
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa
File: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (raw, json)
Hash identifier: fD7AXzzRekNw/K0iCKi41nGKBP7FKJCCqtJkswohhe4=
Subject key identifier: 9A:5B:26:11:B9:E0:C7:EC:CA:42:1A:C8:83:F0:12:8F:28:B7:82:DE
Certificate issuer: /CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
Certificate serial: 046D55CED1991009041CFFBBF065486D101E2050
Authority key identifier: A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa
Signing time: Sun 03 May 2026 03:13:28 +0000
ROA not before: Sun 03 May 2026 03:08:28 +0000
ROA not after: Sun 02 May 2027 03:13:28 +0000
asID: 141621
IP address blocks: 103.161.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl
rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6d:55:ce:d1:99:10:09:04:1c:ff:bb:f0:65:48:6d:10:1e:20:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4
Validity
Not Before: May 3 03:08:28 2026 GMT
Not After : May 2 03:13:28 2027 GMT
Subject: CN=9A5B2611B9E0C7ECCA421AC883F0128F28B782DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:48:0c:6a:f3:4a:2c:4c:15:68:19:3b:be:de:
91:44:05:19:a4:7a:29:2c:f1:13:43:25:3b:f5:ab:
6c:26:0c:cf:d4:b2:39:fc:c8:6e:a4:0a:b6:dd:44:
d8:bc:0f:d0:34:db:75:7f:38:bf:3f:6a:ab:0e:2c:
83:18:75:5d:d2:e3:ae:85:bd:fd:71:d5:66:f3:84:
01:31:3a:24:3a:35:2c:fe:fe:3d:e7:91:63:6e:f2:
29:89:7e:0f:1f:79:30:99:b3:11:3c:1f:3e:40:62:
e4:7e:54:2f:05:54:07:43:59:4c:6a:9e:9a:23:9b:
28:aa:e4:4a:7d:ba:93:fa:3d:f9:b3:63:67:79:ae:
21:85:ac:51:6f:6b:32:71:7c:81:dd:3f:b5:cc:c7:
d1:50:b5:5e:25:1f:5a:74:13:f7:70:6d:9a:34:ad:
34:7c:c0:ec:2c:6b:78:f9:32:f4:b9:5f:86:a0:f4:
73:b8:73:17:2e:9d:ff:4e:6d:92:6a:36:43:1b:f6:
77:d3:4a:6e:fc:26:3b:20:a9:d1:6f:1a:47:36:e6:
95:a4:24:84:8c:20:a7:19:cf:50:a7:f0:c1:40:ac:
1f:ed:16:ff:a8:fb:fd:8b:94:57:25:6f:1f:77:fe:
52:65:f1:a3:7a:d7:d7:ea:20:36:2d:41:33:92:17:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5B:26:11:B9:E0:C7:EC:CA:42:1A:C8:83:F0:12:8F:28:B7:82:DE
X509v3 Authority Key Identifier:
keyid:A4:A6:D0:55:E5:68:DD:9D:FF:4F:A7:B8:A9:8E:26:E5:47:D2:E9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A6D055E568DD9DFF4FA7B8A98E26E547D2E9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.165.0/24
Signature Algorithm: sha256WithRSAEncryption
93:dc:fa:5b:c5:b2:a5:f5:5e:eb:cc:41:ed:cc:f3:a9:08:3d:
07:5d:3a:73:a6:72:64:21:a9:d6:e1:96:19:10:33:11:7f:81:
33:aa:ee:d2:af:36:68:e6:75:01:82:c7:12:3b:23:77:a1:2e:
4b:96:1f:10:b2:48:26:c0:fa:66:22:73:2f:6b:6d:3d:66:34:
42:0d:30:83:3d:6a:c8:3c:cd:8e:7d:88:8f:fc:29:0c:6a:55:
29:d7:23:69:2c:e5:5b:07:36:93:05:aa:20:27:58:5c:fd:01:
48:98:0d:c7:97:85:35:29:11:04:69:ab:d9:c4:ce:62:ea:1a:
ff:64:c5:8d:08:4d:b4:ae:2f:a4:04:0c:f3:66:37:40:06:9f:
b3:6c:99:c5:9f:ba:d9:ad:98:99:a9:ec:54:20:32:13:ec:68:
d7:09:3b:a5:40:0b:5d:01:ef:1b:40:f9:95:61:ce:6c:c8:b7:
39:1c:16:10:7e:24:94:e0:62:b5:34:a0:0e:37:5c:4d:ca:9d:
a6:ca:b7:2f:bc:f0:c5:3e:d0:86:dd:78:65:16:43:0e:ea:47:
76:cf:04:97:0e:fc:ae:5b:e4:c8:23:aa:e4:8a:d1:c5:94:e6:
16:e6:dc:a9:a8:e5:c8:30:06:4f:8b:67:d9:c7:5d:6f:36:3f:
30:02:ba:09
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUBG1VztGZEAkEHP+78GVIbRAeIFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRBNkQwNTVFNTY4REQ5REZGNEZBN0I4QTk4RTI2RTU0
N0QyRTlDNDAeFw0yNjA1MDMwMzA4MjhaFw0yNzA1MDIwMzEzMjhaMDMxMTAvBgNV
BAMTKDlBNUIyNjExQjlFMEM3RUNDQTQyMUFDODgzRjAxMjhGMjhCNzgyREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKSAxq80osTBVoGTu+3pFEBRmk
eiks8RNDJTv1q2wmDM/Usjn8yG6kCrbdRNi8D9A023V/OL8/aqsOLIMYdV3S466F
vf1x1WbzhAExOiQ6NSz+/j3nkWNu8imJfg8feTCZsxE8Hz5AYuR+VC8FVAdDWUxq
npojmyiq5Ep9upP6PfmzY2d5riGFrFFvazJxfIHdP7XMx9FQtV4lH1p0E/dwbZo0
rTR8wOwsa3j5MvS5X4ag9HO4cxcunf9ObZJqNkMb9nfTSm78JjsgqdFvGkc25pWk
JISMIKcZz1Cn8MFArB/tFv+o+/2LlFclbx93/lJl8aN619fqIDYtQTOSF/pZAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUmlsmEbngx+zKQhrIg/ASjyi3gt4wHwYDVR0j
BBgwFoAUpKbQVeVo3Z3/T6e4qY4m5UfS6cQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTUxN2ZlOTgtOGY1OC00OTdmLWJlNTctODY2NWE3YTA0YmIwLzAvQTRBNkQwNTVF
NTY4REQ5REZGNEZBN0I4QTk4RTI2RTU0N0QyRTlDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNEE2RDA1NUU1NjhERDlERkY0RkE3QjhBOThFMjZFNTQ3RDJF
OUM0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U1MTdmZTk4LThmNTgtNDk3Zi1i
ZTU3LTg2NjVhN2EwNGJiMC8wLzMxMzAzMzJlMzEzNjMxMmUzMTM2MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMyMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoaUwDQYJ
KoZIhvcNAQELBQADggEBAJPc+lvFsqX1XuvMQe3M86kIPQddOnOmcmQhqdbhlhkQ
MxF/gTOq7tKvNmjmdQGCxxI7I3ehLkuWHxCySCbA+mYicy9rbT1mNEINMIM9asg8
zY59iI/8KQxqVSnXI2ks5VsHNpMFqiAnWFz9AUiYDceXhTUpEQRpq9nEzmLqGv9k
xY0ITbSuL6QEDPNmN0AGn7NsmcWfutmtmJmp7FQgMhPsaNcJO6VAC10B7xtA+ZVh
zmzItzkcFhB+JJTgYrU0oA43XE3KnabKty+88MU+0IbdeGUWQw7qR3bPBJcO/K5b
5MgjquSK0cWU5hbm3Kmo5cgwBk+LZ9nHXW82PzACugk=
-----END CERTIFICATE-----
Generated at Wed May 13 07:46:18 2026 by rpki-client