
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa
File: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier: vyr8/5qv5wY87ZAec3IdObappZpdpcyhrrvuSGncmDk=
Subject key identifier: 46:42:1B:3C:30:FA:2C:0E:5F:5A:24:C7:15:82:B7:DD:47:DF:83:57
Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial: 7A92F47B413DB7B77341523D939D899FD3B473C3
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa
Signing time: Sun 03 May 2026 02:16:01 +0000
ROA not before: Sun 03 May 2026 02:11:01 +0000
ROA not after: Sun 02 May 2027 02:16:01 +0000
asID: 38150
IP address blocks: 180.214.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:92:f4:7b:41:3d:b7:b7:73:41:52:3d:93:9d:89:9f:d3:b4:73:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Validity
Not Before: May 3 02:11:01 2026 GMT
Not After : May 2 02:16:01 2027 GMT
Subject: CN=46421B3C30FA2C0E5F5A24C71582B7DD47DF8357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:62:0f:d7:b6:6d:c8:bb:1d:2a:e6:c4:66:
b0:12:f3:66:a3:f7:b8:70:9c:16:d7:0b:09:3a:db:
f0:a7:01:4a:9f:9e:80:98:16:40:d0:32:5b:73:5a:
be:f7:38:c0:83:c7:08:01:25:8a:1a:dd:2e:39:40:
40:5b:d4:fc:27:85:6a:39:53:5d:22:8d:c1:37:6a:
a4:16:99:80:e3:67:3d:51:53:d9:dc:c4:13:03:0d:
b9:78:90:74:10:a4:9e:ee:db:aa:79:72:b1:93:28:
34:c1:02:8e:02:72:55:25:67:8f:6b:01:50:9e:f6:
b0:2e:84:47:1c:33:44:d0:ff:53:b3:60:b2:30:41:
44:d0:d9:b7:82:09:5a:f1:77:99:5b:2a:c7:ea:ce:
b3:71:9b:a3:8c:ef:28:df:2c:28:3a:f1:14:ac:f8:
4d:f7:f9:17:de:fb:78:30:53:24:a4:79:a3:9d:05:
1a:15:60:c1:ce:28:51:c0:65:5d:3f:fe:5c:10:ae:
fd:a1:33:b6:84:af:4a:f5:e8:55:2f:36:8b:0e:79:
56:96:79:90:48:8f:43:50:4c:85:34:c0:a0:64:0c:
3a:54:8e:90:fc:e2:88:70:24:5d:05:9b:08:76:bb:
31:dc:3a:e7:24:c8:67:ca:d1:df:98:34:9e:25:90:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:42:1B:3C:30:FA:2C:0E:5F:5A:24:C7:15:82:B7:DD:47:DF:83:57
X509v3 Authority Key Identifier:
keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.214.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:7f:00:27:44:80:3f:79:00:b3:c1:c3:4c:6f:d2:0a:97:a9:
cb:1a:00:e8:0d:3e:65:b2:9a:f6:04:64:5b:36:ea:04:f3:ac:
8d:d3:42:11:ea:02:22:17:16:ff:0a:14:ae:58:e9:cb:60:13:
48:bb:cc:b5:6b:df:ed:c5:27:cc:e1:9b:32:37:da:5d:44:38:
eb:7a:98:96:e1:1e:8f:ef:d4:d8:7a:df:24:9f:c9:07:cb:b6:
50:26:01:a9:43:6e:5e:c7:9a:f9:6a:07:f0:52:bf:4a:7a:60:
c7:bd:6b:8a:8f:95:17:f7:58:c6:76:87:dd:a0:c7:2a:c1:19:
0f:01:f3:c5:24:8a:d9:c8:f7:78:50:e0:8a:89:2b:bf:4a:9b:
7a:9a:5c:6d:c9:f8:bd:ad:3b:67:cb:99:39:36:bd:42:cb:cc:
d4:e3:5a:5c:8f:45:d6:ea:77:c6:65:68:af:f9:48:2b:7d:cc:
4e:61:bf:e5:24:f5:03:85:dc:28:18:81:95:c4:ba:3e:43:55:
cd:87:6a:93:37:c6:56:15:f7:5e:0e:6b:48:90:b7:67:ed:3d:
a7:ae:c1:05:6a:f7:ae:b1:73:31:2a:18:67:bd:47:c0:38:3d:
09:a8:20:5c:f4:3d:07:0d:f5:61:7d:fa:b0:f2:79:35:9b:31:
e9:db:48:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:37 2026 by rpki-client