
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139382e302f32332d3234203d3e20313530393135.roa
File: 3130332e39372e3139382e302f32332d3234203d3e20313530393135.roa (raw, json)
Hash identifier: z6kkZUKqF82/TRaRxSD81xe5bX0APDWAtc/JbcQmawI=
Subject key identifier: 4D:1B:EC:2C:93:3B:F2:7A:DE:29:A8:3F:BE:0E:60:F8:AE:64:3B:E4
Certificate issuer: /CN=9635F0724E9717C889D5604679E31DA89F807CC1
Certificate serial: 22CB17928843B3E96825EE9E2DC82C2F08452D70
Authority key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139382e302f32332d3234203d3e20313530393135.roa
Signing time: Thu 30 Jul 2026 06:21:16 +0000
ROA not before: Thu 30 Jul 2026 06:16:16 +0000
ROA not after: Thu 29 Jul 2027 06:21:16 +0000
asID: 150915
IP address blocks: 103.97.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 12:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:cb:17:92:88:43:b3:e9:68:25:ee:9e:2d:c8:2c:2f:08:45:2d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9635F0724E9717C889D5604679E31DA89F807CC1
Validity
Not Before: Jul 30 06:16:16 2026 GMT
Not After : Jul 29 06:21:16 2027 GMT
Subject: CN=4D1BEC2C933BF27ADE29A83FBE0E60F8AE643BE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:0a:ab:91:23:4a:2f:71:1d:a9:f6:1f:c8:
09:6f:6a:93:92:cd:2f:af:76:6c:41:b3:53:d3:e8:
05:7a:25:e3:33:c2:04:7e:a1:0f:53:42:c9:5f:17:
c0:f9:a0:ef:9a:15:bd:7a:16:28:bd:b8:35:3d:c2:
b7:1d:3e:9b:b8:7c:a1:78:8f:3d:c0:5f:23:9b:8f:
90:90:ce:2f:b9:51:c6:d0:b5:3b:e1:ca:cc:d4:90:
52:cc:18:09:2f:45:35:e3:14:55:ed:5c:f2:c4:b6:
f9:31:7b:7b:d2:6f:8d:08:3e:e0:27:be:10:2e:6e:
2f:e7:e3:4e:20:43:91:70:f5:ba:59:37:3d:f7:78:
5a:28:17:3d:26:6f:4a:63:04:c3:d4:31:dd:fa:52:
8a:61:1a:c7:87:48:ed:0f:cf:eb:87:65:81:3e:d9:
15:bb:1f:b9:41:ff:dc:a9:5d:af:ba:c6:6f:97:6a:
fd:e0:f0:21:a8:8f:06:7d:73:7d:27:df:2c:02:21:
ff:80:bd:2a:74:d9:fd:f2:eb:21:fc:71:94:c2:2c:
6b:8f:33:a8:d0:83:ad:3d:40:ff:a3:b9:b7:f0:88:
41:f4:13:85:d1:60:e3:73:56:ff:3b:93:bf:38:65:
f6:6d:4a:fb:98:54:04:64:de:88:a7:e5:95:a4:84:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1B:EC:2C:93:3B:F2:7A:DE:29:A8:3F:BE:0E:60:F8:AE:64:3B:E4
X509v3 Authority Key Identifier:
keyid:96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139382e302f32332d3234203d3e20313530393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.198.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:07:98:96:46:2a:fa:4a:d7:cc:96:22:56:2b:43:69:e9:b7:
49:79:ca:34:a3:1a:2f:f7:da:34:8c:28:6c:fc:42:76:03:e4:
43:aa:ef:81:2c:ca:f6:03:2b:83:ab:2d:9c:e9:5e:79:53:4c:
52:40:3f:97:25:fa:32:d5:6d:72:b1:e4:24:4e:73:02:b6:da:
11:e6:0c:0f:80:de:52:ed:7c:93:4f:8d:3b:0d:d5:43:02:05:
8a:41:21:ff:19:9c:a2:c0:d4:2c:3f:86:b9:9e:5e:dc:b8:65:
0e:a2:31:bc:fd:74:4e:00:cc:24:80:19:e6:50:df:ba:32:5e:
60:f3:de:e0:bc:6c:4a:2e:14:f1:81:21:12:82:89:07:fc:61:
68:f3:4a:4d:e1:95:98:e1:32:70:b4:68:6d:01:eb:47:be:d7:
c4:12:c7:7c:eb:e0:70:19:b0:49:a3:1c:38:7a:e7:95:0e:ae:
fb:f1:be:21:7e:6c:16:65:09:37:54:8d:0d:3f:31:1c:af:40:
9b:36:7e:9f:fe:f3:b0:c1:9a:f8:7b:b9:5e:91:0e:89:93:7b:
dc:67:7f:32:03:40:38:55:72:b7:0e:de:6c:78:92:cc:97:2c:
ea:fd:da:b0:da:90:c9:63:0c:fd:2d:36:80:82:34:b8:e0:78:
ab:88:37:6c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUIssXkohDs+loJe6eLcgsLwhFLXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYzNUYwNzI0RTk3MTdDODg5RDU2MDQ2NzlFMzFEQTg5
RjgwN0NDMTAeFw0yNjA3MzAwNjE2MTZaFw0yNzA3MjkwNjIxMTZaMDMxMTAvBgNV
BAMTKDREMUJFQzJDOTMzQkYyN0FERTI5QTgzRkJFMEU2MEY4QUU2NDNCRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdlwqrkSNKL3EdqfYfyAlvapOS
zS+vdmxBs1PT6AV6JeMzwgR+oQ9TQslfF8D5oO+aFb16Fii9uDU9wrcdPpu4fKF4
jz3AXyObj5CQzi+5UcbQtTvhyszUkFLMGAkvRTXjFFXtXPLEtvkxe3vSb40IPuAn
vhAubi/n404gQ5Fw9bpZNz33eFooFz0mb0pjBMPUMd36UophGseHSO0Pz+uHZYE+
2RW7H7lB/9ypXa+6xm+Xav3g8CGojwZ9c30n3ywCIf+AvSp02f3y6yH8cZTCLGuP
M6jQg609QP+jubfwiEH0E4XRYONzVv87k784ZfZtSvuYVARk3oin5ZWkhE5xAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUTRvsLJM78nreKag/vg5g+K5kO+QwHwYDVR0j
BBgwFoAUljXwck6XF8iJ1WBGeeMdqJ+AfMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDg0NjNhZDUtMTc0NS00NDNlLWIxNjUtZDE5NGVlZDg5ZTZiLzAvOTYzNUYwNzI0
RTk3MTdDODg5RDU2MDQ2NzlFMzFEQTg5RjgwN0NDMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NjM1RjA3MjRFOTcxN0M4ODlENTYwNDY3OUUzMURBODlGODA3
Q0MxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4NDYzYWQ1LTE3NDUtNDQzZS1i
MTY1LWQxOTRlZWQ4OWU2Yi8wLzMxMzAzMzJlMzkzNzJlMzEzOTM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ2HGMA0GCSqG
SIb3DQEBCwUAA4IBAQDEB5iWRir6StfMliJWK0Np6bdJeco0oxov99o0jChs/EJ2
A+RDqu+BLMr2AyuDqy2c6V55U0xSQD+XJfoy1W1yseQkTnMCttoR5gwPgN5S7XyT
T407DdVDAgWKQSH/GZyiwNQsP4a5nl7cuGUOojG8/XROAMwkgBnmUN+6Ml5g897g
vGxKLhTxgSESgokH/GFo80pN4ZWY4TJwtGhtAetHvtfEEsd86+BwGbBJoxw4eueV
Dq778b4hfmwWZQk3VI0NPzEcr0CbNn6f/vOwwZr4e7lekQ6Jk3vcZ38yA0A4VXK3
Dt5seJLMlyzq/dqw2pDJYwz9LTaAgjS44HiriDds
-----END CERTIFICATE-----
Generated at Thu Sep 3 23:44:16 2026 by rpki-client