
$ rpki-client -vvf rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa
File: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (raw, json)
Hash identifier: J7DIB6hfPPTu3E2KzBH8yAsIGJFne3bOrj0Y9GAdcDc=
Subject key identifier: 9F:25:3B:3D:3D:7D:C2:C8:43:CF:10:DD:00:B4:CF:29:F8:22:7E:63
Certificate issuer: /CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618
Certificate serial: 65836A883890D4F163A2DF3342B2C288E53E00A8
Authority key identifier: DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa
Signing time: Sun 03 May 2026 03:11:44 +0000
ROA not before: Sun 03 May 2026 03:06:44 +0000
ROA not after: Sun 02 May 2027 03:11:44 +0000
asID: 141595
IP address blocks: 103.172.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl
rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:83:6a:88:38:90:d4:f1:63:a2:df:33:42:b2:c2:88:e5:3e:00:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBF8290BACF2AD96DBB0243648CC6AC6D6A77618
Validity
Not Before: May 3 03:06:44 2026 GMT
Not After : May 2 03:11:44 2027 GMT
Subject: CN=9F253B3D3D7DC2C843CF10DD00B4CF29F8227E63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:02:c2:80:33:b5:5b:f1:6f:fc:c2:75:07:
fd:f8:55:a0:66:9b:23:23:45:28:37:fc:ed:f6:07:
8c:41:60:e2:ee:d8:e6:1f:de:21:99:3e:ae:6a:3a:
cb:5f:b5:f6:85:3d:65:75:0b:e0:80:b0:06:15:4f:
2f:cc:52:7b:46:ad:6f:27:59:ff:97:1b:97:17:4e:
95:b6:0c:58:2d:a8:c9:39:15:4f:fd:3d:6d:e0:eb:
ac:81:c8:3b:64:cb:df:ab:13:d3:e6:de:63:01:2e:
88:33:82:41:85:4f:3b:65:7d:9d:a9:40:08:bd:b7:
48:4b:9d:d4:12:a1:79:91:46:8f:ab:af:fe:c1:b5:
04:81:ed:d9:df:aa:89:90:bb:fd:9b:6b:c9:79:7b:
92:ed:fe:65:20:6e:56:da:a7:a1:27:3b:1a:2f:99:
f6:28:89:a8:9c:0e:13:df:b6:d8:a4:6b:df:df:d2:
18:11:f9:63:01:25:a0:ba:f8:5b:db:fb:c1:42:d5:
4a:06:72:43:ef:91:59:d1:db:62:4f:a5:be:47:eb:
57:b1:2e:30:16:32:14:fb:14:e9:32:32:4f:49:67:
54:5c:79:41:e1:60:85:0d:29:69:5b:93:fd:84:0f:
66:9b:c7:f4:b6:d5:0d:0b:34:2f:30:22:2d:0e:b2:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:25:3B:3D:3D:7D:C2:C8:43:CF:10:DD:00:B4:CF:29:F8:22:7E:63
X509v3 Authority Key Identifier:
keyid:DB:F8:29:0B:AC:F2:AD:96:DB:B0:24:36:48:CC:6A:C6:D6:A7:76:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBF8290BACF2AD96DBB0243648CC6AC6D6A77618.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.122.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f1:38:c8:74:91:e1:b3:87:70:d9:94:c1:0b:70:a6:63:65:
ae:28:51:59:19:08:6a:b2:87:89:39:f0:ff:8d:88:f0:62:16:
06:c7:e3:6e:25:3b:1d:f5:48:d9:99:e5:ba:df:be:0c:35:6c:
5f:43:f4:6f:cb:82:25:06:4c:70:a1:e9:79:7e:19:4f:4d:55:
09:89:52:58:16:a6:aa:f7:88:83:07:d8:2d:0a:38:05:a1:b4:
ed:fb:3a:88:f7:ca:44:0c:e1:92:9c:97:77:07:a0:f4:c5:83:
b8:62:68:97:48:a3:86:df:21:73:5e:8b:cb:b3:1e:79:5e:a4:
3f:85:67:57:fb:5b:b5:1e:46:32:68:a8:68:4d:19:41:53:15:
03:03:68:e5:94:99:9f:07:b8:ab:48:d9:de:82:ba:24:5c:07:
ee:09:e0:4d:1b:70:02:33:89:dd:5d:4a:5b:30:a8:34:4e:77:
72:ff:39:68:2f:66:9f:dc:fc:7d:56:cd:13:75:9c:27:ea:fd:
c3:c5:43:fc:0d:46:57:5d:53:64:6e:53:6f:c5:25:9a:bb:ae:
3b:63:66:f3:63:a5:08:56:e1:a0:89:0d:4c:fb:c5:41:6c:f1:
81:e5:d0:77:78:79:c1:f8:18:41:2c:08:b9:a3:c4:a6:21:ca:
9a:c7:c2:ff
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZYNqiDiQ1PFjot8zQrLCiOU+AKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJGODI5MEJBQ0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZE
NkE3NzYxODAeFw0yNjA1MDMwMzA2NDRaFw0yNzA1MDIwMzExNDRaMDMxMTAvBgNV
BAMTKDlGMjUzQjNEM0Q3REMyQzg0M0NGMTBERDAwQjRDRjI5RjgyMjdFNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbwLCgDO1W/Fv/MJ1B/34VaBm
myMjRSg3/O32B4xBYOLu2OYf3iGZPq5qOstftfaFPWV1C+CAsAYVTy/MUntGrW8n
Wf+XG5cXTpW2DFgtqMk5FU/9PW3g66yByDtky9+rE9Pm3mMBLogzgkGFTztlfZ2p
QAi9t0hLndQSoXmRRo+rr/7BtQSB7dnfqomQu/2ba8l5e5Lt/mUgblbap6EnOxov
mfYoiaicDhPfttika9/f0hgR+WMBJaC6+Fvb+8FC1UoGckPvkVnR22JPpb5H61ex
LjAWMhT7FOkyMk9JZ1RceUHhYIUNKWlbk/2ED2abx/S21Q0LNC8wIi0Osq5rAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUnyU7PT19wshDzxDdALTPKfgifmMwHwYDVR0j
BBgwFoAU2/gpC6zyrZbbsCQ2SMxqxtandhgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGU2MDA0ODYtOTc4MC00M2VlLWJiMmQtYjgxMTA5NGExNDQ1LzAvREJGODI5MEJB
Q0YyQUQ5NkRCQjAyNDM2NDhDQzZBQzZENkE3NzYxOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EQkY4MjkwQkFDRjJBRDk2REJCMDI0MzY0OENDNkFDNkQ2QTc3
NjE4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RlNjAwNDg2LTk3ODAtNDNlZS1i
YjJkLWI4MTEwOTRhMTQ0NS8wLzMxMzAzMzJlMzEzNzMyMmUzMTMyMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrHowDQYJ
KoZIhvcNAQELBQADggEBACfxOMh0keGzh3DZlMELcKZjZa4oUVkZCGqyh4k58P+N
iPBiFgbH424lOx31SNmZ5brfvgw1bF9D9G/LgiUGTHCh6Xl+GU9NVQmJUlgWpqr3
iIMH2C0KOAWhtO37Ooj3ykQM4ZKcl3cHoPTFg7hiaJdIo4bfIXNei8uzHnlepD+F
Z1f7W7UeRjJoqGhNGUFTFQMDaOWUmZ8HuKtI2d6CuiRcB+4J4E0bcAIzid1dSlsw
qDROd3L/OWgvZp/c/H1WzRN1nCfq/cPFQ/wNRlddU2RuU2/FJZq7rjtjZvNjpQhW
4aCJDUz7xUFs8YHl0Hd4ecH4GEEsCLmjxKYhyprHwv8=
-----END CERTIFICATE-----
Generated at Wed May 13 08:27:44 2026 by rpki-client