
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa
File: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (raw, json)
Hash identifier: CdzPgARwHWVAiNVpWfYHHcwq4khjb1oCYEqwBbuFJZI=
Subject key identifier: 4F:9E:FB:47:B3:FD:82:AE:D0:18:AB:69:F9:2C:00:01:25:BD:71:89
Certificate issuer: /CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76
Certificate serial: 421193FB668F66D47046AD1995DB442DF1DFC2D4
Authority key identifier: DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa
Signing time: Sun 03 May 2026 03:13:07 +0000
ROA not before: Sun 03 May 2026 03:08:07 +0000
ROA not after: Sun 02 May 2027 03:13:07 +0000
asID: 149717
IP address blocks: 103.186.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl
rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:11:93:fb:66:8f:66:d4:70:46:ad:19:95:db:44:2d:f1:df:c2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76
Validity
Not Before: May 3 03:08:07 2026 GMT
Not After : May 2 03:13:07 2027 GMT
Subject: CN=4F9EFB47B3FD82AED018AB69F92C000125BD7189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:93:8a:a4:c1:c6:f0:a4:50:bf:35:89:fe:
48:9c:c7:ed:a7:c3:e7:ca:c8:a6:de:39:a6:c3:db:
85:58:73:fb:c2:ab:85:e8:f5:93:e7:17:2f:aa:dc:
b1:ed:0e:19:1a:f2:3e:9f:20:e8:54:57:94:85:af:
f9:bf:6b:8e:b6:73:cf:26:61:80:bc:b2:40:f1:76:
78:fe:0f:cd:0b:5a:af:bf:dc:9c:dc:cf:43:ca:a3:
45:ef:c6:5f:bb:1e:8c:ff:da:ea:d6:52:ba:fe:55:
77:20:32:a0:c4:b3:9a:44:ac:8a:b0:02:af:f2:40:
02:cb:0a:c4:d7:2c:13:51:95:c5:87:5e:e4:75:18:
38:2e:bf:95:86:a2:6e:c9:10:c3:c1:43:05:ea:ce:
56:30:c3:41:8d:6c:16:e0:56:48:68:43:f8:71:10:
81:9f:e4:ee:cb:9d:51:98:37:61:8a:aa:1d:d3:a7:
58:9d:6c:eb:af:99:ea:24:dd:b4:77:ee:5a:73:0a:
2a:ee:cb:24:37:58:7f:d3:7b:87:2c:57:a0:47:53:
b4:c2:0c:b4:9f:a7:85:5e:b7:a1:23:59:85:d1:f0:
a6:6f:f7:b2:c4:3e:4c:3f:9c:3c:81:10:e0:ef:e8:
ae:90:83:98:d9:33:47:90:7d:5b:19:c3:ac:40:a7:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9E:FB:47:B3:FD:82:AE:D0:18:AB:69:F9:2C:00:01:25:BD:71:89
X509v3 Authority Key Identifier:
keyid:DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.89.0/24
Signature Algorithm: sha256WithRSAEncryption
48:41:ff:fc:56:0b:dc:e1:6f:93:42:db:8c:b3:a1:c4:c4:7c:
b3:34:a2:c2:c1:41:48:d2:25:80:9f:55:d5:43:d9:db:02:c8:
5e:20:69:1b:ef:2e:30:33:42:7e:3b:cc:b5:f6:d6:c8:32:8b:
8a:9a:2d:ec:4c:1c:07:f4:8e:b0:18:a7:8f:ae:c2:ed:79:c3:
c7:5f:74:08:cf:34:46:58:0d:ef:68:da:3b:39:0d:b0:84:b0:
e0:ea:95:a0:72:2d:53:52:d8:f7:ed:c8:04:f9:1f:97:97:66:
18:2e:97:ca:8a:15:fb:86:af:46:c1:ef:ab:32:65:d5:c4:bc:
38:30:ae:2e:76:14:19:71:cb:82:f7:a7:ea:80:12:4a:6b:e7:
4b:aa:dc:62:c9:ad:5a:9b:36:84:c6:09:57:3e:6a:41:a5:aa:
60:f7:cd:8f:e2:d7:ef:c3:c9:f1:36:af:f3:0d:ea:8f:ef:1c:
ce:a1:85:c0:f9:0e:f7:08:c4:a4:a7:9a:87:86:0e:b5:56:07:
8a:e5:df:75:4b:49:dd:6b:ad:75:a0:e1:ea:6e:e0:8c:fe:c5:
60:e4:d0:85:df:5a:62:43:cd:33:dc:bb:0d:9b:1d:57:c9:12:
17:fe:6b:f3:f2:49:21:d9:79:3c:9e:57:30:27:65:bf:98:ab:
54:8e:9e:b9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQhGT+2aPZtRwRq0ZldtELfHfwtQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1
MjI2NEQ3NjAeFw0yNjA1MDMwMzA4MDdaFw0yNzA1MDIwMzEzMDdaMDMxMTAvBgNV
BAMTKDRGOUVGQjQ3QjNGRDgyQUVEMDE4QUI2OUY5MkMwMDAxMjVCRDcxODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2ZOKpMHG8KRQvzWJ/kicx+2n
w+fKyKbeOabD24VYc/vCq4Xo9ZPnFy+q3LHtDhka8j6fIOhUV5SFr/m/a462c88m
YYC8skDxdnj+D80LWq+/3Jzcz0PKo0Xvxl+7Hoz/2urWUrr+VXcgMqDEs5pErIqw
Aq/yQALLCsTXLBNRlcWHXuR1GDguv5WGom7JEMPBQwXqzlYww0GNbBbgVkhoQ/hx
EIGf5O7LnVGYN2GKqh3Tp1idbOuvmeok3bR37lpzCiruyyQ3WH/Te4csV6BHU7TC
DLSfp4Vet6EjWYXR8KZv97LEPkw/nDyBEODv6K6Qg5jZM0eQfVsZw6xAp/79AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUT577R7P9gq7QGKtp+SwAASW9cYkwHwYDVR0j
BBgwFoAU3KpQDlbfWbaBet4dUbVgX1ImTXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTMyOTVkZTYtMjA1OC00NmE3LTkzNmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1
NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1MjI2NEQ3Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EQ0FBNTAwRTU2REY1OUI2ODE3QURFMUQ1MUI1NjA1RjUyMjY0
RDc2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2UzMjk1ZGU2LTIwNTgtNDZhNy05
MzZiLTA1MmNmMmZhOTIwZC8wLzMxMzAzMzJlMzEzODM2MmUzODM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7pZMA0GCSqG
SIb3DQEBCwUAA4IBAQBIQf/8Vgvc4W+TQtuMs6HExHyzNKLCwUFI0iWAn1XVQ9nb
AsheIGkb7y4wM0J+O8y19tbIMouKmi3sTBwH9I6wGKePrsLtecPHX3QIzzRGWA3v
aNo7OQ2whLDg6pWgci1TUtj37cgE+R+Xl2YYLpfKihX7hq9Gwe+rMmXVxLw4MK4u
dhQZccuC96fqgBJKa+dLqtxiya1amzaExglXPmpBpapg982P4tfvw8nxNq/zDeqP
7xzOoYXA+Q73CMSkp5qHhg61VgeK5d91S0nda611oOHqbuCM/sVg5NCF31piQ80z
3LsNmx1XyRIX/mvz8kkh2Xk8nlcwJ2W/mKtUjp65
-----END CERTIFICATE-----
Generated at Wed May 13 07:56:26 2026 by rpki-client