
$ rpki-client -vvf rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa
File: 3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (raw, json)
Hash identifier: 0g1N4SKaXmawA4aZzsd9gmH2Wu7aUGGxBnkRDsUbc38=
Subject key identifier: 21:CC:00:D8:BF:AD:81:BF:59:77:7F:5E:67:69:91:55:95:E1:4B:3D
Certificate issuer: /CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032
Certificate serial: 01A70BBC575AB74A59CB56999CC514059FFF71F3
Authority key identifier: FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa
Signing time: Sun 03 May 2026 02:14:50 +0000
ROA not before: Sun 03 May 2026 02:09:50 +0000
ROA not after: Sun 02 May 2027 02:14:50 +0000
asID: 141674
IP address blocks: 103.177.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl
rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a7:0b:bc:57:5a:b7:4a:59:cb:56:99:9c:c5:14:05:9f:ff:71:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFE7AB28D277A5AEC4CD47DA657DF817C91B9032
Validity
Not Before: May 3 02:09:50 2026 GMT
Not After : May 2 02:14:50 2027 GMT
Subject: CN=21CC00D8BFAD81BF59777F5E6769915595E14B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:fd:6c:4f:32:b5:93:29:92:55:e3:27:fd:
c1:a1:73:65:40:ab:d3:37:f7:55:d8:c4:02:6a:6f:
2d:9f:e7:ff:79:bc:5b:d4:12:4e:05:2c:b7:72:94:
38:dc:40:68:b0:f1:1e:07:88:fe:c2:6d:70:e6:8e:
27:69:71:13:ef:df:f0:d0:51:0d:52:0c:f8:0d:3d:
0b:51:b4:72:19:ea:d8:03:36:d9:fe:18:0a:7c:73:
00:42:57:eb:e2:57:94:04:52:98:d8:92:1b:be:21:
e9:b3:f2:b5:6c:f2:99:8d:4a:10:c5:c2:35:62:5f:
75:94:18:63:4f:01:82:14:1d:20:25:bb:95:b5:b5:
09:98:57:ba:fb:eb:09:d4:bb:12:d8:4d:e0:50:fe:
1f:12:c2:23:87:cd:1d:d7:ad:64:25:69:3f:21:2e:
c5:e8:4a:e3:6c:78:d2:0d:d6:e3:c5:6c:7a:2b:13:
81:83:13:ec:4c:36:ae:66:42:be:c6:0e:51:21:ff:
68:a7:1b:01:4b:1c:1a:0c:05:f5:b8:61:8c:1c:39:
05:1b:ce:99:fb:a0:84:2e:6a:e7:33:34:fe:04:65:
68:30:75:09:f4:c9:9d:8c:7f:0a:2f:fb:2e:ee:b8:
dd:1e:22:cc:e4:92:6e:98:00:b6:5a:73:b1:16:70:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CC:00:D8:BF:AD:81:BF:59:77:7F:5E:67:69:91:55:95:E1:4B:3D
X509v3 Authority Key Identifier:
keyid:FF:E7:AB:28:D2:77:A5:AE:C4:CD:47:DA:65:7D:F8:17:C9:1B:90:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFE7AB28D277A5AEC4CD47DA657DF817C91B9032.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.107.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ad:dd:76:7f:34:82:a5:a8:c2:e4:b8:dc:7f:88:de:29:c7:
0d:20:64:9d:5e:f2:a3:6c:5f:0e:01:33:00:0b:ee:d7:69:32:
ab:02:65:92:80:8e:d9:ad:d0:1d:2c:9c:63:8b:84:56:0a:5a:
7e:4f:1a:ad:5c:41:b6:55:9c:ec:6d:a3:33:de:f0:6a:56:d6:
f0:81:63:ce:56:cb:cf:5d:d3:cb:2e:c7:ca:1e:da:ca:55:cb:
b8:85:5f:8e:d4:b4:d4:42:b5:be:87:f0:47:61:c9:e0:53:3d:
db:c3:44:75:3a:ec:13:21:f6:9c:0f:80:fb:52:e5:24:e8:b1:
9e:6d:2b:b9:48:2b:7f:ee:13:70:2c:ab:9a:0e:ba:dd:b4:4b:
50:70:7b:f2:00:73:6f:1a:e1:ce:e4:19:8e:e8:35:16:6a:37:
0b:1b:91:d2:68:8e:6e:36:de:51:87:e2:a4:29:b6:a1:f9:42:
b2:c1:6b:aa:cc:9a:25:57:9e:ac:7f:23:b1:05:1e:21:92:c2:
ab:6b:df:2f:eb:45:65:47:5d:8a:fe:1c:91:d8:b1:e1:a5:21:
b8:ef:b9:e1:e3:f1:20:b2:fc:e1:6a:3a:38:64:4f:50:19:42:
63:a5:1d:05:30:56:74:5d:e7:35:82:9f:d7:62:8e:7b:9f:1d:
10:c2:c6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:34 2026 by rpki-client