
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35342e302f32332d3233203d3e20313530393637.roa
File: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (raw, json)
Hash identifier: Iu8i3UFA5NfxNCWcLP6UJ8lab0FJ/BYVXvfcqAte7gA=
Subject key identifier: 1D:91:21:A2:99:24:90:73:E1:B2:E3:99:71:05:79:52:9E:97:1F:3F
Certificate issuer: /CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87
Certificate serial: 7D9A182A5F6CAC072674C7003BE298A0A0CDBA69
Authority key identifier: 63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35342e302f32332d3233203d3e20313530393637.roa
Signing time: Sun 03 May 2026 03:12:14 +0000
ROA not before: Sun 03 May 2026 03:07:14 +0000
ROA not after: Sun 02 May 2027 03:12:14 +0000
asID: 150967
IP address blocks: 103.96.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl
rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:9a:18:2a:5f:6c:ac:07:26:74:c7:00:3b:e2:98:a0:a0:cd:ba:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87
Validity
Not Before: May 3 03:07:14 2026 GMT
Not After : May 2 03:12:14 2027 GMT
Subject: CN=1D9121A299249073E1B2E399710579529E971F3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:eb:3a:98:70:b9:0e:17:09:68:c0:2b:8b:
72:2b:76:6e:f3:02:72:da:ac:1f:84:ca:b4:45:b3:
e1:07:e7:47:22:fb:0b:05:3e:55:16:f3:97:0e:31:
78:b6:c5:3c:2d:49:d2:a4:85:64:09:87:33:a1:67:
87:a6:16:fa:ce:05:79:bc:37:cd:cd:7d:c8:36:c5:
83:16:77:8c:b8:8f:24:84:54:66:1b:5d:7e:93:19:
cc:ad:b3:73:12:58:83:65:b1:0f:e1:70:e6:c7:de:
4c:45:c6:6b:23:e1:9c:d0:0c:09:d6:5d:2c:fa:e7:
cf:db:73:d9:ce:66:5c:98:f8:d3:2c:21:35:93:d7:
e7:0e:8c:1c:a0:b1:c5:6a:d6:f3:9f:f3:e4:cb:50:
17:aa:61:07:ce:63:55:5b:de:9d:c5:2d:c4:3d:67:
90:7e:14:6f:ea:fb:21:cb:ed:4c:86:81:77:05:54:
9b:bf:6d:57:89:80:84:ac:cd:5d:fa:63:1b:43:23:
48:46:68:90:4d:05:60:d3:4c:c1:57:9e:48:5a:f7:
5b:48:31:15:f0:38:d0:c5:7a:4f:c0:08:56:5b:0b:
15:3a:4f:5f:5e:ef:6f:a2:75:94:6b:18:64:a2:09:
21:b5:4a:c2:29:99:33:f3:f8:ca:9a:00:ae:48:32:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:91:21:A2:99:24:90:73:E1:B2:E3:99:71:05:79:52:9E:97:1F:3F
X509v3 Authority Key Identifier:
keyid:63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/3130332e39362e35342e302f32332d3233203d3e20313530393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.54.0/23
Signature Algorithm: sha256WithRSAEncryption
71:47:01:2e:1c:09:c7:11:2d:14:76:19:3f:73:3f:26:91:c8:
38:76:02:a0:10:f7:3d:a4:a7:f2:27:f0:73:74:d2:d4:c2:19:
92:e2:e9:52:e4:aa:79:03:d6:a7:0a:a8:1c:d1:a7:af:5d:e6:
a9:d4:29:ba:c0:57:91:25:04:2b:05:20:0c:59:f4:93:2a:4d:
42:cb:be:9e:05:f4:0e:75:a5:b0:24:8e:0a:41:a8:f3:cd:5c:
c2:c7:a9:f4:89:ee:eb:ba:92:45:9d:67:2c:5b:29:1b:63:0b:
a7:cf:71:a7:4e:42:4f:31:00:9e:a2:cb:bc:fa:55:0d:00:03:
fd:31:22:08:ea:1e:c2:89:51:93:9f:53:39:46:06:7c:4d:ff:
81:18:5c:30:81:85:85:34:17:99:20:4e:0d:f8:35:db:16:8f:
93:21:3c:d6:62:44:91:66:66:d4:5e:96:ac:9a:d6:c6:68:b2:
79:a8:d3:b0:30:35:ec:d1:20:cb:c2:e0:a1:ee:be:cc:27:5b:
a7:cc:78:db:23:34:c6:bf:70:b7:c3:1d:8e:9e:ab:a4:8e:a2:
63:03:2f:b9:81:21:90:c6:6a:09:71:9c:d5:5d:10:ba:fb:b3:
61:61:79:e5:dd:e3:e3:8b:f2:23:dd:b2:92:46:66:6c:a8:bf:
39:e5:2c:fa
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfZoYKl9srAcmdMcAO+KYoKDNumkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM2M0I5NkQ5Mjk0RUJCOTg3NkFBQkYyRUExQTJEQjBE
RDU1M0Q4NzAeFw0yNjA1MDMwMzA3MTRaFw0yNzA1MDIwMzEyMTRaMDMxMTAvBgNV
BAMTKDFEOTEyMUEyOTkyNDkwNzNFMUIyRTM5OTcxMDU3OTUyOUU5NzFGM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOn+s6mHC5DhcJaMAri3Irdm7z
AnLarB+EyrRFs+EH50ci+wsFPlUW85cOMXi2xTwtSdKkhWQJhzOhZ4emFvrOBXm8
N83Nfcg2xYMWd4y4jySEVGYbXX6TGcyts3MSWINlsQ/hcObH3kxFxmsj4ZzQDAnW
XSz658/bc9nOZlyY+NMsITWT1+cOjBygscVq1vOf8+TLUBeqYQfOY1Vb3p3FLcQ9
Z5B+FG/q+yHL7UyGgXcFVJu/bVeJgISszV36YxtDI0hGaJBNBWDTTMFXnkha91tI
MRXwONDFek/ACFZbCxU6T19e72+idZRrGGSiCSG1SsIpmTPz+MqaAK5IMvbxAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUHZEhopkkkHPhsuOZcQV5Up6XHz8wHwYDVR0j
BBgwFoAUY2O5bZKU67mHaqvy6hotsN1VPYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGZjNmFkNjQtNzU0My00OGFkLWIxNTgtZTgyNjc2YTExYzcwLzAvNjM2M0I5NkQ5
Mjk0RUJCOTg3NkFBQkYyRUExQTJEQjBERDU1M0Q4Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82MzYzQjk2RDkyOTRFQkI5ODc2QUFCRjJFQTFBMkRCMERENTUz
RDg3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmYzZhZDY0LTc1NDMtNDhhZC1i
MTU4LWU4MjY3NmExMWM3MC8wLzMxMzAzMzJlMzkzNjJlMzUzNDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzUzMDM5MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdgNjANBgkqhkiG
9w0BAQsFAAOCAQEAcUcBLhwJxxEtFHYZP3M/JpHIOHYCoBD3PaSn8ifwc3TS1MIZ
kuLpUuSqeQPWpwqoHNGnr13mqdQpusBXkSUEKwUgDFn0kypNQsu+ngX0DnWlsCSO
CkGo881cwsep9Inu67qSRZ1nLFspG2MLp89xp05CTzEAnqLLvPpVDQAD/TEiCOoe
wolRk59TOUYGfE3/gRhcMIGFhTQXmSBODfg12xaPkyE81mJEkWZm1F6WrJrWxmiy
eajTsDA17NEgy8Lgoe6+zCdbp8x42yM0xr9wt8Mdjp6rpI6iYwMvuYEhkMZqCXGc
1V0QuvuzYWF55d3j44vyI92ykkZmbKi/OeUs+g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:56:13 2026 by rpki-client