
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa
File: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (raw, json)
Hash identifier: ffbCXyninBGio9BOygv4p476TIGMpl53kSauEjC/roA=
Subject key identifier: 0C:22:D3:43:EB:C7:CF:2A:AA:2F:1B:46:06:26:C6:BE:43:A3:55:57
Certificate issuer: /CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1
Certificate serial: 0B0E180FD66E1548C4E215C9D6798F6BBA427CC7
Authority key identifier: AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa
Signing time: Sun 03 May 2026 03:18:32 +0000
ROA not before: Sun 03 May 2026 03:13:32 +0000
ROA not after: Sun 02 May 2027 03:18:32 +0000
asID: 142338
IP address blocks: 103.169.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl
rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:0e:18:0f:d6:6e:15:48:c4:e2:15:c9:d6:79:8f:6b:ba:42:7c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD83230DE9E9D50A9CDF6A332E03DC58874E90E1
Validity
Not Before: May 3 03:13:32 2026 GMT
Not After : May 2 03:18:32 2027 GMT
Subject: CN=0C22D343EBC7CF2AAA2F1B460626C6BE43A35557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:42:7a:2e:98:bf:a1:b8:85:51:1d:d9:29:
94:b2:48:86:e8:62:b8:94:5a:a5:af:33:81:eb:9b:
69:3c:7d:05:b2:5a:b4:c5:20:08:d9:bd:8a:37:44:
8b:e9:f2:dd:1a:20:07:ba:ff:df:88:92:cb:38:d5:
cd:97:2f:08:11:98:82:86:b3:96:aa:f8:d5:51:12:
06:e9:bd:5a:f7:a6:9a:07:16:8d:d0:29:52:0c:af:
88:c6:38:75:c1:1a:5e:a1:9c:8d:e5:d9:e4:30:0d:
6d:2f:4b:c1:34:61:8c:b9:b2:f6:d4:13:84:9f:b3:
b1:4b:f9:c6:58:2d:78:30:b4:67:35:6f:94:63:06:
92:54:97:1a:9b:43:50:8f:d1:ff:9a:9b:e3:9a:bc:
29:40:0f:70:1e:ed:64:98:15:57:3d:a1:2a:49:b6:
2d:af:9b:96:1a:a2:f7:f1:2c:33:67:d4:bb:e5:2c:
11:98:e0:eb:7f:01:8a:83:7d:14:aa:5d:4e:e4:43:
8f:78:b5:01:46:83:82:e3:d1:8b:9c:4b:0d:bf:16:
89:e4:43:fd:2c:40:57:da:c1:37:06:54:bf:25:4a:
c2:8e:7f:40:75:03:69:82:e3:79:f0:8e:8d:c4:5b:
59:b1:8f:a4:3e:a6:15:a3:35:7b:59:88:22:a6:bd:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:D3:43:EB:C7:CF:2A:AA:2F:1B:46:06:26:C6:BE:43:A3:55:57
X509v3 Authority Key Identifier:
keyid:AD:83:23:0D:E9:E9:D5:0A:9C:DF:6A:33:2E:03:DC:58:87:4E:90:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD83230DE9E9D50A9CDF6A332E03DC58874E90E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.134.0/23
Signature Algorithm: sha256WithRSAEncryption
90:24:95:f4:93:d6:ee:e4:e1:43:bd:ff:03:6e:10:25:4d:d7:
ec:91:d0:cc:6b:32:01:9e:e8:75:b7:fb:86:1c:8f:b3:d9:53:
15:b9:21:05:42:8f:76:8a:92:46:73:a1:8f:6e:3a:32:3d:25:
90:f3:a8:f3:05:96:5a:3d:f3:ca:3d:68:1b:1f:e7:81:85:66:
ae:66:54:c7:b4:aa:4f:37:22:a5:13:2e:85:a7:18:12:be:2f:
30:bc:54:a9:2b:76:6f:dd:d6:0b:19:03:42:fa:78:a2:49:cc:
7c:4a:50:94:ef:ae:e2:22:95:66:2d:11:83:a7:84:47:b8:46:
6e:f3:af:d5:c7:fd:69:4d:a5:f8:de:27:58:99:4f:b9:5d:df:
95:b6:bd:33:30:10:93:05:96:04:0d:e4:70:22:44:fe:8c:80:
de:b0:ed:6d:23:44:22:1b:43:cf:8b:d0:d3:ad:82:f9:ad:91:
aa:e4:05:17:3b:37:c4:0e:17:5c:cb:6e:c2:ac:91:e0:19:29:
a2:44:cd:3a:67:b1:03:21:67:5a:05:4b:a4:69:93:71:21:69:
b2:fa:0c:71:26:e8:c1:cd:c8:ac:8f:fc:5b:f1:31:1e:4c:d3:
89:27:6b:01:8c:44:56:27:07:d3:77:f6:b0:f3:36:b8:7b:e9:
f4:32:ea:4b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUCw4YD9ZuFUjE4hXJ1nmPa7pCfMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ4MzIzMERFOUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4
NzRFOTBFMTAeFw0yNjA1MDMwMzEzMzJaFw0yNzA1MDIwMzE4MzJaMDMxMTAvBgNV
BAMTKDBDMjJEMzQzRUJDN0NGMkFBQTJGMUI0NjA2MjZDNkJFNDNBMzU1NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfc0J6Lpi/obiFUR3ZKZSySIbo
YriUWqWvM4Hrm2k8fQWyWrTFIAjZvYo3RIvp8t0aIAe6/9+Ikss41c2XLwgRmIKG
s5aq+NVREgbpvVr3ppoHFo3QKVIMr4jGOHXBGl6hnI3l2eQwDW0vS8E0YYy5svbU
E4Sfs7FL+cZYLXgwtGc1b5RjBpJUlxqbQ1CP0f+am+OavClAD3Ae7WSYFVc9oSpJ
ti2vm5YaovfxLDNn1LvlLBGY4Ot/AYqDfRSqXU7kQ494tQFGg4Lj0YucSw2/Fonk
Q/0sQFfawTcGVL8lSsKOf0B1A2mC43nwjo3EW1mxj6Q+phWjNXtZiCKmvcz3AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUDCLTQ+vHzyqqLxtGBibGvkOjVVcwHwYDVR0j
BBgwFoAUrYMjDenp1Qqc32ozLgPcWIdOkOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjkwMDNkNmMtOTVmMS00N2E0LTlkNWQtZjdiNDhjYWFhN2Y0LzAvQUQ4MzIzMERF
OUU5RDUwQTlDREY2QTMzMkUwM0RDNTg4NzRFOTBFMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BRDgzMjMwREU5RTlENTBBOUNERjZBMzMyRTAzREM1ODg3NEU5
MEUxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y5MDAzZDZjLTk1ZjEtNDdhNC05
ZDVkLWY3YjQ4Y2FhYTdmNC8wLzMxMzAzMzJlMzEzNjM5MmUzMTMzMzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqYYwDQYJ
KoZIhvcNAQELBQADggEBAJAklfST1u7k4UO9/wNuECVN1+yR0MxrMgGe6HW3+4Yc
j7PZUxW5IQVCj3aKkkZzoY9uOjI9JZDzqPMFllo988o9aBsf54GFZq5mVMe0qk83
IqUTLoWnGBK+LzC8VKkrdm/d1gsZA0L6eKJJzHxKUJTvruIilWYtEYOnhEe4Rm7z
r9XH/WlNpfjeJ1iZT7ld35W2vTMwEJMFlgQN5HAiRP6MgN6w7W0jRCIbQ8+L0NOt
gvmtkarkBRc7N8QOF1zLbsKskeAZKaJEzTpnsQMhZ1oFS6Rpk3EhabL6DHEm6MHN
yKyP/FvxMR5M04knawGMRFYnB9N39rDzNrh76fQy6ks=
-----END CERTIFICATE-----
Generated at Wed May 13 05:55:38 2026 by rpki-client