
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa
File: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (raw, json)
Hash identifier: Mw0Zx/sSQWD0MgxT9iC938oEtx/GmaYcvCuMJEo7uW0=
Subject key identifier: 7A:61:00:77:3D:FD:4A:9D:8B:35:AA:3B:CF:2C:25:C5:9E:AB:FB:E1
Certificate issuer: /CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C
Certificate serial: 319D49E6289346CC4096409E83CCF6B9A8EF2149
Authority key identifier: 56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa
Signing time: Sun 03 May 2026 03:12:22 +0000
ROA not before: Sun 03 May 2026 03:07:22 +0000
ROA not after: Sun 02 May 2027 03:12:22 +0000
asID: 151584
IP address blocks: 103.216.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl
rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9d:49:e6:28:93:46:cc:40:96:40:9e:83:cc:f6:b9:a8:ef:21:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C
Validity
Not Before: May 3 03:07:22 2026 GMT
Not After : May 2 03:12:22 2027 GMT
Subject: CN=7A6100773DFD4A9D8B35AA3BCF2C25C59EABFBE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:68:fe:09:8a:c3:84:22:90:c3:33:fc:8a:
76:01:ad:a5:89:61:65:76:70:10:b0:d0:17:7c:9a:
eb:1d:f2:1e:a9:66:c3:7c:c8:c3:64:2f:61:a1:48:
cf:37:a4:7f:53:3d:45:06:ec:18:68:42:c0:f2:86:
c4:0c:f7:43:b1:80:62:f5:1b:f5:75:9b:a0:62:50:
81:40:f9:52:17:15:8f:b1:aa:51:35:06:5f:be:71:
eb:e1:b2:28:71:ef:41:e4:ed:e1:d4:55:8c:0f:94:
29:b1:54:7f:77:88:92:98:24:86:76:ee:60:05:9a:
f1:74:e3:fa:0a:51:e4:a1:c8:9d:12:6e:c3:51:23:
0f:f3:f4:5a:70:81:01:fd:a4:08:35:64:40:c2:f2:
11:97:13:2c:24:7e:37:5c:8a:62:df:7f:8f:83:0b:
af:42:a2:bd:ee:28:b4:34:90:71:58:09:98:f6:f0:
f2:81:24:64:97:ba:df:7d:b9:8b:eb:97:77:af:69:
e5:88:1c:d3:3f:74:a5:de:42:66:9a:f4:87:12:37:
e3:4d:80:24:47:dd:2b:66:d6:5f:ee:19:31:a7:9f:
be:65:78:8a:66:85:62:08:47:bf:5c:8f:35:48:e0:
99:d1:c9:e5:cf:d7:60:99:99:37:9b:bd:49:76:8d:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:61:00:77:3D:FD:4A:9D:8B:35:AA:3B:CF:2C:25:C5:9E:AB:FB:E1
X509v3 Authority Key Identifier:
keyid:56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.107.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:21:f6:4b:85:ad:f8:e8:cf:38:99:be:ff:73:3c:25:75:8c:
cc:aa:0e:d0:20:69:07:5d:71:08:0a:fb:1d:11:b8:04:59:ab:
f3:ca:96:9a:09:7d:15:ae:cf:7c:6e:6b:74:6e:e4:d7:af:b0:
34:07:83:15:4c:0c:ab:7f:61:bf:cf:e7:7a:54:0d:9f:a7:9e:
9c:20:eb:c5:5b:55:c4:e7:14:69:fd:4c:fe:13:03:76:a7:25:
c0:e5:43:cb:09:47:cf:fb:c1:1d:a7:aa:39:2c:96:aa:54:80:
bb:91:c7:d8:b4:d9:6b:96:bf:64:91:d5:72:07:0a:67:d4:94:
a6:8f:57:f9:01:c8:7b:7a:2f:77:7d:51:51:f8:29:d3:3f:68:
3b:28:9a:27:79:7c:93:3f:37:9e:8f:84:51:79:b1:15:8d:d6:
88:6a:9b:3c:f7:2b:fd:32:84:ec:47:26:7e:63:5b:e9:c0:97:
04:0f:dc:e6:85:23:6d:86:49:cf:6b:bd:e1:70:25:bd:b9:95:
93:33:94:f7:88:55:78:ed:d6:bb:5b:ff:23:24:95:2f:4f:b1:
bb:8e:39:b2:98:06:ea:17:96:7e:d1:d1:8e:4c:96:5c:22:83:
5d:f6:03:10:5d:a0:42:f1:33:0d:c0:e1:7d:f2:10:f2:51:77:
3d:75:e7:18
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUMZ1J5iiTRsxAlkCeg8z2uajvIUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZCNzY5RjJCMzY5RkYxRTIyQzNBRENEM0Q1MEVDMURD
MDE1MjQ2QzAeFw0yNjA1MDMwMzA3MjJaFw0yNzA1MDIwMzEyMjJaMDMxMTAvBgNV
BAMTKDdBNjEwMDc3M0RGRDRBOUQ4QjM1QUEzQkNGMkMyNUM1OUVBQkZCRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrTGj+CYrDhCKQwzP8inYBraWJ
YWV2cBCw0Bd8musd8h6pZsN8yMNkL2GhSM83pH9TPUUG7BhoQsDyhsQM90OxgGL1
G/V1m6BiUIFA+VIXFY+xqlE1Bl++cevhsihx70Hk7eHUVYwPlCmxVH93iJKYJIZ2
7mAFmvF04/oKUeShyJ0SbsNRIw/z9FpwgQH9pAg1ZEDC8hGXEywkfjdcimLff4+D
C69Cor3uKLQ0kHFYCZj28PKBJGSXut99uYvrl3evaeWIHNM/dKXeQmaa9IcSN+NN
gCRH3Stm1l/uGTGnn75leIpmhWIIR79cjzVI4JnRyeXP12CZmTebvUl2jXp/AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUemEAdz39Sp2LNao7zywlxZ6r++EwHwYDVR0j
BBgwFoAUVrdp8rNp/x4iw63NPVDsHcAVJGwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGZlZjM4OTAtNDQ1ZC00YjIzLThmYjMtYjMwMThhNzk5ZWNlLzAvNTZCNzY5RjJC
MzY5RkYxRTIyQzNBRENEM0Q1MEVDMURDMDE1MjQ2Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NkI3NjlGMkIzNjlGRjFFMjJDM0FEQ0QzRDUwRUMxREMwMTUy
NDZDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmZWYzODkwLTQ0NWQtNGIyMy04
ZmIzLWIzMDE4YTc5OWVjZS8wLzMxMzAzMzJlMzIzMTM2MmUzMTMwMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn2GswDQYJ
KoZIhvcNAQELBQADggEBAA4h9kuFrfjozziZvv9zPCV1jMyqDtAgaQddcQgK+x0R
uARZq/PKlpoJfRWuz3xua3Ru5NevsDQHgxVMDKt/Yb/P53pUDZ+nnpwg68VbVcTn
FGn9TP4TA3anJcDlQ8sJR8/7wR2nqjkslqpUgLuRx9i02WuWv2SR1XIHCmfUlKaP
V/kByHt6L3d9UVH4KdM/aDsomid5fJM/N56PhFF5sRWN1ohqmzz3K/0yhOxHJn5j
W+nAlwQP3OaFI22GSc9rveFwJb25lZMzlPeIVXjt1rtb/yMklS9PsbuOObKYBuoX
ln7R0Y5Mllwig132AxBdoELxMw3A4X3yEPJRdz115xg=
-----END CERTIFICATE-----
Generated at Wed May 13 04:08:51 2026 by rpki-client