
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa
File: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (raw, json)
Hash identifier: Jg32b0/22RaThrPVItjxadGotzX77G74NzWz3XkVIKw=
Subject key identifier: 01:D7:06:77:51:A1:D0:23:7B:59:F9:06:20:41:57:AA:6C:7E:DA:5D
Certificate issuer: /CN=633520AD134E7E67CBB832AE9339B6F7EB07D358
Certificate serial: 1B2E59423A3F833E5F35ECC62B15D4401C9D967F
Authority key identifier: 63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa
Signing time: Sun 03 May 2026 03:16:38 +0000
ROA not before: Sun 03 May 2026 03:11:38 +0000
ROA not after: Sun 02 May 2027 03:16:38 +0000
asID: 137312
IP address blocks: 103.108.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl
rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:2e:59:42:3a:3f:83:3e:5f:35:ec:c6:2b:15:d4:40:1c:9d:96:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633520AD134E7E67CBB832AE9339B6F7EB07D358
Validity
Not Before: May 3 03:11:38 2026 GMT
Not After : May 2 03:16:38 2027 GMT
Subject: CN=01D7067751A1D0237B59F906204157AA6C7EDA5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:95:e8:68:62:87:87:1f:ab:e1:d0:8e:e4:
94:7e:9b:f1:8d:d8:36:b6:d1:43:fa:1c:26:54:7d:
07:b8:7d:e6:e2:4a:57:75:57:11:f5:70:8d:fb:7f:
3e:92:c6:04:fa:5e:85:a0:e7:20:6c:7f:27:60:a8:
32:00:26:b7:c9:0c:df:dc:f9:45:6d:f7:90:ee:e2:
1e:a0:4b:af:33:35:27:7d:c1:fa:e9:6d:98:fd:4f:
99:a2:53:ab:92:a9:f5:5f:b7:41:39:af:d5:17:20:
4b:5f:e2:2c:94:94:f3:1b:54:e1:bd:c7:03:dd:75:
58:04:89:c5:07:fe:17:4b:7d:61:23:e0:a6:9a:6a:
8d:84:1c:f1:d7:4c:7f:1b:f1:8a:a8:85:49:3a:66:
06:b3:ce:c1:a4:3c:bf:17:a7:3d:36:aa:6f:88:be:
51:b7:b3:fe:57:94:71:93:66:50:d0:e4:cd:4a:55:
af:55:ae:ae:ce:80:c5:89:de:d2:24:ed:24:8c:95:
90:bc:68:d6:2f:35:4b:6a:0f:29:c5:32:ef:13:ab:
7f:7d:a4:3c:60:12:0e:ec:3e:da:f2:f4:a8:46:08:
ba:da:61:56:43:d7:01:e7:f4:30:e1:6c:a2:a8:6e:
e6:8d:6c:e6:c7:16:c3:85:f6:db:1a:c3:26:c7:1a:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D7:06:77:51:A1:D0:23:7B:59:F9:06:20:41:57:AA:6C:7E:DA:5D
X509v3 Authority Key Identifier:
keyid:63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.191.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f2:cf:5a:f3:16:56:2a:83:73:19:73:0c:18:2b:ec:7b:6a:
a6:cc:2a:d8:21:c7:bc:03:0f:67:0f:ae:9f:2f:07:58:78:2e:
9f:34:da:31:5f:2c:11:00:df:06:4d:5c:2e:c2:92:e5:12:95:
32:e5:a1:7a:57:70:f7:4a:6f:7c:d1:16:39:c5:ea:56:ce:19:
6e:8a:19:83:cf:b6:d6:af:48:db:b5:df:d1:18:df:6b:63:36:
fb:73:c1:c9:ef:87:6b:99:60:dc:be:15:36:b8:72:01:8d:3d:
93:84:ad:2e:ea:a6:27:55:11:39:12:ef:74:48:c3:52:ef:0a:
79:d2:60:b2:ab:13:72:d3:17:04:50:99:75:b2:8b:a6:01:48:
3b:ac:14:b7:80:27:db:1e:54:83:e1:05:9d:dd:16:9a:32:2e:
04:6e:b3:fe:b2:43:f8:ba:b3:9b:9c:3b:14:de:7d:44:41:3c:
58:ac:7d:de:a2:58:6c:45:27:d5:14:8f:6f:23:5a:e5:24:40:
0e:db:6c:f8:29:b6:ea:77:d5:4e:41:eb:33:9b:a5:f1:01:54:
22:ee:a5:ed:f3:37:a0:9e:ac:c2:46:c4:39:61:a3:46:84:49:
a1:5f:54:be:b0:b6:22:04:29:42:6b:75:92:d3:ec:8a:2f:f4:
2a:2b:df:80
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUGy5ZQjo/gz5fNezGKxXUQBydln8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdF
QjA3RDM1ODAeFw0yNjA1MDMwMzExMzhaFw0yNzA1MDIwMzE2MzhaMDMxMTAvBgNV
BAMTKDAxRDcwNjc3NTFBMUQwMjM3QjU5RjkwNjIwNDE1N0FBNkM3RURBNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKq5XoaGKHhx+r4dCO5JR+m/GN
2Da20UP6HCZUfQe4febiSld1VxH1cI37fz6SxgT6XoWg5yBsfydgqDIAJrfJDN/c
+UVt95Du4h6gS68zNSd9wfrpbZj9T5miU6uSqfVft0E5r9UXIEtf4iyUlPMbVOG9
xwPddVgEicUH/hdLfWEj4Kaaao2EHPHXTH8b8YqohUk6ZgazzsGkPL8Xpz02qm+I
vlG3s/5XlHGTZlDQ5M1KVa9Vrq7OgMWJ3tIk7SSMlZC8aNYvNUtqDynFMu8Tq399
pDxgEg7sPtry9KhGCLraYVZD1wHn9DDhbKKobuaNbObHFsOF9tsawybHGo4XAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUAdcGd1Gh0CN7WfkGIEFXqmx+2l0wHwYDVR0j
BBgwFoAUYzUgrRNOfmfLuDKukzm29+sH01gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjE5MGMzN2UtMjY1NS00MmIxLWJhZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQx
MzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdFQjA3RDM1OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82MzM1MjBBRDEzNEU3RTY3Q0JCODMyQUU5MzM5QjZGN0VCMDdE
MzU4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YxOTBjMzdlLTI2NTUtNDJiMS1i
YWY3LTQyZWMxY2YxOTJhYS8wLzMxMzAzMzJlMzEzMDM4MmUzMTM5MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMxMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnbL8wDQYJ
KoZIhvcNAQELBQADggEBAJLyz1rzFlYqg3MZcwwYK+x7aqbMKtghx7wDD2cPrp8v
B1h4Lp802jFfLBEA3wZNXC7CkuUSlTLloXpXcPdKb3zRFjnF6lbOGW6KGYPPttav
SNu139EY32tjNvtzwcnvh2uZYNy+FTa4cgGNPZOErS7qpidVETkS73RIw1LvCnnS
YLKrE3LTFwRQmXWyi6YBSDusFLeAJ9seVIPhBZ3dFpoyLgRus/6yQ/i6s5ucOxTe
fURBPFisfd6iWGxFJ9UUj28jWuUkQA7bbPgptup31U5B6zObpfEBVCLupe3zN6Ce
rMJGxDlho0aESaFfVL6wtiIEKUJrdZLT7Iov9Cor34A=
-----END CERTIFICATE-----
Generated at Wed May 13 07:35:13 2026 by rpki-client