
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa
File: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (raw, json)
Hash identifier: IlwLW0g7keiKYblC08y+Cdk30ZDG31NiX8oDu4ZTBVM=
Subject key identifier: A3:73:98:CA:BA:AB:0C:6C:F2:8F:F6:8E:36:EC:DA:E0:71:2D:8B:9D
Certificate issuer: /CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3
Certificate serial: 53A10AC6FD7A31980C2FDA8F9E3B42FBA28960ED
Authority key identifier: 32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa
Signing time: Sun 03 May 2026 03:16:49 +0000
ROA not before: Sun 03 May 2026 03:11:49 +0000
ROA not after: Sun 02 May 2027 03:16:49 +0000
asID: 136081
IP address blocks: 103.147.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl
rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a1:0a:c6:fd:7a:31:98:0c:2f:da:8f:9e:3b:42:fb:a2:89:60:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3
Validity
Not Before: May 3 03:11:49 2026 GMT
Not After : May 2 03:16:49 2027 GMT
Subject: CN=A37398CABAAB0C6CF28FF68E36ECDAE0712D8B9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:45:1e:c1:94:7c:9e:99:cc:bb:9e:81:4e:
b1:ef:cd:bf:11:5d:93:6b:18:5e:e2:ea:c2:2e:72:
84:22:69:f4:60:7d:d9:a5:b4:a7:03:59:b9:7b:23:
a6:38:b4:2a:c3:1e:85:33:f6:ad:8f:bd:52:24:5d:
3c:08:2e:94:13:0c:7e:96:08:52:3d:1d:67:be:93:
62:86:a2:23:84:8a:8f:51:56:62:72:46:0f:bf:26:
36:8d:a8:c5:db:4b:81:9d:ca:40:2c:88:4e:8b:ba:
4b:16:62:9a:79:99:40:aa:f4:d3:94:7d:44:76:a5:
dd:74:46:b9:1f:a4:8d:d0:88:13:f3:ec:b8:29:cf:
4b:6c:9a:8a:69:bf:f2:e9:ec:53:c9:5f:25:71:21:
25:ff:a5:9d:bb:1c:57:8a:bb:f4:4f:2b:5a:a1:d2:
b6:f2:f5:70:57:1d:fc:c9:28:87:d6:7c:9a:d6:32:
08:13:ac:26:10:44:b6:68:1b:d9:df:03:27:17:56:
c4:b3:d9:c7:9c:62:aa:a1:da:4f:e2:59:bd:e3:88:
55:2e:ec:f0:1a:2f:11:19:91:8c:0b:32:3e:f1:4c:
91:53:ee:a4:a9:15:fc:19:da:8c:25:30:06:92:f3:
60:73:e1:13:58:b7:3d:90:16:6e:96:f5:7d:61:a1:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:98:CA:BA:AB:0C:6C:F2:8F:F6:8E:36:EC:DA:E0:71:2D:8B:9D
X509v3 Authority Key Identifier:
keyid:32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.218.0/24
Signature Algorithm: sha256WithRSAEncryption
84:46:02:69:9a:49:2b:8a:b6:6e:e0:7a:47:6e:3d:3f:c7:f0:
ec:25:28:8e:96:12:4e:7b:13:ee:ee:3d:98:80:06:ad:16:74:
7f:7d:b1:f9:ae:21:bb:33:d8:6f:ca:50:f1:51:cb:6a:a8:a2:
f3:d2:4b:4e:87:a1:12:e6:ea:18:ee:c4:c8:67:bd:6d:88:79:
c1:6e:78:7f:3b:a7:f3:fa:60:3c:15:3b:a4:63:c0:1a:a0:01:
26:04:07:d1:15:f7:dd:81:e0:6d:71:ae:91:12:bc:1a:18:0f:
b1:8f:1b:f2:36:30:26:72:28:09:dd:8c:c7:5e:2f:7a:13:d1:
1e:c7:6f:aa:28:c2:98:61:e1:37:f3:62:af:c0:bf:d1:2b:b3:
21:0d:b2:d3:e9:32:b8:df:8e:d1:34:04:ef:7f:4b:c1:14:4a:
5a:f0:c3:19:ef:95:66:0f:0a:3f:f5:c1:15:0c:e2:28:68:4e:
30:61:92:09:8a:53:f3:96:ff:69:3a:13:c0:f4:a9:25:9b:2c:
2f:b9:b0:7d:56:b8:c7:ab:7d:94:2d:39:e5:d9:8e:32:2d:1c:
44:2b:67:67:3a:22:3e:cf:a8:04:5c:04:f1:30:94:68:72:95:
0a:e0:96:61:aa:19:26:f6:3c:d3:ab:84:ad:b7:4c:55:7b:d3:
65:06:60:45
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUU6EKxv16MZgML9qPnjtC+6KJYO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJDNDA4NjkyNTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRC
Q0M3RUVGMzAeFw0yNjA1MDMwMzExNDlaFw0yNzA1MDIwMzE2NDlaMDMxMTAvBgNV
BAMTKEEzNzM5OENBQkFBQjBDNkNGMjhGRjY4RTM2RUNEQUUwNzEyRDhCOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtEUewZR8npnMu56BTrHvzb8R
XZNrGF7i6sIucoQiafRgfdmltKcDWbl7I6Y4tCrDHoUz9q2PvVIkXTwILpQTDH6W
CFI9HWe+k2KGoiOEio9RVmJyRg+/JjaNqMXbS4GdykAsiE6LuksWYpp5mUCq9NOU
fUR2pd10RrkfpI3QiBPz7Lgpz0tsmoppv/Lp7FPJXyVxISX/pZ27HFeKu/RPK1qh
0rby9XBXHfzJKIfWfJrWMggTrCYQRLZoG9nfAycXVsSz2cecYqqh2k/iWb3jiFUu
7PAaLxEZkYwLMj7xTJFT7qSpFfwZ2owlMAaS82Bz4RNYtz2QFm6W9X1hoTuJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUo3OYyrqrDGzyj/aONuza4HEti50wHwYDVR0j
BBgwFoAUMsQIaSUM6WBuBcFbabIP9LzH7vMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjI2MDU4NmQtYjAyNy00NjU2LWI2MzEtMDU4OTZiNTQzNzgyLzAvMzJDNDA4Njky
NTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRCQ0M3RUVGMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zMkM0MDg2OTI1MENFOTYwNkUwNUMxNUI2OUIyMEZGNEJDQzdF
RUYzLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YyNjA1ODZkLWIwMjctNDY1Ni1i
NjMxLTA1ODk2YjU0Mzc4Mi8wLzMxMzAzMzJlMzEzNDM3MmUzMjMxMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzMDM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk9owDQYJ
KoZIhvcNAQELBQADggEBAIRGAmmaSSuKtm7gekduPT/H8OwlKI6WEk57E+7uPZiA
Bq0WdH99sfmuIbsz2G/KUPFRy2qoovPSS06HoRLm6hjuxMhnvW2IecFueH87p/P6
YDwVO6RjwBqgASYEB9EV992B4G1xrpESvBoYD7GPG/I2MCZyKAndjMdeL3oT0R7H
b6oowphh4TfzYq/Av9ErsyENstPpMrjfjtE0BO9/S8EUSlrwwxnvlWYPCj/1wRUM
4ihoTjBhkgmKU/OW/2k6E8D0qSWbLC+5sH1WuMerfZQtOeXZjjItHEQrZ2c6Ij7P
qARcBPEwlGhylQrglmGqGSb2PNOrhK23TFV702UGYEU=
-----END CERTIFICATE-----
Generated at Wed May 13 12:02:28 2026 by rpki-client