
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa
File: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier: 61Rq/XjoyZTnLO2u0C049vbn2Cq8QuVA+YAoxGZP5Uo=
Subject key identifier: 5E:19:C0:86:CA:DE:FD:F9:98:12:53:F9:3E:FA:69:25:8A:69:86:0C
Certificate issuer: /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF
Certificate serial: 14E7BA3B35FEB12A36CAC442944BBB2EA3535FF4
Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa
Signing time: Sun 03 May 2026 02:47:01 +0000
ROA not before: Sun 03 May 2026 02:42:01 +0000
ROA not after: Sun 02 May 2027 02:47:01 +0000
asID: 59282
IP address blocks: 103.161.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl
rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 08:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e7:ba:3b:35:fe:b1:2a:36:ca:c4:42:94:4b:bb:2e:a3:53:5f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF
Validity
Not Before: May 3 02:42:01 2026 GMT
Not After : May 2 02:47:01 2027 GMT
Subject: CN=5E19C086CADEFDF9981253F93EFA69258A69860C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:bf:bf:0e:89:4b:1a:69:e4:40:58:fc:08:
76:85:3c:4a:45:d6:bd:7a:fd:85:42:90:a1:d7:55:
86:ea:eb:ae:0d:08:64:c4:be:87:ea:46:5e:eb:da:
83:5d:38:79:d5:31:4b:3a:f6:21:50:03:6d:78:80:
83:38:6c:e4:96:f1:65:25:f6:90:a0:86:16:f0:5d:
3b:c8:01:ea:ff:4c:c1:d6:02:69:36:6f:43:09:d5:
43:4d:de:4a:3c:8c:5f:8a:86:f2:60:5a:0a:98:22:
7a:6b:49:f7:b7:e1:af:90:4f:3c:32:c2:a3:1d:1a:
da:bf:4a:14:ab:36:e7:00:4e:76:a1:c4:54:c9:34:
da:b2:5f:47:bc:f3:6b:a8:c8:c9:48:0f:ce:78:ea:
00:70:72:52:1d:10:cd:db:b8:cb:4a:64:ec:fb:5e:
8d:7f:58:d5:11:e6:69:58:67:a0:59:ff:b1:ae:a7:
96:c9:64:43:27:a5:de:c9:89:36:fb:e1:ed:c6:47:
fa:a5:9f:e1:23:7e:66:70:e6:f8:8b:26:21:f6:5b:
9f:96:7a:c3:40:8f:d1:e5:0b:0c:6c:d1:68:7c:33:
00:1b:ea:73:32:49:20:64:bc:93:25:78:02:8d:27:
a0:93:ac:ac:6d:a2:8c:4d:19:41:89:5e:b1:fd:36:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:19:C0:86:CA:DE:FD:F9:98:12:53:F9:3E:FA:69:25:8A:69:86:0C
X509v3 Authority Key Identifier:
keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.135.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2f:d1:d7:a0:1f:7a:79:31:df:b4:1c:37:52:df:75:e5:15:
4e:84:c5:23:0c:34:8e:ac:83:97:28:c6:70:08:5a:3f:e2:5d:
f6:2e:6d:20:c1:f8:ef:58:b9:5a:ae:35:ac:28:58:be:c8:f2:
35:11:ef:96:81:d9:58:23:a6:22:0b:ff:81:21:d9:01:ad:48:
a2:d9:80:a1:cf:24:28:da:d2:16:29:25:bb:eb:97:10:21:21:
b2:15:94:98:0b:4d:f5:24:3c:c6:5f:02:00:1c:6c:4a:3c:81:
c2:9c:94:75:0b:c1:4d:c0:3f:bb:7e:11:20:27:6d:49:35:3b:
cf:37:4c:31:c7:b9:4b:ab:70:c2:b7:6f:f0:54:01:a6:1f:d4:
b8:3d:8d:90:85:4b:a0:97:cc:95:42:bb:23:3a:af:31:b9:e6:
10:ae:98:62:fb:8b:90:18:d9:17:dc:1c:98:a9:cb:df:ca:9f:
34:03:16:41:b8:a4:8e:a6:58:24:44:1e:3b:af:96:5b:9c:86:
49:a1:37:c2:19:02:9a:79:b4:0f:5d:b2:c8:fe:fa:f0:11:b6:
79:39:44:c8:4b:60:6e:48:91:4a:1a:34:7a:61:51:c7:df:57:
c9:d7:c8:51:81:20:9e:63:47:71:f8:f7:62:5d:f1:16:37:7b:
9b:6d:37:c2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFOe6OzX+sSo2ysRClEu7LqNTX/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZFNzY4NjkxMUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5
NzlFRTdDRjAeFw0yNjA1MDMwMjQyMDFaFw0yNzA1MDIwMjQ3MDFaMDMxMTAvBgNV
BAMTKDVFMTlDMDg2Q0FERUZERjk5ODEyNTNGOTNFRkE2OTI1OEE2OTg2MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5b+/DolLGmnkQFj8CHaFPEpF
1r16/YVCkKHXVYbq664NCGTEvofqRl7r2oNdOHnVMUs69iFQA214gIM4bOSW8WUl
9pCghhbwXTvIAer/TMHWAmk2b0MJ1UNN3ko8jF+KhvJgWgqYInprSfe34a+QTzwy
wqMdGtq/ShSrNucATnahxFTJNNqyX0e882uoyMlID8546gBwclIdEM3buMtKZOz7
Xo1/WNUR5mlYZ6BZ/7Gup5bJZEMnpd7JiTb74e3GR/qln+EjfmZw5viLJiH2W5+W
esNAj9HlCwxs0Wh8MwAb6nMySSBkvJMleAKNJ6CTrKxtooxNGUGJXrH9NpXrAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUXhnAhsre/fmYElP5PvppJYpphgwwHwYDVR0j
BBgwFoAU1udoaRHozuJM/A2klkfx9pee588wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODE1NjgwMWYtYTY3Yi00M2RkLThmNjItYjdiMGQ2MDMxN2FmLzAvRDZFNzY4Njkx
MUU4Q0VFMjRDRkMwREE0OTY0N0YxRjY5NzlFRTdDRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENkU3Njg2OTExRThDRUUyNENGQzBEQTQ5NjQ3RjFGNjk3OUVF
N0NGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgxNTY4MDFmLWE2N2ItNDNkZC04
ZjYyLWI3YjBkNjAzMTdhZi8wLzMxMzAzMzJlMzEzNjMxMmUzMTMzMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6GHMA0GCSqG
SIb3DQEBCwUAA4IBAQAUL9HXoB96eTHftBw3Ut915RVOhMUjDDSOrIOXKMZwCFo/
4l32Lm0gwfjvWLlarjWsKFi+yPI1Ee+WgdlYI6YiC/+BIdkBrUii2YChzyQo2tIW
KSW765cQISGyFZSYC031JDzGXwIAHGxKPIHCnJR1C8FNwD+7fhEgJ21JNTvPN0wx
x7lLq3DCt2/wVAGmH9S4PY2QhUugl8yVQrsjOq8xueYQrphi+4uQGNkX3ByYqcvf
yp80AxZBuKSOplgkRB47r5ZbnIZJoTfCGQKaebQPXbLI/vrwEbZ5OUTIS2BuSJFK
GjR6YVHH31fJ18hRgSCeY0dx+PdiXfEWN3ubbTfC
-----END CERTIFICATE-----
Generated at Tue May 5 18:56:32 2026 by rpki-client