
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234392e302f32342d3234203d3e20313439343030.roa
File: 3130332e3138312e3234392e302f32342d3234203d3e20313439343030.roa (raw, json)
Hash identifier: vzqFmGBEYlWv2Vkupk5lCGYSaPO908e8n3P9j3Q5sLI=
Subject key identifier: F8:96:80:73:34:9B:00:F1:02:99:86:43:86:E0:18:55:3B:13:5F:33
Certificate issuer: /CN=C940C2C66C795EF89DE57AA820616ED8225890BC
Certificate serial: 3EF1642804B0B07C602F13EEB58FCE7F581B228E
Authority key identifier: C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234392e302f32342d3234203d3e20313439343030.roa
Signing time: Mon 05 Oct 2026 07:09:38 +0000
ROA not before: Mon 05 Oct 2026 07:04:38 +0000
ROA not after: Mon 04 Oct 2027 07:09:38 +0000
asID: 149400
IP address blocks: 103.181.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl
rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 20:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f1:64:28:04:b0:b0:7c:60:2f:13:ee:b5:8f:ce:7f:58:1b:22:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C940C2C66C795EF89DE57AA820616ED8225890BC
Validity
Not Before: Oct 5 07:04:38 2026 GMT
Not After : Oct 4 07:09:38 2027 GMT
Subject: CN=F8968073349B00F10299864386E018553B135F33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f8:52:af:31:97:66:d5:7e:0b:d9:3f:50:6f:
5f:0f:d0:49:36:89:83:f2:a1:89:6a:f8:4c:e8:59:
20:52:ae:49:3d:c4:0a:57:06:75:80:8a:b1:2c:aa:
62:f6:91:f9:90:f5:8c:3d:05:5f:d1:93:93:ff:52:
c6:2f:07:71:a3:e5:c2:a9:50:7b:c1:8b:60:88:15:
b9:b2:9e:fc:5a:eb:dd:ed:0e:f3:01:ba:7b:34:8b:
9c:5b:d1:86:a5:55:3b:3f:ef:88:c0:38:f2:a3:b7:
a5:44:56:48:d5:2e:3b:fd:a8:46:4c:5c:ad:0f:de:
c6:b8:9d:64:3b:bf:bd:fe:1b:2a:eb:91:3e:11:4b:
49:64:bb:77:51:52:8b:86:df:bf:f4:21:14:fb:48:
1e:13:d1:88:ba:f3:7a:32:4d:65:f0:42:b5:73:17:
c5:62:f4:e2:df:c9:b6:51:8c:4f:57:e0:75:81:eb:
cf:a5:fc:1c:d1:0d:0e:32:6d:9d:3d:a3:40:7d:29:
61:61:6c:b4:6a:f2:cc:64:d3:fa:8e:34:d6:03:de:
3a:cf:e9:13:86:0d:d7:18:cf:f4:a7:35:3a:17:8d:
a2:87:51:96:eb:22:54:14:73:0f:e5:1d:ff:22:7a:
80:4a:a0:10:95:bc:9c:0a:1f:98:cb:18:95:e3:9a:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:96:80:73:34:9B:00:F1:02:99:86:43:86:E0:18:55:3B:13:5F:33
X509v3 Authority Key Identifier:
keyid:C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234392e302f32342d3234203d3e20313439343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.249.0/24
Signature Algorithm: sha256WithRSAEncryption
49:19:ea:5e:98:fb:0b:ab:6c:c6:82:94:b9:80:04:53:62:9c:
88:f5:47:96:3b:79:17:37:b9:af:92:83:fd:d7:45:e7:4a:f5:
11:8a:3a:ba:cc:12:45:95:f0:9e:c7:99:c3:2c:d0:20:ab:f5:
ce:e2:c4:2d:25:b0:4b:85:c1:c3:c7:f9:26:0c:bd:52:f6:c8:
65:40:da:80:df:af:61:61:d5:e9:9a:3e:89:9c:2b:8a:13:a6:
b0:4a:02:bc:10:85:6c:3f:b1:3f:7b:9f:37:fd:48:57:e4:90:
be:7a:0a:ed:f3:a6:60:e6:b5:c9:1e:e6:ad:9a:bf:d4:56:cd:
d1:60:d2:5e:95:04:c1:c5:80:03:fd:8d:1a:84:19:22:92:17:
9f:df:d8:2c:54:b3:56:9f:2f:d6:4d:40:76:b3:4e:c2:cb:69:
6b:df:0d:40:63:d3:7f:ff:9c:36:87:ce:b1:25:6b:80:d2:7d:
66:16:f6:16:af:9c:26:90:bd:c0:c9:d3:f8:7c:74:80:3e:d2:
29:ec:1b:46:73:77:0c:de:eb:92:72:9f:d7:a8:ee:9f:31:46:
f6:e3:de:ca:bf:d8:a1:cb:23:ae:99:68:0c:51:5c:84:bc:88:
cf:fa:9a:86:90:af:30:20:86:dc:5d:2e:a0:ad:40:9e:8f:4c:
f1:bd:44:dd
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUPvFkKASwsHxgLxPutY/Of1gbIo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk0MEMyQzY2Qzc5NUVGODlERTU3QUE4MjA2MTZFRDgy
MjU4OTBCQzAeFw0yNjEwMDUwNzA0MzhaFw0yNzEwMDQwNzA5MzhaMDMxMTAvBgNV
BAMTKEY4OTY4MDczMzQ5QjAwRjEwMjk5ODY0Mzg2RTAxODU1M0IxMzVGMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp+FKvMZdm1X4L2T9Qb18P0Ek2
iYPyoYlq+EzoWSBSrkk9xApXBnWAirEsqmL2kfmQ9Yw9BV/Rk5P/UsYvB3Gj5cKp
UHvBi2CIFbmynvxa693tDvMBuns0i5xb0YalVTs/74jAOPKjt6VEVkjVLjv9qEZM
XK0P3sa4nWQ7v73+GyrrkT4RS0lku3dRUouG37/0IRT7SB4T0Yi683oyTWXwQrVz
F8Vi9OLfybZRjE9X4HWB68+l/BzRDQ4ybZ09o0B9KWFhbLRq8sxk0/qONNYD3jrP
6ROGDdcYz/SnNToXjaKHUZbrIlQUcw/lHf8ieoBKoBCVvJwKH5jLGJXjmpGnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU+JaAczSbAPECmYZDhuAYVTsTXzMwHwYDVR0j
BBgwFoAUyUDCxmx5Xvid5XqoIGFu2CJYkLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2U0ZTEwM2UtM2Q3OC00YWUwLTliYTQtZDE3OTJmZmEwNGFjLzAvQzk0MEMyQzY2
Qzc5NUVGODlERTU3QUE4MjA2MTZFRDgyMjU4OTBCQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DOTQwQzJDNjZDNzk1RUY4OURFNTdBQTgyMDYxNkVEODIyNTg5
MEJDLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NlNGUxMDNlLTNkNzgtNGFlMC05
YmE0LWQxNzkyZmZhMDRhYy8wLzMxMzAzMzJlMzEzODMxMmUzMjM0MzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNDMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntfkwDQYJ
KoZIhvcNAQELBQADggEBAEkZ6l6Y+wurbMaClLmABFNinIj1R5Y7eRc3ua+Sg/3X
RedK9RGKOrrMEkWV8J7HmcMs0CCr9c7ixC0lsEuFwcPH+SYMvVL2yGVA2oDfr2Fh
1emaPomcK4oTprBKArwQhWw/sT97nzf9SFfkkL56Cu3zpmDmtcke5q2av9RWzdFg
0l6VBMHFgAP9jRqEGSKSF5/f2CxUs1afL9ZNQHazTsLLaWvfDUBj03//nDaHzrEl
a4DSfWYW9havnCaQvcDJ0/h8dIA+0insG0Zzdwze65Jyn9eo7p8xRvbj3sq/2KHL
I66ZaAxRXIS8iM/6moaQrzAghtxdLqCtQJ6PTPG9RN0=
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:19 2026 by rpki-client