
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130332e31322e32382e302f32322d3234203d3e203438343635.roa
File: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (raw, json)
Hash identifier: rh10KjKVWoQwoKdQAU/xuosvzsdN9Rw59HlxfUxCKPU=
Subject key identifier: 88:BA:8A:E7:C1:E4:FF:26:45:E8:3E:AD:B5:91:5C:1A:D0:F2:97:DC
Certificate issuer: /CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Certificate serial: 2E4B4782A2F525CEE5D5845C26C8AF4614CD78C4
Authority key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130332e31322e32382e302f32322d3234203d3e203438343635.roa
Signing time: Sun 03 May 2026 02:45:46 +0000
ROA not before: Sun 03 May 2026 02:40:46 +0000
ROA not after: Sun 02 May 2027 02:45:46 +0000
asID: 48465
IP address blocks: 103.12.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 07:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4b:47:82:a2:f5:25:ce:e5:d5:84:5c:26:c8:af:46:14:cd:78:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Validity
Not Before: May 3 02:40:46 2026 GMT
Not After : May 2 02:45:46 2027 GMT
Subject: CN=88BA8AE7C1E4FF2645E83EADB5915C1AD0F297DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:ab:36:41:23:9d:ab:d4:9c:11:b2:16:58:
fe:7a:3a:d9:ea:b8:51:0d:e8:50:c0:fa:a4:a2:4b:
2f:be:fd:b4:fb:d5:0c:56:eb:b6:b0:b5:69:a3:f2:
a9:84:96:42:c1:2c:63:f1:c8:67:13:cf:e5:a0:c8:
62:30:15:49:29:cd:da:f4:4e:6c:41:ce:f4:e1:0e:
0f:69:ba:69:a6:88:21:a6:aa:71:01:93:7f:9a:ca:
bd:c8:ac:8b:b4:c1:4c:5f:0a:52:f3:2c:df:2d:a3:
5d:71:4e:cb:8f:44:5b:50:25:d2:49:16:d7:6b:f5:
ce:28:68:90:16:50:70:1c:33:78:63:f4:e7:61:7a:
27:14:c0:26:1a:b9:ed:82:e3:86:8d:4a:7a:71:a5:
bf:85:38:c8:d2:86:1d:02:46:9a:aa:a3:d6:2a:98:
b5:1e:df:ca:bb:27:7c:f6:71:b8:e9:d8:03:a0:84:
a9:48:2c:7e:99:4a:72:e8:0f:2d:b7:9a:38:32:f2:
5c:8b:e4:a3:99:bb:7d:a6:12:56:c6:97:ce:71:51:
fa:de:2a:3c:fa:be:75:bb:8a:31:95:ee:b1:00:3f:
ce:fc:b5:a4:00:cd:3f:42:93:99:db:a0:92:f6:c1:
37:44:cf:43:ee:73:1d:50:25:33:7a:87:33:f5:8b:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BA:8A:E7:C1:E4:FF:26:45:E8:3E:AD:B5:91:5C:1A:D0:F2:97:DC
X509v3 Authority Key Identifier:
keyid:B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130332e31322e32382e302f32322d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.12.28.0/22
Signature Algorithm: sha256WithRSAEncryption
19:5c:30:e8:41:4f:a4:95:9d:e5:a9:b5:50:47:82:ba:39:6c:
bc:42:b6:49:35:0f:bb:80:f1:4d:1b:6e:bd:7b:dd:87:76:7f:
c0:b9:92:c4:b8:54:e5:eb:c4:ab:86:70:c1:2a:c9:3f:14:35:
07:75:58:e2:ae:0b:2e:be:ec:ff:a6:6e:59:9a:58:2e:7b:37:
f1:98:8a:ed:a5:6a:df:3a:4a:dd:64:50:49:f9:9e:02:0f:c5:
b7:ac:b7:05:38:65:52:d0:ad:f0:ca:0c:0a:51:72:dc:cc:79:
d5:22:f7:bd:18:59:d8:a7:e2:82:61:2d:a1:43:4e:df:1f:d1:
f1:31:b2:82:ea:7a:7c:49:f7:76:33:3c:e2:85:51:f6:a9:2a:
9f:6f:ee:38:1f:fd:d2:f4:26:52:38:5f:b8:53:1a:b5:c0:0b:
a9:1d:8c:70:e4:a2:14:c9:55:6c:4b:47:fd:a4:e9:16:1b:a4:
a1:80:9f:bd:d6:2a:38:1c:43:f9:9f:0b:0d:5b:ce:04:f5:bc:
04:24:ec:0f:ef:2f:48:2a:5e:da:f9:86:79:14:32:fa:b2:c0:
b6:4b:8b:a3:1a:2b:49:81:b5:d1:a6:bb:ba:93:e6:53:a7:37:
34:df:5d:bb:cf:53:35:e9:b9:2a:a4:f9:2e:ab:5b:e8:c3:8c:
c2:97:14:9b
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIULktHgqL1Jc7l1YRcJsivRhTNeMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4
MDc3QjRFRjAeFw0yNjA1MDMwMjQwNDZaFw0yNzA1MDIwMjQ1NDZaMDMxMTAvBgNV
BAMTKDg4QkE4QUU3QzFFNEZGMjY0NUU4M0VBREI1OTE1QzFBRDBGMjk3REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRWas2QSOdq9ScEbIWWP56Otnq
uFEN6FDA+qSiSy++/bT71QxW67awtWmj8qmElkLBLGPxyGcTz+WgyGIwFUkpzdr0
TmxBzvThDg9pummmiCGmqnEBk3+ayr3IrIu0wUxfClLzLN8to11xTsuPRFtQJdJJ
Ftdr9c4oaJAWUHAcM3hj9OdheicUwCYaue2C44aNSnpxpb+FOMjShh0CRpqqo9Yq
mLUe38q7J3z2cbjp2AOghKlILH6ZSnLoDy23mjgy8lyL5KOZu32mElbGl85xUfre
Kjz6vnW7ijGV7rEAP878taQAzT9Ck5nboJL2wTdEz0Pucx1QJTN6hzP1i9QjAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUiLqK58Hk/yZF6D6ttZFcGtDyl9wwHwYDVR0j
BBgwFoAUtkqtYtkC9gi7lf0L0/HaioB3tO8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJE
OTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4MDc3QjRFRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNjRBQUQ2MkQ5MDJGNjA4QkI5NUZEMEJEM0YxREE4QTgwNzdC
NEVGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdkNmVhN2ZhLTk0ZDItNGRkYy1h
OGU2LTVkYzYyNmMyOTFkNC8wLzMxMzAzMzJlMzEzMjJlMzIzODJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDM0MzgzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnDBwwDQYJKoZIhvcN
AQELBQADggEBABlcMOhBT6SVneWptVBHgro5bLxCtkk1D7uA8U0bbr173Yd2f8C5
ksS4VOXrxKuGcMEqyT8UNQd1WOKuCy6+7P+mblmaWC57N/GYiu2lat86St1kUEn5
ngIPxbestwU4ZVLQrfDKDApRctzMedUi970YWdin4oJhLaFDTt8f0fExsoLqenxJ
93YzPOKFUfapKp9v7jgf/dL0JlI4X7hTGrXAC6kdjHDkohTJVWxLR/2k6RYbpKGA
n73WKjgcQ/mfCw1bzgT1vAQk7A/vL0gqXtr5hnkUMvqywLZLi6MaK0mBtdGmu7qT
5lOnNzTfXbvPUzXpuSqk+S6rW+jDjMKXFJs=
-----END CERTIFICATE-----
Generated at Tue May 5 16:54:21 2026 by rpki-client