
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa
File: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (raw, json)
Hash identifier: tbo+ssCZ1GgyC2ZlsuUJYvzfgqZD9OlbY8lym/UKgpA=
Subject key identifier: E6:08:CB:C2:24:96:2A:0C:7D:1D:A1:32:15:FD:90:45:C4:4F:2C:C7
Certificate issuer: /CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Certificate serial: 1BA12C653F93B88BA9354D130F153CE47174A1FF
Authority key identifier: 10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa
Signing time: Sun 03 May 2026 02:15:42 +0000
ROA not before: Sun 03 May 2026 02:10:42 +0000
ROA not after: Sun 02 May 2027 02:15:42 +0000
asID: 149344
IP address blocks: 103.176.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a1:2c:65:3f:93:b8:8b:a9:35:4d:13:0f:15:3c:e4:71:74:a1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10553E9FBD62D012FC01AA60343F1431B2A6A334
Validity
Not Before: May 3 02:10:42 2026 GMT
Not After : May 2 02:15:42 2027 GMT
Subject: CN=E608CBC224962A0C7D1DA13215FD9045C44F2CC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:9e:87:70:11:8f:71:9f:57:be:f7:29:ba:
c9:70:c8:e8:7f:8f:90:06:e1:53:df:5d:a1:6c:78:
ad:b1:cd:f3:07:1c:29:19:3a:e5:68:31:4e:25:37:
49:a7:fd:cc:c8:5a:3f:ae:e9:90:22:a4:38:f5:5d:
15:9d:ee:15:22:40:1a:e2:2d:ba:20:f9:b3:ab:8c:
b3:e0:b8:73:6a:eb:71:6c:f2:8d:93:92:02:31:40:
37:d7:2e:6f:15:7e:f1:0b:9e:29:07:e6:f5:06:de:
fa:3b:fb:42:56:3e:8e:00:f4:80:ff:19:72:e8:f4:
c3:1f:70:b8:f3:ef:3a:fa:3f:62:20:f5:32:4a:d6:
c9:3d:11:81:8e:9c:fb:d2:f0:a1:b3:4f:bd:fc:93:
e5:03:43:e8:5d:51:a8:1a:ef:2c:9e:03:18:37:5f:
7b:67:b2:ef:df:d3:a5:c9:3c:23:5d:30:7e:0b:18:
58:26:5d:60:b7:7e:67:5c:3d:87:0a:c4:92:0f:31:
fb:4e:04:2e:1d:a7:77:ff:7b:dc:e4:5e:fd:af:c7:
62:04:00:c2:1d:b6:ca:d8:01:9e:ed:13:a0:fa:5b:
ba:88:df:7e:67:95:d4:20:af:57:1c:62:af:8e:a1:
29:96:51:87:72:a3:5a:e5:9b:01:74:2b:17:7b:04:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:08:CB:C2:24:96:2A:0C:7D:1D:A1:32:15:FD:90:45:C4:4F:2C:C7
X509v3 Authority Key Identifier:
keyid:10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.176.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3d:59:69:4c:fc:27:d9:ba:fb:f9:54:99:4c:87:9d:37:6c:
d8:a0:6d:bc:09:af:f4:f5:65:34:06:52:51:32:58:4a:99:f5:
7a:99:27:14:ec:e5:6c:54:d2:d7:83:5a:2e:4d:16:0c:14:b6:
50:35:7e:4a:97:db:26:d1:19:d0:8d:3a:36:dc:ac:57:e6:47:
9d:8b:73:c9:8f:08:fa:6a:e3:fc:32:af:23:df:df:8f:6d:9e:
66:52:c6:82:fe:44:fc:7d:62:47:86:a6:49:ba:39:1a:22:ef:
60:4e:f9:e3:1a:ba:85:f1:e2:73:27:d2:1d:6e:20:2f:7e:8f:
c2:57:4d:1b:0e:f3:f6:e2:fb:e4:e5:2a:78:a7:8e:34:53:eb:
d6:d2:60:0f:d9:8e:58:38:57:43:a8:e6:9b:0e:6b:7f:0f:23:
d0:7d:e1:c2:1d:bf:e6:5b:8b:27:9c:40:fa:28:11:6e:56:18:
58:84:b3:a0:f8:27:cb:85:80:c8:c9:11:fe:89:c2:f9:13:81:
16:0c:4e:87:6f:89:0e:2a:56:de:f0:4f:78:bd:47:75:48:96:
a9:6c:5d:ac:ec:cf:bc:aa:28:f4:40:e4:7f:e3:86:88:1e:83:
12:c5:da:7b:33:2b:39:5e:5e:fe:3a:c2:d6:d9:1f:bd:27:66:
a8:39:6c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:54:01 2026 by rpki-client