
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa
File: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (raw, json)
Hash identifier: 1Oz5nMbJVkPSuoU8i0mWeK0RrhcDLB0CPMxg6brBuiE=
Subject key identifier: 99:BD:71:17:B7:05:AF:58:7D:74:CF:B1:E2:92:52:F1:21:70:33:72
Certificate issuer: /CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C
Certificate serial: 60A0567C405EF748815A7DC329C4EAAEA169F6ED
Authority key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa
Signing time: Sun 03 May 2026 03:02:39 +0000
ROA not before: Sun 03 May 2026 02:57:39 +0000
ROA not after: Sun 02 May 2027 03:02:39 +0000
asID: 151003
IP address blocks: 103.213.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl
rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 09:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a0:56:7c:40:5e:f7:48:81:5a:7d:c3:29:c4:ea:ae:a1:69:f6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C
Validity
Not Before: May 3 02:57:39 2026 GMT
Not After : May 2 03:02:39 2027 GMT
Subject: CN=99BD7117B705AF587D74CFB1E29252F121703372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e2:5b:f6:12:4c:2b:5f:92:30:cb:ec:90:db:
68:97:de:cd:1c:f2:2f:66:32:3c:48:de:da:47:50:
b5:50:49:25:2a:fd:18:52:9b:62:c9:4b:a3:cc:b2:
57:47:15:80:a8:b0:c7:36:5b:27:ae:d9:a2:f1:e3:
bd:a0:d8:ed:67:66:1e:93:fa:02:50:9a:b7:97:12:
4d:39:70:99:25:78:66:12:57:bd:2c:28:da:a6:0c:
e5:44:68:a7:09:33:5e:22:96:6b:18:df:94:82:ad:
7b:6b:9c:7c:ad:d7:eb:42:a0:b9:cf:0c:a8:38:fa:
c2:be:23:0a:79:53:2a:57:84:7d:db:a4:50:57:ae:
fe:2c:9c:65:70:98:f3:f7:b8:e5:dd:81:d8:d1:3a:
f4:d3:f7:00:55:ae:e7:91:74:dc:7a:ea:b1:52:53:
83:85:b3:26:28:60:7b:3d:56:bc:26:7a:c0:38:ca:
fd:fa:74:a8:aa:32:bd:c2:4c:09:47:7d:6c:7e:89:
6f:a6:8e:0f:c4:99:cd:ac:3d:d0:a6:2d:83:3c:08:
47:66:9b:d6:65:72:66:3b:cf:58:35:ed:d1:91:74:
80:8d:16:bc:ca:97:99:f5:20:be:e1:43:e5:13:ae:
09:6c:af:6c:dd:f8:c9:f5:02:a1:68:c3:b8:1a:f6:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BD:71:17:B7:05:AF:58:7D:74:CF:B1:E2:92:52:F1:21:70:33:72
X509v3 Authority Key Identifier:
keyid:FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.235.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ab:34:23:46:f4:19:82:5c:37:df:28:d4:fb:f0:48:24:09:
08:aa:f5:6a:eb:6b:cf:76:40:f6:73:99:5c:1c:03:59:6b:60:
a5:0f:37:09:13:39:52:7d:e3:7c:e4:7e:9f:bd:42:a7:1b:46:
1c:b2:55:94:d9:2a:49:61:38:a2:79:fc:f2:8f:fe:16:38:27:
d5:62:f2:c4:6a:29:db:51:fd:e8:bc:82:9c:82:d6:37:71:15:
9a:12:e5:44:38:b2:7f:f8:c0:06:c3:c1:37:25:79:08:87:78:
d9:c9:09:7c:64:61:70:4a:dd:a2:8f:91:0d:7e:d5:2a:f8:ef:
a2:ad:24:2e:2f:88:7e:0f:6f:9c:be:72:52:86:e5:64:5a:e0:
eb:32:12:58:72:85:2f:a5:e3:3e:7a:7d:0f:f4:8a:c9:37:f2:
86:24:8b:e7:01:bc:1b:b8:de:ce:dc:80:ec:4b:44:4d:d5:5f:
dd:17:62:ce:7d:26:7f:7b:78:9b:70:f5:19:58:4e:89:32:8a:
ee:29:61:7e:eb:64:fb:6e:55:4f:74:1b:9e:26:ff:71:1a:54:
b2:25:1d:6e:91:31:e2:30:c0:ba:58:39:a7:20:7c:0c:7f:99:
24:b3:ba:30:a4:37:a8:33:b3:d2:f1:e6:7d:06:a1:04:6d:30:
ea:d0:18:06
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUYKBWfEBe90iBWn3DKcTqrqFp9u0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNC
QUYyRjM4QzAeFw0yNjA1MDMwMjU3MzlaFw0yNzA1MDIwMzAyMzlaMDMxMTAvBgNV
BAMTKDk5QkQ3MTE3QjcwNUFGNTg3RDc0Q0ZCMUUyOTI1MkYxMjE3MDMzNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl4lv2EkwrX5Iwy+yQ22iX3s0c
8i9mMjxI3tpHULVQSSUq/RhSm2LJS6PMsldHFYCosMc2Wyeu2aLx472g2O1nZh6T
+gJQmreXEk05cJkleGYSV70sKNqmDOVEaKcJM14ilmsY35SCrXtrnHyt1+tCoLnP
DKg4+sK+Iwp5UypXhH3bpFBXrv4snGVwmPP3uOXdgdjROvTT9wBVrueRdNx66rFS
U4OFsyYoYHs9VrwmesA4yv36dKiqMr3CTAlHfWx+iW+mjg/Emc2sPdCmLYM8CEdm
m9ZlcmY7z1g17dGRdICNFrzKl5n1IL7hQ+UTrglsr2zd+Mn1AqFow7ga9opBAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUmb1xF7cFr1h9dM+x4pJS8SFwM3IwHwYDVR0j
BBgwFoAU/T5t2Da8SwZ/T1XQctux7Lry84wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmQ3ZmEyMTAtNWYyNS00ZjBiLTg5YTUtN2QwMGEzNTRhOTA3LzAvRkQzRTZERDgz
NkJDNEIwNjdGNEY1NUQwNzJEQkIxRUNCQUYyRjM4Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GRDNFNkREODM2QkM0QjA2N0Y0RjU1RDA3MkRCQjFFQ0JBRjJG
MzhDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JkN2ZhMjEwLTVmMjUtNGYwYi04
OWE1LTdkMDBhMzU0YTkwNy8wLzMxMzAzMzJlMzIzMTMzMmUzMjMzMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzMDMwMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn1eswDQYJ
KoZIhvcNAQELBQADggEBACmrNCNG9BmCXDffKNT78EgkCQiq9Wrra892QPZzmVwc
A1lrYKUPNwkTOVJ943zkfp+9QqcbRhyyVZTZKklhOKJ5/PKP/hY4J9Vi8sRqKdtR
/ei8gpyC1jdxFZoS5UQ4sn/4wAbDwTcleQiHeNnJCXxkYXBK3aKPkQ1+1Sr476Kt
JC4viH4Pb5y+clKG5WRa4OsyElhyhS+l4z56fQ/0isk38oYki+cBvBu43s7cgOxL
RE3VX90XYs59Jn97eJtw9RlYTokyiu4pYX7rZPtuVU90G54m/3EaVLIlHW6RMeIw
wLpYOacgfAx/mSSzujCkN6gzs9Lx5n0GoQRtMOrQGAY=
-----END CERTIFICATE-----
Generated at Tue May 5 14:49:19 2026 by rpki-client