
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa
File: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (raw, json)
Hash identifier: jF+TxIXKCt0yx/IV65T2kSOoO+FWM7E2CPsCxs8p1io=
Subject key identifier: 0B:89:5A:F5:42:2E:E3:73:B0:FA:CC:C7:DF:9D:5D:CA:33:94:DE:D4
Certificate issuer: /CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E
Certificate serial: 51E884877F4C3A25FFF7854EE4B15E59BCE1ABB5
Authority key identifier: 6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa
Signing time: Sun 03 May 2026 03:17:33 +0000
ROA not before: Sun 03 May 2026 03:12:33 +0000
ROA not after: Sun 02 May 2027 03:17:33 +0000
asID: 141081
IP address blocks: 103.156.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl
rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e8:84:87:7f:4c:3a:25:ff:f7:85:4e:e4:b1:5e:59:bc:e1:ab:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E
Validity
Not Before: May 3 03:12:33 2026 GMT
Not After : May 2 03:17:33 2027 GMT
Subject: CN=0B895AF5422EE373B0FACCC7DF9D5DCA3394DED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ce:db:6c:09:0b:ce:bb:aa:72:c1:53:85:41:
92:4e:ee:2e:fe:b2:74:d2:ea:9e:8c:8c:23:24:1e:
8a:21:4a:b2:54:51:c6:e9:3d:45:05:cd:fc:9e:d4:
43:e7:8e:56:56:7f:f4:d0:b5:cd:83:b3:3b:56:05:
91:90:03:25:8e:95:5e:d2:27:07:5b:5e:94:5f:25:
07:42:bd:14:9c:20:4d:e4:bd:da:43:67:02:43:2a:
2c:4a:2f:54:82:ff:4c:59:47:8c:cb:69:9a:11:8b:
8d:f6:2d:83:7b:2b:6b:8a:8f:d0:cc:a0:04:dc:35:
89:5c:68:6d:06:62:7f:6a:7c:be:c0:c2:09:31:d5:
66:fc:64:bc:a5:2f:94:04:0e:41:9c:0d:9c:d6:b2:
a9:c2:85:0c:b1:25:75:28:46:f5:61:3d:25:86:a8:
c8:ff:53:c1:a7:81:e8:3f:1b:8d:29:2d:23:55:59:
56:fe:ce:b6:c6:a9:41:e7:e3:01:de:2e:9f:67:0a:
ab:54:31:66:97:fb:2b:b8:db:c2:7c:0b:1e:99:90:
e6:bb:2e:0c:61:f5:d4:1b:0f:dc:5b:f0:cc:f5:9b:
c8:62:8a:7f:1c:a8:21:b8:b9:8e:42:a9:1e:ed:4c:
1d:32:4f:71:2c:27:e3:3b:2d:6b:2b:2b:64:97:6a:
4a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:89:5A:F5:42:2E:E3:73:B0:FA:CC:C7:DF:9D:5D:CA:33:94:DE:D4
X509v3 Authority Key Identifier:
keyid:6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.71.0/24
Signature Algorithm: sha256WithRSAEncryption
48:7a:df:31:bf:fc:1e:8d:c1:1a:09:3c:36:9a:f2:4f:cc:c7:
85:bb:55:fb:cf:3b:9d:ad:45:a5:a3:a2:ae:ee:a7:22:fd:82:
7f:66:b2:48:7a:c5:9f:c6:53:99:e0:3d:1d:5d:75:fe:1d:21:
21:83:dc:a8:cc:ae:e5:ac:28:b1:cc:42:86:d5:e8:98:cd:cb:
4e:e9:84:0b:d0:d9:02:56:8c:b6:4c:13:73:db:af:7d:79:d2:
c4:b9:46:2f:55:ac:59:ee:f5:73:87:ef:19:1d:84:52:5e:29:
6b:c1:78:16:3a:9b:22:c8:25:6b:1b:cf:35:78:2e:9a:60:3d:
d2:06:07:f0:42:08:05:f6:c4:a7:d1:91:2c:92:6c:fa:4b:72:
83:08:9b:f5:fd:dd:67:fd:2a:8d:02:c9:64:7c:fa:ac:ae:1e:
18:5f:d7:d5:ef:6d:54:ce:4e:9b:cc:21:5c:3f:50:aa:c1:8b:
4e:af:53:6d:6d:02:a9:02:76:84:98:26:c8:c3:ef:73:9a:99:
6d:74:7c:ee:43:0f:24:b7:2e:85:ee:6f:3c:ab:c6:3f:2f:6e:
d7:66:59:b8:d9:ed:64:7a:ef:78:dc:e1:79:40:fe:e5:cc:47:
24:cd:50:d9:ee:fc:dc:e1:aa:30:17:11:75:58:6e:ce:cf:43:
43:dd:65:df
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUeiEh39MOiX/94VO5LFeWbzhq7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZCMjUzQTRGOTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FB
RTQ5QjY1RTAeFw0yNjA1MDMwMzEyMzNaFw0yNzA1MDIwMzE3MzNaMDMxMTAvBgNV
BAMTKDBCODk1QUY1NDIyRUUzNzNCMEZBQ0NDN0RGOUQ1RENBMzM5NERFRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkzttsCQvOu6pywVOFQZJO7i7+
snTS6p6MjCMkHoohSrJUUcbpPUUFzfye1EPnjlZWf/TQtc2DsztWBZGQAyWOlV7S
JwdbXpRfJQdCvRScIE3kvdpDZwJDKixKL1SC/0xZR4zLaZoRi432LYN7K2uKj9DM
oATcNYlcaG0GYn9qfL7Awgkx1Wb8ZLylL5QEDkGcDZzWsqnChQyxJXUoRvVhPSWG
qMj/U8Gngeg/G40pLSNVWVb+zrbGqUHn4wHeLp9nCqtUMWaX+yu428J8Cx6ZkOa7
Lgxh9dQbD9xb8Mz1m8hiin8cqCG4uY5CqR7tTB0yT3EsJ+M7LWsrK2SXakrtAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUC4la9UIu43Ow+szH351dyjOU3tQwHwYDVR0j
BBgwFoAUb7JTpPmcD4Eerg0UK3J1yq5Jtl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjNiYWJmMGItMTEwMS00YWE5LWE0ZGYtNTI3MTQ5MzRkYjdjLzAvNkZCMjUzQTRG
OTlDMEY4MTFFQUUwRDE0MkI3Mjc1Q0FBRTQ5QjY1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82RkIyNTNBNEY5OUMwRjgxMUVBRTBEMTQyQjcyNzVDQUFFNDlC
NjVFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzYmFiZjBiLTExMDEtNGFhOS1h
NGRmLTUyNzE0OTM0ZGI3Yy8wLzMxMzAzMzJlMzEzNTM2MmUzNzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5xHMA0GCSqG
SIb3DQEBCwUAA4IBAQBIet8xv/wejcEaCTw2mvJPzMeFu1X7zzudrUWlo6Ku7qci
/YJ/ZrJIesWfxlOZ4D0dXXX+HSEhg9yozK7lrCixzEKG1eiYzctO6YQL0NkCVoy2
TBNz2699edLEuUYvVaxZ7vVzh+8ZHYRSXilrwXgWOpsiyCVrG881eC6aYD3SBgfw
QggF9sSn0ZEskmz6S3KDCJv1/d1n/SqNAslkfPqsrh4YX9fV721Uzk6bzCFcP1Cq
wYtOr1NtbQKpAnaEmCbIw+9zmpltdHzuQw8kty6F7m88q8Y/L27XZlm42e1keu94
3OF5QP7lzEckzVDZ7vzc4aowFxF1WG7Oz0ND3WXf
-----END CERTIFICATE-----
Generated at Wed May 13 05:38:02 2026 by rpki-client