
$ rpki-client -vvf rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/3130332e3136372e342e302f32332d3234203d3e203137393935.roa
File: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier: dXRSG12k0ppX+ri+7mTAl+dT1uExjDi4/YRLzs/TgNU=
Subject key identifier: 0A:57:A5:31:BE:00:52:0D:DD:4A:2A:35:A0:B4:23:0F:FC:8D:C5:EF
Certificate issuer: /CN=380819CB34564C78D643A25A36874B03D1C8589A
Certificate serial: 39F2733E35F3B0A383D0E94DC81C8F09C8D4381D
Authority key identifier: 38:08:19:CB:34:56:4C:78:D6:43:A2:5A:36:87:4B:03:D1:C8:58:9A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/380819CB34564C78D643A25A36874B03D1C8589A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/3130332e3136372e342e302f32332d3234203d3e203137393935.roa
Signing time: Sun 03 May 2026 02:37:46 +0000
ROA not before: Sun 03 May 2026 02:32:46 +0000
ROA not after: Sun 02 May 2027 02:37:46 +0000
asID: 17995
IP address blocks: 103.167.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/380819CB34564C78D643A25A36874B03D1C8589A.crl
rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/380819CB34564C78D643A25A36874B03D1C8589A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/380819CB34564C78D643A25A36874B03D1C8589A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 15:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f2:73:3e:35:f3:b0:a3:83:d0:e9:4d:c8:1c:8f:09:c8:d4:38:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380819CB34564C78D643A25A36874B03D1C8589A
Validity
Not Before: May 3 02:32:46 2026 GMT
Not After : May 2 02:37:46 2027 GMT
Subject: CN=0A57A531BE00520DDD4A2A35A0B4230FFC8DC5EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:cd:ee:ce:d9:e3:93:1b:13:be:e9:f0:93:
b5:88:5d:e2:fb:e9:e2:40:8a:58:66:43:9a:07:2c:
b0:6c:1d:17:98:c8:2e:5e:03:9b:95:cb:c0:63:85:
82:35:15:ff:e7:d1:f0:2d:09:e6:0a:cc:d5:be:66:
ed:d6:e0:f1:1b:88:7c:68:78:12:b0:83:c5:8f:85:
0f:16:c9:95:10:c8:06:a8:06:9e:e2:de:55:1f:3a:
8f:fc:f2:97:ea:56:4b:7c:63:7f:fa:60:9a:d4:3b:
0c:19:89:72:07:48:2f:9d:5b:84:13:a1:42:7c:55:
78:0b:c6:f2:20:ea:ec:d5:fc:51:6c:13:1f:3e:63:
16:7b:24:e8:3d:3a:2b:52:eb:d0:7e:8e:dd:4a:a9:
63:a2:02:64:64:01:cd:c5:f1:47:3c:49:b7:4e:86:
e9:8b:f4:37:95:4b:90:57:01:ce:06:d6:cf:46:c0:
2e:ea:2c:d9:fa:32:8b:68:fe:a7:ce:38:45:2a:72:
9d:fc:12:06:3d:81:54:b3:c2:92:01:2d:f6:15:c7:
d6:9b:88:c0:29:80:9b:0c:9c:3d:3f:c4:52:1b:c1:
3e:5d:66:9c:73:77:ae:41:11:bb:2d:1f:ac:d6:93:
c8:f0:3b:cc:a3:3f:6d:f7:68:e8:4d:99:7e:23:fc:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:57:A5:31:BE:00:52:0D:DD:4A:2A:35:A0:B4:23:0F:FC:8D:C5:EF
X509v3 Authority Key Identifier:
keyid:38:08:19:CB:34:56:4C:78:D6:43:A2:5A:36:87:4B:03:D1:C8:58:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/380819CB34564C78D643A25A36874B03D1C8589A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/380819CB34564C78D643A25A36874B03D1C8589A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/3130332e3136372e342e302f32332d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.4.0/23
Signature Algorithm: sha256WithRSAEncryption
62:cf:40:7b:de:06:ec:96:9b:3b:49:cc:aa:62:75:19:78:71:
88:74:b6:b2:56:19:6d:4d:85:5a:6c:01:88:95:2b:ee:7f:07:
59:84:8d:7d:53:45:ae:cd:bd:b6:bb:ea:76:55:5b:68:f5:5f:
f9:c0:eb:37:c8:7d:f6:33:37:f9:b6:ad:67:bb:78:87:59:df:
67:bc:90:ba:f9:24:7a:69:54:eb:05:31:d3:33:7b:1f:3f:0b:
ba:f2:7a:85:ab:33:7f:7e:75:7c:61:bf:58:36:9e:f1:57:cb:
db:ef:2e:01:76:23:f2:1e:c7:59:c9:eb:db:fa:8f:77:90:39:
19:b5:3c:ea:78:18:6f:51:f2:f2:d2:e9:44:1c:f5:b3:ba:08:
3d:19:b4:93:58:04:78:bb:f4:ae:a7:0a:e6:43:91:7c:60:33:
4e:ba:a5:6c:b9:16:2d:66:e7:88:e6:8c:fc:2a:86:ba:f2:a1:
e3:80:8f:91:70:9a:f6:a0:a7:7b:49:ce:cb:72:95:a4:ae:90:
de:c5:e9:c4:58:a0:c4:30:1d:22:98:b1:4f:90:05:08:43:c5:
72:a5:f5:46:79:2a:e6:bc:72:7b:2e:38:1b:d0:af:0f:fb:b4:
e6:cf:1b:61:4f:d1:52:76:d7:9c:f0:fa:60:d9:e6:ef:f0:67:
60:05:a7:a8
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUOfJzPjXzsKOD0OlNyByPCcjUOB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgwODE5Q0IzNDU2NEM3OEQ2NDNBMjVBMzY4NzRCMDNE
MUM4NTg5QTAeFw0yNjA1MDMwMjMyNDZaFw0yNzA1MDIwMjM3NDZaMDMxMTAvBgNV
BAMTKDBBNTdBNTMxQkUwMDUyMERERDRBMkEzNUEwQjQyMzBGRkM4REM1RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UM3uztnjkxsTvunwk7WIXeL7
6eJAilhmQ5oHLLBsHReYyC5eA5uVy8BjhYI1Ff/n0fAtCeYKzNW+Zu3W4PEbiHxo
eBKwg8WPhQ8WyZUQyAaoBp7i3lUfOo/88pfqVkt8Y3/6YJrUOwwZiXIHSC+dW4QT
oUJ8VXgLxvIg6uzV/FFsEx8+YxZ7JOg9OitS69B+jt1KqWOiAmRkAc3F8Uc8SbdO
humL9DeVS5BXAc4G1s9GwC7qLNn6Moto/qfOOEUqcp38EgY9gVSzwpIBLfYVx9ab
iMApgJsMnD0/xFIbwT5dZpxzd65BEbstH6zWk8jwO8yjP233aOhNmX4j/NyTAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUClelMb4AUg3dSio1oLQjD/yNxe8wHwYDVR0j
BBgwFoAUOAgZyzRWTHjWQ6JaNodLA9HIWJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjBjMTRiOTktNGVlNy00MjJhLWIwNjQtZGNhMzIzNmQ2NzU2LzAvMzgwODE5Q0Iz
NDU2NEM3OEQ2NDNBMjVBMzY4NzRCMDNEMUM4NTg5QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zODA4MTlDQjM0NTY0Qzc4RDY0M0EyNUEzNjg3NEIwM0QxQzg1
ODlBLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYwYzE0Yjk5LTRlZTctNDIyYS1i
MDY0LWRjYTMyMzZkNjc1Ni8wLzMxMzAzMzJlMzEzNjM3MmUzNDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzczOTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnpwQwDQYJKoZIhvcN
AQELBQADggEBAGLPQHveBuyWmztJzKpidRl4cYh0trJWGW1NhVpsAYiVK+5/B1mE
jX1TRa7Nvba76nZVW2j1X/nA6zfIffYzN/m2rWe7eIdZ32e8kLr5JHppVOsFMdMz
ex8/C7ryeoWrM39+dXxhv1g2nvFXy9vvLgF2I/Iex1nJ69v6j3eQORm1POp4GG9R
8vLS6UQc9bO6CD0ZtJNYBHi79K6nCuZDkXxgM066pWy5Fi1m54jmjPwqhrryoeOA
j5Fwmvagp3tJzstylaSukN7F6cRYoMQwHSKYsU+QBQhDxXKl9UZ5Kua8cnsuOBvQ
rw/7tObPG2FP0VJ215zw+mDZ5u/wZ2AFp6g=
-----END CERTIFICATE-----
Generated at Fri May 8 06:34:45 2026 by rpki-client