
$ rpki-client -vvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa
File: 3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa (raw, json)
Hash identifier: rawTt7U6ahxaZfeLC2TlMwpid1gK//+EE4Lo1MRs0eo=
Subject key identifier: 33:E9:78:7A:0E:C8:E1:84:42:97:50:04:66:B6:96:5A:C9:0A:9F:09
Certificate issuer: /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032
Certificate serial: 7C0E1B21755C8ED60164063A4120F3BA6CBAAD64
Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa
Signing time: Sun 03 May 2026 02:14:50 +0000
ROA not before: Sun 03 May 2026 02:09:50 +0000
ROA not after: Sun 02 May 2027 02:14:50 +0000
asID: 141674
IP address blocks: 103.177.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl
rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:0e:1b:21:75:5c:8e:d6:01:64:06:3a:41:20:f3:ba:6c:ba:ad:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032
Validity
Not Before: May 3 02:09:50 2026 GMT
Not After : May 2 02:14:50 2027 GMT
Subject: CN=33E9787A0EC8E1844297500466B6965AC90A9F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:58:01:3d:61:84:34:cc:92:7d:53:1d:f7:
07:b4:4e:cf:b0:14:10:0b:be:2b:b6:72:a0:55:92:
f8:ae:c3:3d:ec:78:85:4f:98:c5:89:36:4c:3f:a7:
16:24:90:04:98:30:36:cd:19:ce:3c:7d:54:cc:84:
bc:c0:81:af:3e:f1:72:09:92:cb:c6:c1:83:02:7b:
30:f9:ae:77:9f:47:ed:44:e7:39:06:68:82:ab:e7:
f5:68:b6:30:a0:bf:2f:a8:3e:1f:12:bc:ca:24:37:
b3:4e:6d:28:e8:1b:71:27:02:f0:f5:d7:4e:e1:8a:
bc:fa:8e:80:33:75:95:3b:ff:56:04:1c:25:ce:42:
f9:e9:82:a4:3f:1c:2c:ad:60:20:7e:77:0d:60:72:
e1:03:9f:eb:08:ee:6a:5a:5f:1b:4c:1b:3d:b8:50:
cc:5a:29:cc:ed:5c:e9:bf:64:30:e9:93:09:41:d0:
99:8e:b8:f6:9f:06:72:bf:b0:80:06:8f:9a:56:82:
59:43:da:03:01:21:88:6c:ae:39:88:07:f3:3c:77:
fe:b5:a6:a3:43:c8:70:3f:b3:28:b2:8c:02:b7:67:
56:fc:ac:ad:dd:62:d0:3a:a4:d9:75:88:cd:4a:9c:
45:df:a9:68:4a:8b:a5:8d:82:c3:bd:21:4d:ea:e5:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E9:78:7A:0E:C8:E1:84:42:97:50:04:66:B6:96:5A:C9:0A:9F:09
X509v3 Authority Key Identifier:
keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32332d3233203d3e20313431363734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.106.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:9a:3f:6d:55:f4:04:31:f8:8f:63:d7:40:62:02:eb:e6:95:
06:09:32:3c:b2:80:71:49:23:53:ed:29:b1:a3:d6:77:77:0c:
34:5e:65:8a:d0:bc:aa:a9:69:24:6a:de:5c:c5:c4:c9:0d:3a:
d0:02:cb:ab:16:5b:2d:07:6f:b4:50:d7:28:6f:19:ae:9c:9b:
79:6f:cb:47:35:03:a6:c8:81:d7:51:40:c0:d2:05:68:af:07:
be:12:6f:d5:f9:a2:f7:fe:35:2e:ea:e1:43:53:33:fe:cc:d2:
a8:1b:8f:3b:90:9b:1c:8f:48:39:06:03:06:fa:24:b2:a1:ec:
b7:ff:15:8e:a4:68:aa:2b:1b:53:02:79:e0:70:72:7c:22:db:
71:eb:7f:7d:54:00:07:ed:41:51:c9:16:89:b3:82:e5:26:65:
1c:79:35:33:fe:61:9a:2c:81:37:59:39:00:97:ff:23:b4:f5:
fb:5e:43:ac:f8:e5:7a:8d:37:86:83:6d:d6:4f:ec:11:dd:55:
16:d3:22:21:ce:be:cc:f5:36:2f:13:29:d0:8b:ff:32:1b:4c:
d5:40:fd:62:ef:c7:b9:da:16:ef:88:46:a6:c4:7d:d3:57:52:
ac:b9:f4:e4:c2:9b:0d:5b:7c:a9:c6:fe:11:fb:b2:64:30:86:
1e:a6:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:09 2026 by rpki-client