
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa
File: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (raw, json)
Hash identifier: 9NL2C7FOxcvOHwTRTmo9h9A795ncThfKAUagyOzQnW8=
Subject key identifier: A1:26:69:34:7B:A0:1F:0D:77:98:8B:1C:10:AC:3E:26:93:E2:55:47
Certificate issuer: /CN=092239A9C28840E7E025454A2EA108ED5A8BF369
Certificate serial: 09C2E08FE0264B76FD336EF4294BEF959297526C
Authority key identifier: 09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa
Signing time: Sun 03 May 2026 03:17:31 +0000
ROA not before: Sun 03 May 2026 03:12:31 +0000
ROA not after: Sun 02 May 2027 03:17:31 +0000
asID: 135465
IP address blocks: 103.219.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl
rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c2:e0:8f:e0:26:4b:76:fd:33:6e:f4:29:4b:ef:95:92:97:52:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092239A9C28840E7E025454A2EA108ED5A8BF369
Validity
Not Before: May 3 03:12:31 2026 GMT
Not After : May 2 03:17:31 2027 GMT
Subject: CN=A12669347BA01F0D77988B1C10AC3E2693E25547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:6e:5e:a1:18:4d:b5:0a:bc:27:41:4f:6b:
bd:70:f7:ef:d0:1e:58:78:f6:22:e0:1d:f3:49:9f:
91:b2:6f:bb:01:86:3b:5d:5a:fc:c5:f7:86:db:f8:
9b:cb:10:c4:6f:eb:62:03:d5:2e:57:c0:83:bf:4b:
02:cf:d9:8e:cd:08:bf:d3:78:55:33:31:61:8f:86:
5f:d3:7b:9c:e8:6c:6c:65:b1:a6:7c:34:90:1f:54:
4e:ef:5e:88:9d:1e:51:a6:55:a0:fa:83:ae:4d:c8:
a2:0d:a4:2f:e9:ff:14:c7:5a:44:3e:b1:61:e2:c6:
d7:15:54:6c:cd:dc:67:95:20:a2:1e:f1:c4:cb:eb:
ff:a9:7b:0f:fc:1a:f6:11:af:f2:a0:6a:69:53:1c:
7c:e2:ab:3c:3d:42:18:b4:02:2d:15:ac:97:91:05:
15:34:79:26:db:6f:5b:f0:e6:f1:97:03:6b:da:cf:
c6:58:fc:4d:63:cf:cc:93:96:b8:14:6d:a7:8a:fc:
28:2c:ad:1a:3e:ec:77:49:95:c8:a5:a9:02:f2:ac:
13:d1:0e:72:6c:7b:0a:35:7a:86:b4:ce:ae:3e:e5:
e3:71:2d:44:22:2d:8a:e8:34:2d:d7:f9:3f:8e:e3:
e9:17:5d:cc:43:2a:95:84:1c:8b:57:00:5a:23:3a:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:26:69:34:7B:A0:1F:0D:77:98:8B:1C:10:AC:3E:26:93:E2:55:47
X509v3 Authority Key Identifier:
keyid:09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.72.0/22
Signature Algorithm: sha256WithRSAEncryption
74:8d:df:94:53:4a:1e:93:45:2d:3d:d1:d3:5a:2d:5e:33:56:
2e:ea:d6:e0:e6:63:4e:81:16:4b:1f:a6:67:e7:9c:7a:b4:7c:
81:6c:7c:2a:10:90:e7:e5:bb:dd:e5:94:f1:b7:94:83:3d:6e:
b0:62:16:79:08:59:df:bd:22:95:6f:0d:bb:76:3a:d6:6b:59:
77:e8:74:cd:35:ed:2f:5c:29:e8:7e:f9:ab:4e:fa:7b:96:0b:
23:96:b0:45:df:83:6b:05:a3:4a:26:62:c3:92:69:bc:84:1b:
68:5e:e8:df:f4:48:f1:d1:73:49:3d:f1:81:8b:7c:d2:17:ce:
06:74:21:ab:b7:ee:fa:0b:fc:3d:4b:17:11:2d:58:64:11:67:
d3:5f:f2:07:e2:a8:7d:59:64:72:f0:82:51:50:75:cf:fa:52:
ff:73:cc:39:7a:df:9a:20:f9:3f:b4:f7:85:d9:3b:bf:69:7c:
a0:3d:a1:02:76:35:17:2a:da:d5:13:89:75:42:c4:8c:15:6e:
23:b4:b6:e8:ee:c4:ba:cc:47:5d:a4:d0:15:8f:14:8c:f2:36:
a4:4c:21:a2:e8:21:3f:1b:f6:a8:e5:1b:ee:66:7e:43:f7:a1:
4e:3c:46:7a:4d:09:84:a1:e6:8e:87:da:ff:68:76:83:9b:09:
52:c0:5c:47
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUCcLgj+AmS3b9M270KUvvlZKXUmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkyMjM5QTlDMjg4NDBFN0UwMjU0NTRBMkVBMTA4RUQ1
QThCRjM2OTAeFw0yNjA1MDMwMzEyMzFaFw0yNzA1MDIwMzE3MzFaMDMxMTAvBgNV
BAMTKEExMjY2OTM0N0JBMDFGMEQ3Nzk4OEIxQzEwQUMzRTI2OTNFMjU1NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUG5eoRhNtQq8J0FPa71w9+/Q
Hlh49iLgHfNJn5Gyb7sBhjtdWvzF94bb+JvLEMRv62ID1S5XwIO/SwLP2Y7NCL/T
eFUzMWGPhl/Te5zobGxlsaZ8NJAfVE7vXoidHlGmVaD6g65NyKINpC/p/xTHWkQ+
sWHixtcVVGzN3GeVIKIe8cTL6/+pew/8GvYRr/KgamlTHHziqzw9Qhi0Ai0VrJeR
BRU0eSbbb1vw5vGXA2vaz8ZY/E1jz8yTlrgUbaeK/CgsrRo+7HdJlcilqQLyrBPR
DnJsewo1eoa0zq4+5eNxLUQiLYroNC3X+T+O4+kXXcxDKpWEHItXAFojOslHAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUoSZpNHugHw13mIscEKw+JpPiVUcwHwYDVR0j
BBgwFoAUCSI5qcKIQOfgJUVKLqEI7VqL82kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjNhNjJjOWEtZDRmMC00NTRiLTgwN2YtODRmOWIzYzIwMmIzLzAvMDkyMjM5QTlD
Mjg4NDBFN0UwMjU0NTRBMkVBMTA4RUQ1QThCRjM2OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wOTIyMzlBOUMyODg0MEU3RTAyNTQ1NEEyRUExMDhFRDVBOEJG
MzY5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzYTYyYzlhLWQ0ZjAtNDU0Yi04
MDdmLTg0ZjliM2MyMDJiMy8wLzMxMzAzMzJlMzIzMTM5MmUzNzMyMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ9tIMA0GCSqG
SIb3DQEBCwUAA4IBAQB0jd+UU0oek0UtPdHTWi1eM1Yu6tbg5mNOgRZLH6Zn55x6
tHyBbHwqEJDn5bvd5ZTxt5SDPW6wYhZ5CFnfvSKVbw27djrWa1l36HTNNe0vXCno
fvmrTvp7lgsjlrBF34NrBaNKJmLDkmm8hBtoXujf9Ejx0XNJPfGBi3zSF84GdCGr
t+76C/w9SxcRLVhkEWfTX/IH4qh9WWRy8IJRUHXP+lL/c8w5et+aIPk/tPeF2Tu/
aXygPaECdjUXKtrVE4l1QsSMFW4jtLbo7sS6zEddpNAVjxSM8jakTCGi6CE/G/ao
5RvuZn5D96FOPEZ6TQmEoeaOh9r/aHaDmwlSwFxH
-----END CERTIFICATE-----
Generated at Wed May 13 06:56:09 2026 by rpki-client