
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa
File: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier: Syq9ruOdB8nqa2oeUhCsgKQVXRsHPSeGmU6poI2HQz4=
Subject key identifier: E8:E5:FC:B7:7C:6C:57:C4:91:BF:7B:90:FB:DC:13:FD:97:EA:86:FE
Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial: 2D21BCD7124271A26F48F3164AA410338A661871
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa
Signing time: Sun 03 May 2026 02:16:02 +0000
ROA not before: Sun 03 May 2026 02:11:02 +0000
ROA not after: Sun 02 May 2027 02:16:02 +0000
asID: 38150
IP address blocks: 180.214.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 10:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:21:bc:d7:12:42:71:a2:6f:48:f3:16:4a:a4:10:33:8a:66:18:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Validity
Not Before: May 3 02:11:02 2026 GMT
Not After : May 2 02:16:02 2027 GMT
Subject: CN=E8E5FCB77C6C57C491BF7B90FBDC13FD97EA86FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:3d:1b:aa:da:6c:eb:97:a3:56:7d:b5:6d:
f6:bc:a8:70:44:39:6c:7f:a1:2d:cd:3d:d0:f3:8a:
d7:bf:43:7f:10:a3:24:6f:71:e7:2f:82:3a:50:52:
4b:bd:f7:cd:38:a7:93:90:d3:d3:bf:1d:ff:1c:da:
33:89:4b:56:c1:93:1e:88:f4:64:35:38:e6:f0:17:
37:e3:bc:7e:b5:dc:c3:58:57:ab:79:8c:ce:a4:67:
80:c5:81:4b:6d:91:03:af:9c:17:13:86:73:4e:e7:
82:6a:4d:3b:ee:f3:b0:5b:61:8e:dd:ba:84:e8:48:
6b:6f:fc:d9:4a:6c:57:12:c5:ef:76:f5:35:21:0b:
5b:c6:da:03:ec:e8:54:fc:f7:3a:2f:26:d5:be:98:
02:b3:0c:94:da:8a:a1:02:82:9c:a6:fd:75:7d:06:
94:ca:75:0b:65:4e:29:22:aa:1c:d8:7d:78:5a:f8:
dd:18:35:c4:a9:a6:f4:07:eb:53:07:0d:45:31:67:
26:cb:f7:e1:df:17:e7:ec:5c:9f:b5:72:e7:9c:da:
df:b3:c0:9b:de:4b:bd:20:33:be:a1:0c:50:f6:10:
88:34:ea:65:ad:bc:42:f3:a4:07:dc:f5:1e:ee:f4:
91:37:21:a3:94:e1:7b:cb:d4:f5:5b:93:b0:73:6c:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E5:FC:B7:7C:6C:57:C4:91:BF:7B:90:FB:DC:13:FD:97:EA:86:FE
X509v3 Authority Key Identifier:
keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.214.241.0/24
Signature Algorithm: sha256WithRSAEncryption
40:30:7e:45:0e:a0:50:9b:c1:8e:51:01:a8:80:97:ba:1a:46:
fe:46:2c:8e:44:c8:f6:ff:ab:af:30:a8:6a:19:c9:75:5f:91:
f7:91:f8:ff:2a:7d:3f:88:f9:15:b6:d5:c6:01:8a:87:94:8c:
25:0c:26:f3:23:1b:b5:51:e5:0e:92:91:58:34:8e:3f:2c:17:
58:01:6c:e9:f7:22:69:8f:46:9d:c3:2b:bf:b5:a4:ab:8e:68:
55:61:89:a3:c8:e6:cd:6a:c2:e1:7c:c7:81:32:b0:f9:a7:50:
bb:c0:6e:75:d4:00:6f:08:c2:03:1a:23:00:5f:e4:3a:ca:ba:
ee:3a:fa:d0:74:e2:7b:79:63:22:df:dc:22:37:f9:0e:f0:24:
72:60:b9:3f:f3:71:ee:b8:47:03:5b:ce:da:54:87:36:bd:80:
01:c8:6e:de:c7:65:55:68:6d:05:83:87:e1:1b:61:04:06:dc:
8c:0c:22:4f:d8:eb:cb:9e:1b:28:cc:72:9c:d0:5c:93:14:08:
c6:b1:1e:ba:6a:73:b6:ef:59:0e:b6:ba:fd:bd:c4:c5:60:3b:
f5:0d:1b:20:29:bd:07:0c:af:d1:0a:13:eb:ea:72:33:af:55:
0c:67:6b:7e:76:7e:28:f9:3b:e5:14:20:b6:a0:a7:31:6e:98:
c8:d7:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:25:55 2026 by rpki-client