
$ rpki-client -vvf rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa
File: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (raw, json)
Hash identifier: VfT1JeeXKm1v01tmdjLA+eN6veAeXQzQ5yXazEtdaok=
Subject key identifier: F3:78:CE:B2:9A:16:8B:17:68:80:78:06:0A:47:98:91:4D:E7:73:5E
Certificate issuer: /CN=1351A2C01F31DE3BE0AE00B957282481FA877D80
Certificate serial: 54C2D9C6070B4027F9FC098B44A84EEB2C181955
Authority key identifier: 13:51:A2:C0:1F:31:DE:3B:E0:AE:00:B9:57:28:24:81:FA:87:7D:80
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa
Signing time: Sun 03 May 2026 02:11:23 +0000
ROA not before: Sun 03 May 2026 02:06:23 +0000
ROA not after: Sun 02 May 2027 02:11:23 +0000
asID: 147078
IP address blocks: 103.173.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.crl
rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c2:d9:c6:07:0b:40:27:f9:fc:09:8b:44:a8:4e:eb:2c:18:19:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1351A2C01F31DE3BE0AE00B957282481FA877D80
Validity
Not Before: May 3 02:06:23 2026 GMT
Not After : May 2 02:11:23 2027 GMT
Subject: CN=F378CEB29A168B17688078060A4798914DE7735E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:b3:eb:bc:af:7c:09:82:db:3a:ca:ab:21:
ec:29:60:25:88:31:a3:85:fb:18:7e:5d:b1:48:63:
26:67:8f:2c:e3:e5:49:0d:75:69:06:d0:09:cb:67:
2c:16:b7:8f:6d:63:5b:5b:61:f1:3e:cc:65:cd:09:
2d:24:08:ce:26:74:bc:c5:1a:0f:14:d9:19:2a:71:
b9:70:60:ef:00:32:ba:c4:35:c3:8c:39:4a:d9:98:
f7:5d:20:b1:b8:df:f2:e2:de:63:03:06:c8:44:77:
a0:94:46:34:a8:4e:8e:37:8a:fc:60:8c:89:ff:43:
7b:75:ae:5b:d0:98:10:68:b5:ae:81:97:95:02:6b:
ca:30:3b:c7:61:a2:a7:ca:c7:c1:9c:18:83:93:8d:
97:32:69:88:ca:d3:97:ea:63:91:5c:5d:95:50:99:
ba:3b:d7:5c:27:fe:d4:d9:ff:cf:5b:06:62:f8:9c:
b9:4f:8f:75:87:50:31:f3:e1:93:c5:9d:62:f4:8f:
f9:a8:0d:4a:63:74:25:ad:90:ba:46:e5:8d:5d:78:
39:8e:33:e8:61:24:11:30:79:62:91:dd:52:eb:4f:
0c:27:df:e4:14:1a:41:ee:44:fb:f8:2e:50:88:19:
12:de:3a:e8:bb:02:5b:b0:a5:9e:02:af:5c:a4:ab:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:78:CE:B2:9A:16:8B:17:68:80:78:06:0A:47:98:91:4D:E7:73:5E
X509v3 Authority Key Identifier:
keyid:13:51:A2:C0:1F:31:DE:3B:E0:AE:00:B9:57:28:24:81:FA:87:7D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.138.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ec:1f:a1:f3:02:db:a5:55:e3:c6:66:6a:14:b5:f8:0f:e8:
0d:68:09:5d:7b:a3:6e:97:c0:03:a7:9e:d6:47:85:71:b8:55:
b7:ef:ef:05:58:42:13:0d:7c:01:6e:4e:46:87:6e:6a:07:bd:
cd:6a:52:e7:60:63:41:44:78:ad:31:77:20:e5:f0:00:65:18:
be:bf:62:32:fb:20:f7:ea:d2:ad:54:b1:55:4f:12:e2:57:0c:
ca:82:66:a4:9d:bb:e1:f7:d7:e6:5a:75:a1:d9:45:46:20:ea:
61:ab:e1:a9:ce:d4:08:fd:f7:ee:bc:a3:99:43:fb:d5:10:b4:
4a:5f:88:d1:94:72:b6:5f:2e:9b:75:bb:1e:45:ea:7a:d4:c4:
9a:dc:16:a9:69:8c:ea:9d:cb:0e:28:90:32:17:11:22:fe:60:
9c:13:b7:60:59:67:72:2c:6f:48:e3:74:b2:c5:c3:c0:c9:49:
ba:ef:90:94:15:a3:07:10:40:90:ac:53:44:4e:27:0c:21:7f:
42:fd:ea:cf:a1:b1:dd:1f:a0:58:4e:0b:40:87:08:2f:cb:3b:
16:d9:01:91:a3:4c:33:e2:96:6e:ec:6f:c8:c5:22:18:d2:34:
e1:00:63:45:a9:2f:cb:14:c4:dc:42:af:dc:ea:68:62:07:51:
e1:f5:66:70
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUVMLZxgcLQCf5/AmLRKhO6ywYGVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM1MUEyQzAxRjMxREUzQkUwQUUwMEI5NTcyODI0ODFG
QTg3N0Q4MDAeFw0yNjA1MDMwMjA2MjNaFw0yNzA1MDIwMjExMjNaMDMxMTAvBgNV
BAMTKEYzNzhDRUIyOUExNjhCMTc2ODgwNzgwNjBBNDc5ODkxNERFNzczNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMibPrvK98CYLbOsqrIewpYCWI
MaOF+xh+XbFIYyZnjyzj5UkNdWkG0AnLZywWt49tY1tbYfE+zGXNCS0kCM4mdLzF
Gg8U2RkqcblwYO8AMrrENcOMOUrZmPddILG43/Li3mMDBshEd6CURjSoTo43ivxg
jIn/Q3t1rlvQmBBota6Bl5UCa8owO8dhoqfKx8GcGIOTjZcyaYjK05fqY5FcXZVQ
mbo711wn/tTZ/89bBmL4nLlPj3WHUDHz4ZPFnWL0j/moDUpjdCWtkLpG5Y1deDmO
M+hhJBEweWKR3VLrTwwn3+QUGkHuRPv4LlCIGRLeOui7AluwpZ4Cr1ykq/ddAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU83jOspoWixdogHgGCkeYkU3nc14wHwYDVR0j
BBgwFoAUE1GiwB8x3jvgrgC5VygkgfqHfYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDVlZmNiZjAtNjZlYy00OGQzLWIyMjEtMGYwOTY4NmQ1ODE4LzAvMTM1MUEyQzAx
RjMxREUzQkUwQUUwMEI5NTcyODI0ODFGQTg3N0Q4MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMzUxQTJDMDFGMzFERTNCRTBBRTAwQjk1NzI4MjQ4MUZBODc3
RDgwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA1ZWZjYmYwLTY2ZWMtNDhkMy1i
MjIxLTBmMDk2ODZkNTgxOC8wLzMxMzAzMzJlMzEzNzMzMmUzMTMzMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrYowDQYJ
KoZIhvcNAQELBQADggEBAJ3sH6HzAtulVePGZmoUtfgP6A1oCV17o26XwAOnntZH
hXG4Vbfv7wVYQhMNfAFuTkaHbmoHvc1qUudgY0FEeK0xdyDl8ABlGL6/YjL7IPfq
0q1UsVVPEuJXDMqCZqSdu+H31+ZadaHZRUYg6mGr4anO1Aj99+68o5lD+9UQtEpf
iNGUcrZfLpt1ux5F6nrUxJrcFqlpjOqdyw4okDIXESL+YJwTt2BZZ3Isb0jjdLLF
w8DJSbrvkJQVowcQQJCsU0ROJwwhf0L96s+hsd0foFhOC0CHCC/LOxbZAZGjTDPi
lm7sb8jFIhjSNOEAY0WpL8sUxNxCr9zqaGIHUeH1ZnA=
-----END CERTIFICATE-----
Generated at Wed May 13 14:08:53 2026 by rpki-client