
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32312e302f32342d3234203d3e203539313337.roa
File: 3130332e3235322e32312e302f32342d3234203d3e203539313337.roa (raw, json)
Hash identifier: GSntx/RVjmCYnJcJhITG93d29qmbasGCByLYGtPWFQ4=
Subject key identifier: E5:06:C2:5A:01:52:78:38:79:D9:73:1A:6E:7E:2B:45:94:09:D9:48
Certificate issuer: /CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
Certificate serial: 3E1636782B148275A85B3CF976F02F472AB825EE
Authority key identifier: 0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32312e302f32342d3234203d3e203539313337.roa
Signing time: Fri 16 Oct 2026 09:31:22 +0000
ROA not before: Fri 16 Oct 2026 09:26:22 +0000
ROA not after: Fri 15 Oct 2027 09:31:22 +0000
asID: 59137
IP address blocks: 103.252.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl
rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:16:36:78:2b:14:82:75:a8:5b:3c:f9:76:f0:2f:47:2a:b8:25:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
Validity
Not Before: Oct 16 09:26:22 2026 GMT
Not After : Oct 15 09:31:22 2027 GMT
Subject: CN=E506C25A0152783879D9731A6E7E2B459409D948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:45:9e:f6:8a:3c:4e:60:df:bd:28:35:39:
3c:7c:00:0a:3e:d4:2b:e4:e3:06:5f:bd:47:c2:b4:
dd:8b:99:09:57:da:7f:78:b1:dd:38:e7:9b:8c:30:
fe:4e:2f:b1:23:51:f9:08:87:c2:1e:f4:25:8c:74:
35:00:ef:94:41:f0:d2:2d:5d:8c:3e:13:33:82:1f:
a3:23:65:1f:40:ea:66:1d:a8:31:8a:f4:87:de:5d:
2c:2d:6d:1f:7a:5d:19:be:95:7a:44:0f:67:48:d6:
0f:c6:ca:57:a1:3b:c2:ee:fe:7f:32:ec:99:cf:55:
0a:36:1f:11:9e:f2:bb:32:0b:ac:99:a6:40:d0:8a:
0f:4a:bd:e6:dc:61:52:5b:b0:5b:95:02:a1:69:b4:
fa:b5:c9:6d:3c:81:13:f2:67:60:5a:45:17:fd:6e:
19:54:d5:4c:59:1f:20:74:13:50:c4:9a:bd:71:b1:
fa:84:9b:9d:43:94:63:96:59:53:9c:7a:8b:0a:3d:
a1:a9:14:60:d5:02:e4:93:2a:90:5d:5f:a6:c3:71:
aa:ed:21:77:61:03:be:86:9d:11:4e:b9:a7:59:a8:
db:0d:f1:d9:31:a7:42:86:b3:e5:cb:13:c3:3c:c8:
35:99:25:e4:0c:ea:d4:9d:7c:a2:59:a5:d9:70:ae:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:06:C2:5A:01:52:78:38:79:D9:73:1A:6E:7E:2B:45:94:09:D9:48
X509v3 Authority Key Identifier:
keyid:0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/3130332e3235322e32312e302f32342d3234203d3e203539313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.252.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:53:29:5d:a4:3c:e5:37:22:b6:12:d6:3a:a0:79:7f:d6:98:
34:b1:c7:0f:e2:b1:6d:2e:00:fc:53:19:d5:33:ef:e5:19:ae:
3a:5c:1f:c8:03:9b:e5:ba:60:08:03:68:37:5a:c8:07:a5:a3:
8f:14:88:16:ae:ac:1c:2c:5e:f5:86:9d:fd:31:b2:3a:0e:91:
ae:f5:2d:c6:ab:f8:7e:fc:43:f8:8a:93:8a:5b:3c:9d:c1:34:
ec:00:87:d5:30:a4:11:c1:26:18:c7:a3:be:42:1d:46:f1:aa:
a3:28:c0:26:44:63:64:f2:da:91:a2:6d:19:cd:f7:98:eb:75:
d9:62:fb:16:83:3f:55:8f:d3:97:2c:d5:62:22:98:4f:8b:68:
3a:e0:cf:03:88:2a:5b:7a:f2:3d:e6:ae:db:9d:3b:73:29:eb:
3e:1f:13:90:43:9e:ef:73:fd:bc:30:41:dc:3e:7c:46:67:78:
2a:07:5e:dd:0d:c8:d3:57:07:42:2c:4c:a9:58:89:f5:6f:e7:
17:26:6c:fe:51:65:01:bd:29:3c:7d:d2:f2:a2:b5:5f:ea:1c:
89:72:3d:2b:20:0d:1d:98:cb:34:e7:3f:66:b0:0d:87:60:f7:
8a:d9:03:5d:82:9b:a5:b8:80:d3:ae:b5:c8:ef:18:4d:cd:da:
f6:63:f5:fc
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPhY2eCsUgnWoWzz5dvAvRyq4Je4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE0MEQ4NkVBRTI5QzU1OEIyNDA2QTUyREYxNTExMjhB
NTk2REZFRjAeFw0yNjEwMTYwOTI2MjJaFw0yNzEwMTUwOTMxMjJaMDMxMTAvBgNV
BAMTKEU1MDZDMjVBMDE1Mjc4Mzg3OUQ5NzMxQTZFN0UyQjQ1OTQwOUQ5NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZkWe9oo8TmDfvSg1OTx8AAo+
1Cvk4wZfvUfCtN2LmQlX2n94sd0455uMMP5OL7EjUfkIh8Ie9CWMdDUA75RB8NIt
XYw+EzOCH6MjZR9A6mYdqDGK9IfeXSwtbR96XRm+lXpED2dI1g/GylehO8Lu/n8y
7JnPVQo2HxGe8rsyC6yZpkDQig9KvebcYVJbsFuVAqFptPq1yW08gRPyZ2BaRRf9
bhlU1UxZHyB0E1DEmr1xsfqEm51DlGOWWVOceosKPaGpFGDVAuSTKpBdX6bDcart
IXdhA76GnRFOuadZqNsN8dkxp0KGs+XLE8M8yDWZJeQM6tSdfKJZpdlwrkqlAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5QbCWgFSeDh52XMabn4rRZQJ2UgwHwYDVR0j
BBgwFoAUCkDYbq4pxViyQGpS3xURKKWW3+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjY0YTczNGYtOTg0ZS00OWNiLWI0YjAtN2MxZDc5MjM3Y2IxLzAvMEE0MEQ4NkVB
RTI5QzU1OEIyNDA2QTUyREYxNTExMjhBNTk2REZFRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTQwRDg2RUFFMjlDNTU4QjI0MDZBNTJERjE1MTEyOEE1OTZE
RkVGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY2NGE3MzRmLTk4NGUtNDljYi1i
NGIwLTdjMWQ3OTIzN2NiMS8wLzMxMzAzMzJlMzIzNTMyMmUzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzOTMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf8FTANBgkqhkiG
9w0BAQsFAAOCAQEAXVMpXaQ85TcithLWOqB5f9aYNLHHD+KxbS4A/FMZ1TPv5Rmu
OlwfyAOb5bpgCANoN1rIB6WjjxSIFq6sHCxe9Yad/TGyOg6RrvUtxqv4fvxD+IqT
ils8ncE07ACH1TCkEcEmGMejvkIdRvGqoyjAJkRjZPLakaJtGc33mOt12WL7FoM/
VY/TlyzVYiKYT4toOuDPA4gqW3ryPeau2507cynrPh8TkEOe73P9vDBB3D58Rmd4
Kgde3Q3I01cHQixMqViJ9W/nFyZs/lFlAb0pPH3S8qK1X+ociXI9KyANHZjLNOc/
ZrANh2D3itkDXYKbpbiA0661yO8YTc3a9mP1/A==
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:03 2026 by rpki-client