
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa
File: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier: uouUKGbUozmFnKgub/+5mqf8ILo68JfceNZ+JRrYL4g=
Subject key identifier: D6:19:3E:3B:A5:2F:39:77:C4:76:32:C4:AE:05:25:BA:5E:17:7B:6A
Certificate issuer: /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
Certificate serial: 2A428CFC75A082A123925ADB767E9E7A2BF2E997
Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa
Signing time: Sun 03 May 2026 03:17:59 +0000
ROA not before: Sun 03 May 2026 03:12:59 +0000
ROA not after: Sun 02 May 2027 03:17:59 +0000
asID: 63497
IP address blocks: 103.134.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl
rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:42:8c:fc:75:a0:82:a1:23:92:5a:db:76:7e:9e:7a:2b:f2:e9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
Validity
Not Before: May 3 03:12:59 2026 GMT
Not After : May 2 03:17:59 2027 GMT
Subject: CN=D6193E3BA52F3977C47632C4AE0525BA5E177B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:f3:93:69:69:12:23:33:4f:83:40:b9:dc:
4d:d0:4a:3f:9f:91:60:b4:2d:55:0e:8f:40:41:08:
78:f8:ba:7a:0b:1c:ed:f0:4f:74:fa:6c:60:7e:d5:
6d:ad:9b:99:64:22:a7:7a:39:0a:57:e5:db:9f:7a:
19:13:fa:e8:24:24:10:2b:b1:ad:34:8d:7b:14:bb:
2d:18:bc:32:60:1f:a9:70:d1:76:ca:cb:5f:7c:28:
7b:a5:cf:09:9f:b9:01:fb:8b:c5:49:13:52:b6:e2:
1e:4b:1a:f4:36:10:e7:c4:37:f5:46:55:4a:0d:1c:
cc:f0:62:da:e2:c9:34:0a:61:0e:ee:fa:26:9d:f6:
1d:e0:81:27:ee:1d:04:ef:1e:78:6c:05:88:da:99:
39:16:ff:12:fd:18:14:57:db:4d:40:31:c4:21:b5:
57:a3:1e:b6:ca:ba:b6:d9:da:2b:48:90:70:53:41:
8c:be:cc:47:96:b0:8c:75:83:c3:cd:d6:b1:93:0c:
65:36:c1:c3:62:1d:ed:18:c5:84:18:27:9e:3b:27:
2d:96:86:c0:b7:7f:fc:eb:a2:c0:8f:d3:76:2f:27:
1b:c1:d6:7e:29:c2:24:1d:77:c5:bf:1d:36:d6:98:
77:e3:19:ee:a9:37:b9:3e:ba:fb:9b:bd:2d:e7:a9:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:3E:3B:A5:2F:39:77:C4:76:32:C4:AE:05:25:BA:5E:17:7B:6A
X509v3 Authority Key Identifier:
keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.106.0/24
Signature Algorithm: sha256WithRSAEncryption
91:55:1d:53:75:3a:d8:05:8a:c5:7d:eb:98:71:e1:53:9c:bc:
a3:8b:45:65:fb:57:87:47:1c:a2:94:30:ee:d5:81:17:80:22:
c0:6e:2b:cb:11:46:08:27:a9:b9:c1:da:93:e5:54:96:29:90:
9d:b6:e6:80:2f:74:8c:85:09:b0:6f:32:30:87:2d:20:51:09:
db:39:5b:e6:1c:76:42:fc:c6:2a:c9:90:f9:75:96:5b:16:1f:
25:00:1d:b0:20:7f:4c:47:72:21:f9:f7:0e:51:bd:9c:20:ec:
86:42:23:8b:50:3b:36:e1:c0:f4:2b:38:99:cb:c1:63:58:d4:
3a:75:3f:95:22:a3:7e:62:cc:c9:d8:0a:98:77:7c:0b:f5:20:
0e:d6:38:db:17:19:85:03:c9:36:a6:ba:db:85:52:bc:c5:a5:
89:e0:b7:e8:ca:76:5c:22:7f:21:69:85:c7:ff:6e:14:65:37:
02:40:d7:cd:eb:2d:1c:5d:5c:6d:84:b5:0e:ab:68:b3:d9:41:
46:e3:f5:29:29:d1:b1:9c:28:ea:cf:a8:18:8a:e0:07:08:ad:
b8:8b:c8:14:1f:58:a1:85:f0:fe:98:42:36:bb:5d:bb:fc:16:
21:e1:10:7c:c0:7a:60:24:b4:f6:59:58:13:e0:07:55:51:ca:
d3:54:da:28
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKkKM/HWggqEjklrbdn6eeivy6ZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JGNEJG
MkRFNUU1RDAeFw0yNjA1MDMwMzEyNTlaFw0yNzA1MDIwMzE3NTlaMDMxMTAvBgNV
BAMTKEQ2MTkzRTNCQTUyRjM5NzdDNDc2MzJDNEFFMDUyNUJBNUUxNzdCNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQPOTaWkSIzNPg0C53E3QSj+f
kWC0LVUOj0BBCHj4unoLHO3wT3T6bGB+1W2tm5lkIqd6OQpX5dufehkT+ugkJBAr
sa00jXsUuy0YvDJgH6lw0XbKy198KHulzwmfuQH7i8VJE1K24h5LGvQ2EOfEN/VG
VUoNHMzwYtriyTQKYQ7u+iad9h3ggSfuHQTvHnhsBYjamTkW/xL9GBRX201AMcQh
tVejHrbKurbZ2itIkHBTQYy+zEeWsIx1g8PN1rGTDGU2wcNiHe0YxYQYJ547Jy2W
hsC3f/zrosCP03YvJxvB1n4pwiQdd8W/HTbWmHfjGe6pN7k+uvubvS3nqREhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU1hk+O6UvOXfEdjLErgUlul4Xe2owHwYDVR0j
BBgwFoAUkMO8Zqp0XJ6o2p2BWte/S/LeXl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjZiNWFlMWUtYmU2Ni00YTMwLWE5NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZB
QTc0NUM5RUE4REE5RDgxNUFEN0JGNEJGMkRFNUU1RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MEMzQkM2NkFBNzQ1QzlFQThEQTlEODE1QUQ3QkY0QkYyREU1
RTVELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y2YjVhZTFlLWJlNjYtNGEzMC1h
OTQ4LTdkNDc4YzIyZWEyYi8wLzMxMzAzMzJlMzEzMzM0MmUzMTMwMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4ZqMA0GCSqG
SIb3DQEBCwUAA4IBAQCRVR1TdTrYBYrFfeuYceFTnLyji0Vl+1eHRxyilDDu1YEX
gCLAbivLEUYIJ6m5wdqT5VSWKZCdtuaAL3SMhQmwbzIwhy0gUQnbOVvmHHZC/MYq
yZD5dZZbFh8lAB2wIH9MR3Ih+fcOUb2cIOyGQiOLUDs24cD0KziZy8FjWNQ6dT+V
IqN+YszJ2AqYd3wL9SAO1jjbFxmFA8k2prrbhVK8xaWJ4LfoynZcIn8haYXH/24U
ZTcCQNfN6y0cXVxthLUOq2iz2UFG4/UpKdGxnCjqz6gYiuAHCK24i8gUH1ihhfD+
mEI2u127/BYh4RB8wHpgJLT2WVgT4AdVUcrTVNoo
-----END CERTIFICATE-----
Generated at Wed May 13 02:33:57 2026 by rpki-client