
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32332d3233203d3e20313430333839.roa
File: 3130332e3135302e36302e302f32332d3233203d3e20313430333839.roa (raw, json)
Hash identifier: 0ccOBKdvr9wDonEoZlbpSvWhj87Hc8UpOz7E+Yf7JNU=
Subject key identifier: 8A:76:89:27:E8:5D:41:AE:07:4D:05:2D:9C:AE:01:86:DF:BA:6A:61
Certificate issuer: /CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524
Certificate serial: 57102BB4D01A02E71AED7435780B973C00E7B71A
Authority key identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32332d3233203d3e20313430333839.roa
Signing time: Tue 13 Oct 2026 15:16:47 +0000
ROA not before: Tue 13 Oct 2026 15:11:47 +0000
ROA not after: Tue 12 Oct 2027 15:16:47 +0000
asID: 140389
IP address blocks: 103.150.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl
rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 23:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:10:2b:b4:d0:1a:02:e7:1a:ed:74:35:78:0b:97:3c:00:e7:b7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524
Validity
Not Before: Oct 13 15:11:47 2026 GMT
Not After : Oct 12 15:16:47 2027 GMT
Subject: CN=8A768927E85D41AE074D052D9CAE0186DFBA6A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:e7:52:58:3c:ef:54:21:36:b4:ed:9b:64:
3c:5c:17:7d:d7:66:8f:e7:64:60:ae:4e:aa:f0:f1:
7b:85:bc:1c:e5:ab:e9:91:41:1d:be:28:7a:80:61:
08:0b:33:9c:6a:38:9d:6b:8d:a9:61:2f:c0:05:46:
27:28:bb:88:cc:63:f5:4b:ae:23:c2:84:c3:16:b1:
01:33:7f:7a:aa:05:b0:2a:58:a5:24:f1:0c:b5:59:
02:41:54:80:39:40:7b:6a:e0:f9:81:e4:cb:f3:dc:
86:9d:4d:80:18:a1:15:c9:65:76:81:aa:44:ee:f5:
3a:25:ed:3e:cc:9d:5b:b2:ea:45:03:e8:dc:21:81:
80:e3:7c:77:79:fd:bd:04:87:d6:2e:d2:8f:c9:9b:
07:bd:a5:ba:bc:62:fa:09:63:8e:7e:9a:fc:5b:f4:
75:86:c2:09:c1:81:68:d5:75:dc:72:29:d2:50:7f:
d6:a0:94:2a:28:3c:ef:40:c6:35:79:a3:37:35:86:
bf:dd:90:47:bd:1d:25:59:6f:a7:01:e1:e3:69:78:
1a:15:5b:dd:21:61:fc:a1:35:48:ca:f6:e9:7c:88:
87:cb:5b:c1:dc:0d:d3:a1:a4:9d:16:63:1e:f8:e6:
01:c5:d8:4b:90:dd:66:28:0f:24:b7:bc:e4:68:35:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:89:27:E8:5D:41:AE:07:4D:05:2D:9C:AE:01:86:DF:BA:6A:61
X509v3 Authority Key Identifier:
keyid:D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32332d3233203d3e20313430333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.60.0/23
Signature Algorithm: sha256WithRSAEncryption
68:db:02:14:4c:32:66:03:8a:ea:95:83:81:af:7d:f3:f0:96:
4e:9c:e6:a6:6e:c1:e5:7a:3f:73:c0:dc:93:0a:ff:7b:ec:76:
7b:b0:06:8d:c6:32:6e:0f:c2:2c:9b:0b:36:5f:c2:a3:2c:01:
1a:aa:cb:68:a0:3a:53:03:80:72:aa:9b:ed:53:90:7e:80:5f:
d2:43:29:f9:67:b7:71:19:a9:63:e9:d2:f4:d8:a9:59:f7:76:
a8:2c:f0:d8:28:f5:c2:9c:a2:4e:a9:87:24:35:10:2e:af:2e:
a2:25:42:39:bb:45:26:ac:5c:3b:17:c0:11:46:5d:16:99:04:
58:36:57:8f:db:12:f7:cf:b6:f3:33:e6:51:e7:5b:de:0d:30:
9b:48:b4:8f:db:60:d2:b8:9c:b4:f9:7c:87:fd:37:76:f8:d3:
d4:39:db:81:3b:61:d8:5b:d7:25:70:c6:4c:14:67:09:67:09:
7a:d8:e1:b0:42:e5:62:45:52:89:cb:85:82:ea:51:13:3e:6d:
bc:ce:9a:73:b3:c8:db:81:89:ac:44:47:14:1f:16:f6:68:63:
10:5e:42:12:5e:96:ce:9d:b2:25:c5:ae:c6:df:dd:ee:d5:76:
fb:6f:10:d6:00:b8:83:5a:1f:d1:ae:ad:10:f2:4c:7d:9d:d2:
84:65:dd:bd
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUVxArtNAaAuca7XQ1eAuXPADntxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0
REQxRjUyNDAeFw0yNjEwMTMxNTExNDdaFw0yNzEwMTIxNTE2NDdaMDMxMTAvBgNV
BAMTKDhBNzY4OTI3RTg1RDQxQUUwNzREMDUyRDlDQUUwMTg2REZCQTZBNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe4edSWDzvVCE2tO2bZDxcF33X
Zo/nZGCuTqrw8XuFvBzlq+mRQR2+KHqAYQgLM5xqOJ1rjalhL8AFRicou4jMY/VL
riPChMMWsQEzf3qqBbAqWKUk8Qy1WQJBVIA5QHtq4PmB5Mvz3IadTYAYoRXJZXaB
qkTu9Tol7T7MnVuy6kUD6NwhgYDjfHd5/b0Eh9Yu0o/Jmwe9pbq8YvoJY45+mvxb
9HWGwgnBgWjVddxyKdJQf9aglCooPO9AxjV5ozc1hr/dkEe9HSVZb6cB4eNpeBoV
W90hYfyhNUjK9ul8iIfLW8HcDdOhpJ0WYx745gHF2EuQ3WYoDyS3vORoNdo7AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUinaJJ+hdQa4HTQUtnK4Bht+6amEwHwYDVR0j
BBgwFoAU2LGqpNIqLiJZ5V56UMsV/03R9SQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2IzZWFiYjQtNGRiMy00MzczLWEzNDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTRE
MjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0REQxRjUyNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EOEIxQUFBNEQyMkEyRTIyNTlFNTVFN0E1MENCMTVGRjRERDFG
NTI0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdiM2VhYmI0LTRkYjMtNDM3My1h
MzQ4LWZiMWVkNzA1NTY1MS8wLzMxMzAzMzJlMzEzNTMwMmUzNjMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDMwMzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5Y8MA0GCSqG
SIb3DQEBCwUAA4IBAQBo2wIUTDJmA4rqlYOBr33z8JZOnOambsHlej9zwNyTCv97
7HZ7sAaNxjJuD8Ismws2X8KjLAEaqstooDpTA4ByqpvtU5B+gF/SQyn5Z7dxGalj
6dL02KlZ93aoLPDYKPXCnKJOqYckNRAury6iJUI5u0UmrFw7F8ARRl0WmQRYNleP
2xL3z7bzM+ZR51veDTCbSLSP22DSuJy0+XyH/Td2+NPUOduBO2HYW9clcMZMFGcJ
Zwl62OGwQuViRVKJy4WC6lETPm28zppzs8jbgYmsREcUHxb2aGMQXkISXpbOnbIl
xa7G393u1Xb7bxDWALiDWh/Rrq0Q8kx9ndKEZd29
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:56:27 2026 by rpki-client