
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa
File: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (raw, json)
Hash identifier: BKnEE3t5/yyaN3HJnwE9Dy+SO+1ms0WO08R6OxZOm7o=
Subject key identifier: 66:C2:DE:61:2B:D2:74:5F:67:B7:47:6A:EB:6F:B9:20:75:5D:62:99
Certificate issuer: /CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Certificate serial: 6D7C1F8FCA3187445F4974CEB328A17F3F9026F3
Authority key identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa
Signing time: Sun 03 May 2026 02:56:54 +0000
ROA not before: Sun 03 May 2026 02:51:54 +0000
ROA not after: Sun 02 May 2027 02:56:54 +0000
asID: 38496
IP address blocks: 103.91.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7c:1f:8f:ca:31:87:44:5f:49:74:ce:b3:28:a1:7f:3f:90:26:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Validity
Not Before: May 3 02:51:54 2026 GMT
Not After : May 2 02:56:54 2027 GMT
Subject: CN=66C2DE612BD2745F67B7476AEB6FB920755D6299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:74:eb:b0:14:07:ae:88:85:8d:43:70:d2:
77:93:58:17:53:46:05:36:0c:d4:66:a9:4b:cc:d5:
73:ee:4e:10:5e:24:63:04:0d:38:ba:4d:c8:51:64:
91:1b:9c:a4:c4:37:ee:fc:65:6f:80:71:e8:54:c4:
a7:29:85:d2:66:ff:41:ce:40:6e:df:97:5b:93:d1:
40:17:4a:02:dd:49:49:9f:43:9c:8a:4a:c8:78:33:
ec:67:d0:e4:a2:38:52:13:e6:82:8f:4e:cb:28:e4:
53:6c:f1:e9:5e:29:c6:a7:16:4a:4b:e8:8e:1d:ec:
fc:04:21:82:86:db:9a:4e:27:c6:8b:b9:18:4c:89:
94:e4:ac:ed:64:da:5d:3e:4d:d3:3d:b5:42:54:b0:
18:6d:e8:1c:2e:63:31:ee:23:c4:a1:52:cd:bf:69:
1e:b1:49:3a:64:41:42:9c:8a:3c:2d:65:0b:fc:6f:
dd:f4:89:37:00:3c:5e:59:88:3d:36:6d:99:0b:03:
5d:eb:e8:f6:ca:08:5a:5b:79:5d:9e:e4:34:a6:b0:
64:6b:0d:7f:c4:55:1d:e9:0e:8a:3a:b6:ff:95:74:
1d:6c:42:4d:c6:66:4e:06:fa:ee:8e:46:83:d7:c1:
d1:b1:00:34:05:e7:e2:40:51:f3:86:ca:5f:9b:7e:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C2:DE:61:2B:D2:74:5F:67:B7:47:6A:EB:6F:B9:20:75:5D:62:99
X509v3 Authority Key Identifier:
keyid:B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.91.0.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:b9:25:ca:c6:71:83:7c:9a:a9:b8:bb:28:ac:a9:d4:e8:ba:
33:c8:29:6f:75:cb:f4:25:ca:89:64:16:49:78:5c:1e:e5:a8:
95:f3:ea:8e:97:90:67:eb:39:cd:18:ac:8e:c4:fd:37:ce:fc:
47:7a:59:35:4f:47:80:3c:87:9e:17:0c:97:81:bf:ad:93:36:
ad:f1:32:59:b9:ea:ff:c1:62:d5:a8:95:ac:de:f9:29:e9:f8:
cc:2e:26:03:7d:69:de:3a:76:4f:18:e4:09:7d:b4:76:2a:e1:
2e:48:bf:6d:ed:1a:93:f4:ef:5d:5e:4f:a5:3c:e1:51:87:7f:
3c:5c:53:c0:f2:93:46:99:94:d6:f3:44:a9:1d:45:5d:66:0b:
54:d2:7e:c9:df:10:12:b4:b6:1c:7c:49:bd:a3:b9:e1:a8:2d:
4b:82:5f:2b:65:9f:82:ea:ac:95:de:58:2c:ac:6a:0a:bb:70:
df:32:9d:16:5c:ef:74:44:4f:d7:99:2a:ba:92:72:bd:a2:f2:
9e:44:b5:ba:88:16:18:f4:5b:24:f1:b6:da:b2:7b:b0:ba:3e:
f7:f6:a9:fc:a2:83:43:0b:48:22:f0:1e:cc:31:51:58:e5:c3:
4a:75:8d:7e:07:34:47:e7:67:f4:d9:28:e6:16:3b:fd:89:0f:
63:54:78:25
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUbXwfj8oxh0RfSXTOsyihfz+QJvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRDNkQwNjAzNzU4MkZEMEY3MjIzOUI3QUVEQ0JEMEYz
MzQyRTIzMDAeFw0yNjA1MDMwMjUxNTRaFw0yNzA1MDIwMjU2NTRaMDMxMTAvBgNV
BAMTKDY2QzJERTYxMkJEMjc0NUY2N0I3NDc2QUVCNkZCOTIwNzU1RDYyOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86XTrsBQHroiFjUNw0neTWBdT
RgU2DNRmqUvM1XPuThBeJGMEDTi6TchRZJEbnKTEN+78ZW+AcehUxKcphdJm/0HO
QG7fl1uT0UAXSgLdSUmfQ5yKSsh4M+xn0OSiOFIT5oKPTsso5FNs8eleKcanFkpL
6I4d7PwEIYKG25pOJ8aLuRhMiZTkrO1k2l0+TdM9tUJUsBht6BwuYzHuI8ShUs2/
aR6xSTpkQUKcijwtZQv8b930iTcAPF5ZiD02bZkLA13r6PbKCFpbeV2e5DSmsGRr
DX/EVR3pDoo6tv+VdB1sQk3GZk4G+u6ORoPXwdGxADQF5+JAUfOGyl+bfrcxAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUZsLeYSvSdF9nt0dq62+5IHVdYpkwHwYDVR0j
BBgwFoAUtMbQYDdYL9D3Ijm3rty9DzNC4jAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTYzNjU1ZjEtMzhiNi00NDE1LThmYWYtMmI1YjkxNTNlNTJkLzAvQjRDNkQwNjAz
NzU4MkZEMEY3MjIzOUI3QUVEQ0JEMEYzMzQyRTIzMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNEM2RDA2MDM3NTgyRkQwRjcyMjM5QjdBRURDQkQwRjMzNDJF
MjMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm
YWYtMmI1YjkxNTNlNTJkLzAvMzEzMDMzMmUzOTMxMmUzMDJlMzAyZjMyMzIyZDMy
MzQyMDNkM2UyMDMzMzgzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnWwAwDQYJKoZIhvcNAQEL
BQADggEBAJ65JcrGcYN8mqm4uyisqdToujPIKW91y/QlyolkFkl4XB7lqJXz6o6X
kGfrOc0YrI7E/TfO/Ed6WTVPR4A8h54XDJeBv62TNq3xMlm56v/BYtWolaze+Snp
+MwuJgN9ad46dk8Y5Al9tHYq4S5Iv23tGpP0711eT6U84VGHfzxcU8Dyk0aZlNbz
RKkdRV1mC1TSfsnfEBK0thx8Sb2jueGoLUuCXytln4LqrJXeWCysagq7cN8ynRZc
73RET9eZKrqScr2i8p5EtbqIFhj0WyTxttqye7C6Pvf2qfyig0MLSCLwHswxUVjl
w0p1jX4HNEfnZ/TZKOYWO/2JD2NUeCU=
-----END CERTIFICATE-----
Generated at Sun May 3 12:38:40 2026 by rpki-client