
$ rpki-client -vvf rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa
File: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (raw, json)
Hash identifier: +8ziEowYwDOL6fJKnsKsHl4XsowErxzBKUzz7/GWBlo=
Subject key identifier: 54:2C:FA:4E:2F:0E:40:85:E0:0D:B9:5D:CB:CB:5E:81:C0:68:96:18
Certificate issuer: /CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE
Certificate serial: 39D7EDAFF2D93CC8B2DFB97CA936AB96EE31A258
Authority key identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa
Signing time: Sun 03 May 2026 03:12:08 +0000
ROA not before: Sun 03 May 2026 03:07:08 +0000
ROA not after: Sun 02 May 2027 03:12:08 +0000
asID: 24532
IP address blocks: 103.116.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl
rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d7:ed:af:f2:d9:3c:c8:b2:df:b9:7c:a9:36:ab:96:ee:31:a2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE
Validity
Not Before: May 3 03:07:08 2026 GMT
Not After : May 2 03:12:08 2027 GMT
Subject: CN=542CFA4E2F0E4085E00DB95DCBCB5E81C0689618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:30:2c:74:d8:60:1d:e9:f7:38:8d:4f:82:b7:
0f:90:03:63:00:a3:24:14:ca:95:b3:cc:50:30:3b:
97:cb:99:c2:02:04:9b:de:5f:3d:bc:4c:18:4d:fb:
bf:0d:18:9e:14:b4:d7:8c:ab:9c:4a:1c:b5:1c:48:
cf:08:cf:51:38:df:0e:eb:41:25:88:98:7c:3e:cc:
b4:cc:4c:d0:f0:db:6f:5f:e8:80:d1:95:72:91:d3:
30:59:d9:bf:ce:6d:63:e2:a4:cb:3b:af:fd:78:56:
07:b1:93:fd:3c:69:1b:b1:ff:d4:c4:86:c4:1a:32:
02:9a:8d:70:79:9a:7a:2a:fc:ea:fc:06:30:2e:ab:
a7:93:ce:29:b9:d5:5a:c7:16:72:fb:8f:4c:9e:57:
5b:d9:44:d3:29:d3:01:44:3f:0d:09:5e:b1:e4:92:
a4:e9:30:df:62:c3:98:ad:b8:6c:d0:ed:b4:49:cb:
7a:b9:03:b8:b3:e7:ec:62:49:2d:85:3b:64:2d:47:
b0:56:76:e4:57:fb:11:51:3b:fd:03:51:15:df:4b:
02:93:38:ff:3f:58:2f:13:a6:24:5b:bc:df:6c:c7:
4f:26:dc:45:bb:88:ae:ed:25:f8:54:89:65:05:6f:
3a:50:24:10:34:53:bf:b4:5a:22:ec:9d:54:84:56:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2C:FA:4E:2F:0E:40:85:E0:0D:B9:5D:CB:CB:5E:81:C0:68:96:18
X509v3 Authority Key Identifier:
keyid:F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.112.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:2d:34:31:95:74:1e:6b:2b:6e:9d:8d:5d:66:db:ab:88:ed:
32:39:2e:15:a6:7f:21:b2:2d:36:17:d7:b7:2b:29:74:49:ac:
6e:ab:5b:df:b8:de:72:02:13:d8:7e:d0:25:18:1c:1c:6b:8c:
ad:31:da:ee:cd:d8:38:fb:c5:77:73:01:c4:d3:6d:8e:c7:c2:
69:80:04:6b:ea:f5:4f:cc:67:00:29:c5:52:03:f2:8b:ae:22:
44:12:5d:03:9e:60:1c:13:e9:15:0e:de:4e:0f:36:94:28:2e:
01:22:9b:77:23:b3:29:4a:17:0d:c3:72:1b:aa:e1:1d:1b:13:
56:f1:6e:a4:63:ca:ba:2c:dd:13:0b:5e:54:62:f4:5d:30:db:
04:7e:a5:d2:81:17:9c:b9:9e:a4:b3:bc:7c:48:b5:a1:3d:2c:
84:86:b5:e8:0f:c0:7c:52:d6:f1:74:94:7e:b5:40:c5:cb:01:
41:c9:3e:36:9f:4e:a8:bc:13:39:a9:27:28:31:c1:07:79:39:
96:7c:9c:86:1d:9e:35:28:e1:ee:50:5c:9e:bf:84:ad:d9:b4:
66:42:4f:9a:d0:e0:f2:60:53:52:58:d6:9b:93:1e:ed:a6:19:
87:da:b9:cb:95:cc:4f:44:ca:3a:2c:8e:49:fd:59:ff:f9:31:
20:09:ad:97
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOdftr/LZPMiy37l8qTarlu4xolgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMwREIx
MEQyRjRERTAeFw0yNjA1MDMwMzA3MDhaFw0yNzA1MDIwMzEyMDhaMDMxMTAvBgNV
BAMTKDU0MkNGQTRFMkYwRTQwODVFMDBEQjk1RENCQ0I1RTgxQzA2ODk2MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyMCx02GAd6fc4jU+Ctw+QA2MA
oyQUypWzzFAwO5fLmcICBJveXz28TBhN+78NGJ4UtNeMq5xKHLUcSM8Iz1E43w7r
QSWImHw+zLTMTNDw229f6IDRlXKR0zBZ2b/ObWPipMs7r/14Vgexk/08aRux/9TE
hsQaMgKajXB5mnoq/Or8BjAuq6eTzim51VrHFnL7j0yeV1vZRNMp0wFEPw0JXrHk
kqTpMN9iw5ituGzQ7bRJy3q5A7iz5+xiSS2FO2QtR7BWduRX+xFRO/0DURXfSwKT
OP8/WC8TpiRbvN9sx08m3EW7iK7tJfhUiWUFbzpQJBA0U7+0WiLsnVSEVnCNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUVCz6Ti8OQIXgDbldy8tegcBolhgwHwYDVR0j
BBgwFoAU8oNgeB+i2mui+YLLnjTA2xDS9N4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGY5YmY3OTctOTEzZC00OGRkLTgzMmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgx
RkEyREE2QkEyRjk4MkNCOUUzNEMwREIxMEQyRjRERS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMjgzNjA3ODFGQTJEQTZCQTJGOTgyQ0I5RTM0QzBEQjEwRDJG
NERFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmOWJmNzk3LTkxM2QtNDhkZC04
MzJjLTMzYjQwOWI1Zjc5Yi8wLzMxMzAzMzJlMzEzMTM2MmUzMTMxMzIyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM0MzUzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3RwMA0GCSqG
SIb3DQEBCwUAA4IBAQArLTQxlXQeaytunY1dZturiO0yOS4Vpn8hsi02F9e3Kyl0
Saxuq1vfuN5yAhPYftAlGBwca4ytMdruzdg4+8V3cwHE022Ox8JpgARr6vVPzGcA
KcVSA/KLriJEEl0DnmAcE+kVDt5ODzaUKC4BIpt3I7MpShcNw3IbquEdGxNW8W6k
Y8q6LN0TC15UYvRdMNsEfqXSgRecuZ6ks7x8SLWhPSyEhrXoD8B8UtbxdJR+tUDF
ywFByT42n06ovBM5qScoMcEHeTmWfJyGHZ41KOHuUFyev4St2bRmQk+a0ODyYFNS
WNabkx7tphmH2rnLlcxPRMo6LI5J/Vn/+TEgCa2X
-----END CERTIFICATE-----
Generated at Wed May 13 09:09:27 2026 by rpki-client