
$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa
File: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (raw, json)
Hash identifier: J9Ppr3YgZsd8hgKwRlpPASzO8XUT6qbE4ua4z+T5rRI=
Subject key identifier: E3:2C:A3:1F:67:99:41:5B:86:91:0C:7D:3E:B5:87:64:D7:3C:AD:7F
Certificate issuer: /CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F
Certificate serial: 0948A1B89160DB1F8359C0749AEECFC89942C984
Authority key identifier: 82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa
Signing time: Sun 03 May 2026 03:15:22 +0000
ROA not before: Sun 03 May 2026 03:10:22 +0000
ROA not after: Sun 02 May 2027 03:15:22 +0000
asID: 142365
IP address blocks: 103.170.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl
rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:48:a1:b8:91:60:db:1f:83:59:c0:74:9a:ee:cf:c8:99:42:c9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F
Validity
Not Before: May 3 03:10:22 2026 GMT
Not After : May 2 03:15:22 2027 GMT
Subject: CN=E32CA31F6799415B86910C7D3EB58764D73CAD7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:0d:d0:33:33:12:c7:ce:62:68:a2:20:e1:
cb:dd:ed:49:71:e4:4b:e6:2c:1f:50:d4:59:48:88:
99:49:b3:86:29:8d:2f:e3:d7:dc:8b:38:0c:c7:73:
a7:55:00:c8:23:de:57:51:79:39:b4:4c:d8:a3:6d:
56:54:64:cd:44:10:1b:8c:a5:c3:80:c6:b8:0b:ae:
20:49:27:be:8f:08:b6:3e:7a:f7:b3:36:22:f8:6a:
99:9a:71:e7:72:be:84:47:40:b8:b2:c9:28:74:0c:
96:46:c6:ad:54:ac:bc:d1:a8:b6:86:fc:d4:3b:2f:
e0:31:7c:fc:8c:21:f6:11:2a:d2:5c:a4:17:cd:b8:
51:c5:bf:3d:9a:17:3e:2f:54:af:fe:33:0e:12:dc:
81:55:3b:3b:ad:cb:96:66:cf:f4:ff:13:5a:b6:d2:
36:6c:4a:26:6b:74:c2:51:43:3f:46:ce:84:59:13:
fc:dc:b2:f4:2e:2d:f2:e8:db:db:40:bd:b0:c9:7e:
a8:72:9b:ea:59:d5:56:5f:4e:52:e8:fb:9c:75:0e:
be:7e:c0:20:fe:52:ea:1c:c6:5a:ba:17:63:6f:a1:
14:68:ec:00:58:1b:1e:93:e1:fd:5e:5e:99:71:13:
ac:fb:de:8e:49:17:c0:88:a7:c0:83:45:ad:46:66:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2C:A3:1F:67:99:41:5B:86:91:0C:7D:3E:B5:87:64:D7:3C:AD:7F
X509v3 Authority Key Identifier:
keyid:82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.186.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:aa:8a:49:3d:8c:ba:b4:ee:99:92:51:d4:67:68:14:f4:49:
53:77:a3:e0:28:77:39:10:35:5f:62:5a:07:8e:08:db:99:ae:
4d:c7:34:4e:32:80:a4:f9:48:ca:bf:79:a4:e9:89:00:0c:60:
5b:eb:06:a2:5e:85:d6:bd:d0:d9:ac:0b:f9:71:82:2b:4d:51:
53:25:92:99:eb:9c:a8:c3:46:34:4a:94:cc:5f:67:aa:ba:b5:
35:1b:e9:33:82:2b:2f:3f:c1:e5:f4:99:21:47:a8:9b:a2:a1:
9c:e0:53:da:b0:3e:fe:ed:0c:ac:f1:de:f8:18:c6:81:4f:b6:
09:4c:0b:ef:a5:4b:00:99:8a:f4:38:37:36:cf:97:7a:fb:b5:
d2:ee:2d:9f:23:63:dc:93:ae:cd:12:85:a6:84:11:62:5a:8a:
62:af:0d:66:c0:3a:ee:c2:2b:19:5e:88:c6:95:19:f1:08:5d:
14:b7:d6:0d:5b:ef:26:7d:58:81:55:00:4d:9c:cd:16:1e:ed:
70:5b:66:47:8b:cf:1b:d3:3d:2b:cd:ff:45:b3:8a:ce:dc:9b:
5d:ab:9f:06:55:b1:3c:3b:97:27:05:b0:d2:04:b8:7a:67:45:
1d:44:5e:d0:51:59:45:a6:85:4d:54:ab:91:de:b6:96:b9:13:
b9:ba:71:a2
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUCUihuJFg2x+DWcB0mu7PyJlCyYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVB
MUM0MEY2RjAeFw0yNjA1MDMwMzEwMjJaFw0yNzA1MDIwMzE1MjJaMDMxMTAvBgNV
BAMTKEUzMkNBMzFGNjc5OTQxNUI4NjkxMEM3RDNFQjU4NzY0RDczQ0FEN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8g3QMzMSx85iaKIg4cvd7Ulx
5EvmLB9Q1FlIiJlJs4YpjS/j19yLOAzHc6dVAMgj3ldReTm0TNijbVZUZM1EEBuM
pcOAxrgLriBJJ76PCLY+evezNiL4apmacedyvoRHQLiyySh0DJZGxq1UrLzRqLaG
/NQ7L+AxfPyMIfYRKtJcpBfNuFHFvz2aFz4vVK/+Mw4S3IFVOzuty5Zmz/T/E1q2
0jZsSiZrdMJRQz9GzoRZE/zcsvQuLfLo29tAvbDJfqhym+pZ1VZfTlLo+5x1Dr5+
wCD+Uuocxlq6F2NvoRRo7ABYGx6T4f1eXplxE6z73o5JF8CIp8CDRa1GZvUNAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU4yyjH2eZQVuGkQx9PrWHZNc8rX8wHwYDVR0j
BBgwFoAUgotiPppEPot+ldSli14pZaHED28wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWFmMGY0MjMtM2JlZC00OTM4LTlmODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5
QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVBMUM0MEY2Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MjhCNjIzRTlBNDQzRThCN0U5NUQ0QTU4QjVFMjk2NUExQzQw
RjZGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhZjBmNDIzLTNiZWQtNDkzOC05
Zjg5LTE1ZTYyNjliZGRjYS8wLzMxMzAzMzJlMzEzNzMwMmUzMTM4MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqrowDQYJ
KoZIhvcNAQELBQADggEBALqqikk9jLq07pmSUdRnaBT0SVN3o+AodzkQNV9iWgeO
CNuZrk3HNE4ygKT5SMq/eaTpiQAMYFvrBqJehda90NmsC/lxgitNUVMlkpnrnKjD
RjRKlMxfZ6q6tTUb6TOCKy8/weX0mSFHqJuioZzgU9qwPv7tDKzx3vgYxoFPtglM
C++lSwCZivQ4NzbPl3r7tdLuLZ8jY9yTrs0ShaaEEWJaimKvDWbAOu7CKxleiMaV
GfEIXRS31g1b7yZ9WIFVAE2czRYe7XBbZkeLzxvTPSvN/0Wzis7cm12rnwZVsTw7
lycFsNIEuHpnRR1EXtBRWUWmhU1Uq5Hetpa5E7m6caI=
-----END CERTIFICATE-----
Generated at Wed May 13 11:35:03 2026 by rpki-client