:6e:74:a3:12:
b4:dd:44:0c:ca:e3:59:bd:e3:d3:f1:8f:85:bf:dc:
3e:28:96:6b:19:19:be:52:7c:3a:17:e8:f2:f1:be:
7e:50:1e:5c:0e:83:18:f2:28:cd:9d:0f:83:9f:03:
d3:90:de:75:66:27:13:80:f5:e2:0a:84:e9:c0:08:
73:8f:06:b8:19:ce:67:85:27:6c:2c:88:31:c9:11:
e1:69:f0:f4:0f:0d:cb:42:14:bb:20:f8:80:8d:9a:
56:60:7c:bf:1e:69:1d:6e:bd:87:1d:f9:ad:1f:8e:
9f:09:94:76:6c:15:d1:c2:b0:c5:a9:a6:57:de:22:
a9:51:97:4e:7a:22:bb:9f:c2:09:60:ed:60:17:80:
f9:03:4c:47:7a:c5:b2:d6:f6:bc:60:af:89:73:ab:
71:f3:47:0f:04:95:19:62:c0:4b:6d:9e:83:4e:7b:
90:74:13:35:f3:37:31:7a:dd:e0:c4:3e:b3:64:48:
8d:3f:9f:ba:b0:fe:35:c4:c3:23:3b:e4:ec:b6:04:
12:c8:23:44:5c:39:99:c0:b2:3b:5c:da:f3:12:45:
c3:23:bb:b7:a5:cb:9e:ea:61:ef:60:eb:b8:73:4e:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:58:BD:71:25:D2:93:AC:B2:88:6F:8B:DB:FA:5E:A5:62:64:AE:99
X509v3 Authority Key Identifier:
keyid:9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.118.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:8d:4f:19:41:47:d4:be:e2:8e:1c:e2:9d:2a:8c:27:04:ef:
a3:07:b5:7d:dd:55:88:6b:a0:4f:99:36:b2:d6:b7:30:a2:09:
da:f1:1b:e7:3e:00:ca:49:c5:e8:5a:77:fd:33:9d:09:8c:53:
37:aa:0a:f9:39:9c:43:8f:ed:a7:5e:d0:ac:9f:72:48:77:45:
b6:69:51:00:3b:83:36:77:14:47:80:2a:65:67:0e:f2:9a:20:
83:14:b7:8a:8c:03:fc:ee:89:93:34:c2:17:cd:6d:1f:32:fa:
c5:d0:f6:5d:3a:cc:fa:6f:2b:81:18:93:6f:03:2c:9e:8e:d9:
03:9b:91:44:d7:c3:46:03:99:fe:99:c4:db:fa:e9:50:77:98:
b1:c1:a1:a4:6e:28:91:58:c2:f5:38:71:60:06:9a:07:ae:31:
1e:60:92:32:d9:9f:19:24:7b:d2:9d:86:e9:c7:c6:46:16:d1:
c0:be:c3:17:ac:87:bd:82:e3:6a:ef:cc:50:f7:ab:2a:a2:bb:
57:e7:f0:fc:4b:ff:2b:05:ad:80:1d:e7:96:3b:4f:21:6a:90:
ad:0a:aa:57:83:03:87:20:fd:e7:a0:85:d4:d0:7c:33:b4:2c:
0a:e8:e7:be:84:fd:03:71:37:e2:f7:3c:24:5c:0c:84:5d:a0:
66:ec:17:e3
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZqb54sT1QmRS1kKbnBnNJydDncUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ3MjhDQTMzMzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVB
RTQ5QUFCMDAeFw0yNjA1MDMwMzA2NDNaFw0yNzA1MDIwMzExNDNaMDMxMTAvBgNV
BAMTKDZBNThCRDcxMjVEMjkzQUNCMjg4NkY4QkRCRkE1RUE1NjI2NEFFOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjk3YkbuSJh/QWavgfC4pTzLE
6Ou8didvbnSjErTdRAzK41m949Pxj4W/3D4olmsZGb5SfDoX6PLxvn5QHlwOgxjy
KM2dD4OfA9OQ3nVmJxOA9eIKhOnACHOPBrgZzmeFJ2wsiDHJEeFp8PQPDctCFLsg
+ICNmlZgfL8eaR1uvYcd+a0fjp8JlHZsFdHCsMWpplfeIqlRl056Irufwglg7WAX
gPkDTEd6xbLW9rxgr4lzq3HzRw8ElRliwEttnoNOe5B0EzXzNzF63eDEPrNkSI0/
n7qw/jXEwyM75Oy2BBLII0RcOZnAsjtc2vMSRcMju7ely57qYe9g67hzTusjAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUali9cSXSk6yyiG+L2/pepWJkrpkwHwYDVR0j
BBgwFoAUnXKMozMHNpDyp/a3fSzz/q5JqrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGU1ZTkxMzEtM2FiYy00YWJkLWJkOTItYTc1NWZhYjkxMzA1LzAvOUQ3MjhDQTMz
MzA3MzY5MEYyQTdGNkI3N0QyQ0YzRkVBRTQ5QUFCMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85RDcyOENBMzMzMDczNjkwRjJBN0Y2Qjc3RDJDRjNGRUFFNDlB
QUIwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RlNWU5MTMxLTNhYmMtNGFiZC1i
ZDkyLWE3NTVmYWI5MTMwNS8wLzMxMzAzMzJlMzEzNDM3MmUzMTMxMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM2MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnk3YwDQYJ
KoZIhvcNAQELBQADggEBAI+NTxlBR9S+4o4c4p0qjCcE76MHtX3dVYhroE+ZNrLW
tzCiCdrxG+c+AMpJxehad/0znQmMUzeqCvk5nEOP7ade0Kyfckh3RbZpUQA7gzZ3
FEeAKmVnDvKaIIMUt4qMA/zuiZM0whfNbR8y+sXQ9l06zPpvK4EYk28DLJ6O2QOb
kUTXw0YDmf6ZxNv66VB3mLHBoaRuKJFYwvU4cWAGmgeuMR5gkjLZnxkke9KdhunH
xkYW0cC+wxesh72C42rvzFD3qyqiu1fn8PxL/ysFrYAd55Y7TyFqkK0KqleDA4cg
/eeghdTQfDO0LAro576E/QNxN+L3PCRcDIRdoGbsF+M=
-----END CERTIFICATE-----
Generated at Wed May 13 06:47:50 2026 by rpki-client