
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa
File: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (raw, json)
Hash identifier: EarQVvbcyhKmaxD6rqFZgUQY/Ww5omgDD2NzWO0knDY=
Subject key identifier: 81:72:26:FD:25:BD:01:5A:CC:04:18:17:64:E6:C6:D1:D3:E6:81:70
Certificate issuer: /CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
Certificate serial: 5CE471525071B58AFE119DB0A5BCC1E30F81EA0A
Authority key identifier: A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa
Signing time: Sun 03 May 2026 03:13:29 +0000
ROA not before: Sun 03 May 2026 03:08:29 +0000
ROA not after: Sun 02 May 2027 03:13:29 +0000
asID: 141621
IP address blocks: 103.161.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl
rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e4:71:52:50:71:b5:8a:fe:11:9d:b0:a5:bc:c1:e3:0f:81:ea:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
Validity
Not Before: May 3 03:08:29 2026 GMT
Not After : May 2 03:13:29 2027 GMT
Subject: CN=817226FD25BD015ACC04181764E6C6D1D3E68170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:69:cc:1e:7f:07:80:c5:0c:1b:61:77:11:
71:0c:44:a7:d6:e0:e4:5a:4d:27:26:5e:0d:ba:0d:
17:d6:80:5f:cb:06:19:c8:e8:95:0b:7e:6d:3f:5b:
b0:72:3a:1a:97:12:50:a0:3a:d0:85:0e:5a:d2:5b:
a3:1a:11:7c:ed:c7:4d:af:2a:bb:93:4b:5b:e0:d9:
c1:9f:28:61:09:da:a3:99:85:64:a9:0c:0d:be:05:
c1:10:46:60:f4:c2:44:5a:64:a5:a4:ec:21:27:be:
34:39:fa:6d:59:51:22:0d:42:8f:c8:73:24:dd:ad:
f4:82:5b:bc:34:f2:6d:0c:79:27:6c:37:e1:f9:70:
a6:49:44:d6:18:40:ba:79:ee:11:eb:81:47:56:53:
cd:5a:39:4a:5e:1a:2a:12:9c:01:13:9a:ce:82:7e:
0b:f0:4a:a0:34:b1:53:c6:4c:8a:c7:58:ce:1b:57:
e0:81:a0:27:88:4e:26:b4:99:9e:db:d1:c2:2c:c7:
25:2f:c3:d7:e1:0d:43:58:7d:ca:c0:45:37:84:ae:
5f:9e:68:a0:6d:f5:58:c0:f8:3a:24:fe:dc:c9:4a:
6d:b7:c7:11:f5:b9:0a:b3:6b:68:6c:e3:a9:96:f0:
ab:63:97:bd:32:20:1b:26:1a:d6:81:32:ac:d8:52:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:72:26:FD:25:BD:01:5A:CC:04:18:17:64:E6:C6:D1:D3:E6:81:70
X509v3 Authority Key Identifier:
keyid:A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.164.0/23
Signature Algorithm: sha256WithRSAEncryption
97:4b:1e:8f:6d:d6:4f:4c:29:a5:57:b3:22:c3:55:42:cc:97:
2b:d1:63:4a:92:09:29:92:b1:28:73:f9:fe:95:07:a5:c7:d1:
d5:69:e1:d3:ff:fa:a7:5d:f8:a6:fe:df:ea:e3:81:34:ae:68:
a0:7b:b1:34:6e:5a:76:21:ed:09:80:86:d0:54:42:8a:bc:a6:
0f:2e:13:27:10:d9:e0:83:3d:55:d6:05:1e:44:7b:09:d0:b4:
f9:12:7d:6f:72:ea:6b:51:77:40:e9:8e:dd:73:32:a0:cc:d0:
e5:2f:2c:f7:f2:e0:50:67:e3:42:47:a3:62:27:4b:11:c2:4a:
6f:82:1b:c0:a2:31:95:9b:08:bb:96:e0:34:4f:a7:c6:2f:22:
10:24:5d:b9:3f:72:f4:0d:0c:92:e0:6b:20:1b:49:f2:84:93:
c0:e3:51:26:af:92:21:86:75:8d:6f:01:f8:90:a6:36:d6:8c:
9d:29:e0:54:1d:18:96:cb:9a:e4:68:11:cb:09:24:7f:b2:35:
5e:2d:16:66:ed:85:8e:99:49:6b:f1:8c:ee:d3:a8:f2:f5:31:
ec:9c:d1:c9:76:0d:9d:6e:30:7c:32:0a:e5:5f:9a:b7:77:be:
68:15:50:f5:a4:ff:df:42:f8:c4:12:db:c4:38:f1:e4:14:ae:
90:20:0d:3a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUXORxUlBxtYr+EZ2wpbzB4w+B6gowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRBNkQwNTVFNTY4REQ5REZGNEZBN0I4QTk4RTI2RTU0
N0QyRTlDNDAeFw0yNjA1MDMwMzA4MjlaFw0yNzA1MDIwMzEzMjlaMDMxMTAvBgNV
BAMTKDgxNzIyNkZEMjVCRDAxNUFDQzA0MTgxNzY0RTZDNkQxRDNFNjgxNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTe2nMHn8HgMUMG2F3EXEMRKfW
4ORaTScmXg26DRfWgF/LBhnI6JULfm0/W7ByOhqXElCgOtCFDlrSW6MaEXztx02v
KruTS1vg2cGfKGEJ2qOZhWSpDA2+BcEQRmD0wkRaZKWk7CEnvjQ5+m1ZUSINQo/I
cyTdrfSCW7w08m0MeSdsN+H5cKZJRNYYQLp57hHrgUdWU81aOUpeGioSnAETms6C
fgvwSqA0sVPGTIrHWM4bV+CBoCeITia0mZ7b0cIsxyUvw9fhDUNYfcrARTeErl+e
aKBt9VjA+Dok/tzJSm23xxH1uQqza2hs46mW8Ktjl70yIBsmGtaBMqzYUjhZAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUgXIm/SW9AVrMBBgXZObG0dPmgXAwHwYDVR0j
BBgwFoAUpKbQVeVo3Z3/T6e4qY4m5UfS6cQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTUxN2ZlOTgtOGY1OC00OTdmLWJlNTctODY2NWE3YTA0YmIwLzAvQTRBNkQwNTVF
NTY4REQ5REZGNEZBN0I4QTk4RTI2RTU0N0QyRTlDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNEE2RDA1NUU1NjhERDlERkY0RkE3QjhBOThFMjZFNTQ3RDJF
OUM0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U1MTdmZTk4LThmNTgtNDk3Zi1i
ZTU3LTg2NjVhN2EwNGJiMC8wLzMxMzAzMzJlMzEzNjMxMmUzMTM2MzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjMyMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoaQwDQYJ
KoZIhvcNAQELBQADggEBAJdLHo9t1k9MKaVXsyLDVULMlyvRY0qSCSmSsShz+f6V
B6XH0dVp4dP/+qdd+Kb+3+rjgTSuaKB7sTRuWnYh7QmAhtBUQoq8pg8uEycQ2eCD
PVXWBR5EewnQtPkSfW9y6mtRd0Dpjt1zMqDM0OUvLPfy4FBn40JHo2InSxHCSm+C
G8CiMZWbCLuW4DRPp8YvIhAkXbk/cvQNDJLgayAbSfKEk8DjUSavkiGGdY1vAfiQ
pjbWjJ0p4FQdGJbLmuRoEcsJJH+yNV4tFmbthY6ZSWvxjO7TqPL1Meyc0cl2DZ1u
MHwyCuVfmrd3vmgVUPWk/99C+MQS28Q48eQUrpAgDTo=
-----END CERTIFICATE-----
Generated at Wed May 13 04:50:59 2026 by rpki-client