
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa
File: 3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa (raw, json)
Hash identifier: RVWN9lnu+KvZlFcQZ9inyEY0+6TUodWkYC50twZKJSI=
Subject key identifier: AE:A3:E2:2F:0F:A8:71:5B:C9:04:23:DD:A9:80:D9:9A:DB:53:98:A4
Certificate issuer: /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Certificate serial: 11F5AA7CD10020BE6F54A3C151DE94AA05D61443
Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa
Signing time: Mon 05 Oct 2026 04:25:39 +0000
ROA not before: Mon 05 Oct 2026 04:20:39 +0000
ROA not after: Mon 04 Oct 2027 04:25:39 +0000
asID: 149971
IP address blocks: 103.194.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 07:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f5:aa:7c:d1:00:20:be:6f:54:a3:c1:51:de:94:aa:05:d6:14:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Validity
Not Before: Oct 5 04:20:39 2026 GMT
Not After : Oct 4 04:25:39 2027 GMT
Subject: CN=AEA3E22F0FA8715BC90423DDA980D99ADB5398A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:02:71:19:b5:a3:71:06:e5:96:93:85:75:
df:ca:61:0e:fb:e1:7f:f6:12:be:49:3a:a3:c0:e0:
d7:d1:a1:2f:a8:c4:bc:07:2b:89:b3:25:67:25:3b:
ef:30:8a:97:80:97:76:8c:a7:c1:29:19:c0:5e:bd:
4a:35:32:89:b7:d6:35:8e:4e:9a:a9:63:a5:fc:c9:
71:6b:db:cc:af:10:f2:9a:f8:63:82:63:fd:1b:b2:
d3:2c:8b:5e:fa:1c:9e:b2:fb:09:26:3c:e0:f2:ec:
40:d2:1b:0e:14:4a:b5:5f:81:b0:71:0c:68:dc:03:
2c:8a:8a:91:18:13:d3:38:eb:5a:10:28:7b:7b:30:
0a:b4:21:44:7f:16:e8:f9:9d:16:64:1d:20:17:cc:
26:fc:f7:84:d8:63:f8:c8:34:26:80:f3:28:1b:7d:
43:ff:86:03:25:29:29:4e:aa:db:e5:af:17:78:5e:
39:3f:74:6c:14:ba:92:7c:8d:74:4b:46:ef:5c:dd:
48:8c:29:2e:03:1b:c3:44:0b:8d:6f:1a:34:21:61:
98:d0:a2:d2:0e:b7:13:bb:07:6c:c9:be:e3:d5:f8:
d3:a5:f9:95:92:69:32:a7:73:1f:e8:9a:aa:08:57:
41:cd:e3:47:69:01:96:fd:c9:27:82:69:6a:d1:d3:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:E2:2F:0F:A8:71:5B:C9:04:23:DD:A9:80:D9:9A:DB:53:98:A4
X509v3 Authority Key Identifier:
keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.194.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:51:6d:d5:b9:96:04:74:b0:aa:a4:cd:76:de:25:56:2d:2d:
37:2c:11:3d:6b:d0:da:21:9f:0d:79:d0:cf:c2:c4:0d:5b:a9:
10:40:89:28:bb:f2:48:0e:6f:50:6e:17:71:94:2a:08:24:69:
b0:34:82:3f:56:8d:e6:05:23:e0:4f:04:a5:4f:4f:a1:c7:d9:
1b:1d:ba:7b:c2:05:21:f6:68:cf:f2:28:c1:48:10:c3:f7:ee:
f6:6b:27:b1:9a:88:50:3c:e6:47:86:99:26:03:f5:5f:1f:9d:
aa:8b:3e:f6:3a:62:f6:a5:98:65:24:64:15:44:3a:f2:1b:15:
2a:25:ae:bd:29:a8:22:93:79:cb:48:1d:41:84:18:5f:f2:41:
72:7b:8f:c6:12:d2:75:17:92:14:35:7c:b8:6f:12:f7:d5:e9:
ac:24:10:2e:9e:55:34:17:2e:37:d7:5a:dc:2b:e0:f6:e7:d6:
66:9b:91:48:63:51:f2:45:10:85:8b:b8:61:56:0d:69:6a:08:
ff:9c:5d:06:e1:26:cd:bd:bd:87:b6:6b:67:c4:00:cd:8d:43:
57:59:d0:2e:17:5a:c1:03:72:c8:4c:18:85:1f:97:5f:45:f3:
43:e6:54:f6:38:ac:c4:f8:c1:a9:ca:09:95:76:61:6d:c1:4a:
ca:a4:aa:18
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUEfWqfNEAIL5vVKPBUd6UqgXWFEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVG
NjZCRjdDRDAeFw0yNjEwMDUwNDIwMzlaFw0yNzEwMDQwNDI1MzlaMDMxMTAvBgNV
BAMTKEFFQTNFMjJGMEZBODcxNUJDOTA0MjNEREE5ODBEOTlBREI1Mzk4QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmgJxGbWjcQbllpOFdd/KYQ77
4X/2Er5JOqPA4NfRoS+oxLwHK4mzJWclO+8wipeAl3aMp8EpGcBevUo1Mom31jWO
TpqpY6X8yXFr28yvEPKa+GOCY/0bstMsi176HJ6y+wkmPODy7EDSGw4USrVfgbBx
DGjcAyyKipEYE9M461oQKHt7MAq0IUR/Fuj5nRZkHSAXzCb894TYY/jINCaA8ygb
fUP/hgMlKSlOqtvlrxd4Xjk/dGwUupJ8jXRLRu9c3UiMKS4DG8NEC41vGjQhYZjQ
otIOtxO7B2zJvuPV+NOl+ZWSaTKncx/omqoIV0HN40dpAZb9ySeCaWrR0yWlAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUrqPiLw+ocVvJBCPdqYDZmttTmKQwHwYDVR0j
BBgwFoAUZf4donuCoPmsMYVS/S/QDvZr980wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yjg5OTNhOTMtNTg4OS00ZTAyLTllOTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3
QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVGNjZCRjdDRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NUZFMURBMjdCODJBMEY5QUMzMTg1NTJGRDJGRDAwRUY2NkJG
N0NELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I4OTkzYTkzLTU4ODktNGUwMi05
ZTk1LTc2OWNiODllMDAzNS8wLzMxMzAzMzJlMzEzOTM0MmUzNDM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8IvMA0GCSqG
SIb3DQEBCwUAA4IBAQCNUW3VuZYEdLCqpM123iVWLS03LBE9a9DaIZ8NedDPwsQN
W6kQQIkou/JIDm9QbhdxlCoIJGmwNII/Vo3mBSPgTwSlT0+hx9kbHbp7wgUh9mjP
8ijBSBDD9+72ayexmohQPOZHhpkmA/VfH52qiz72OmL2pZhlJGQVRDryGxUqJa69
Kagik3nLSB1BhBhf8kFye4/GEtJ1F5IUNXy4bxL31emsJBAunlU0Fy4311rcK+D2
59Zmm5FIY1HyRRCFi7hhVg1pagj/nF0G4SbNvb2HtmtnxADNjUNXWdAuF1rBA3LI
TBiFH5dfRfND5lT2OKzE+MGpygmVdmFtwUrKpKoY
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:04:53 2026 by rpki-client