
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa
File: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier: ajL2Z4kGQ5eVIGfrteNGWAu6qh97wyjv9fNZZ/zBigM=
Subject key identifier: 66:E1:26:03:1F:D8:22:EE:3F:94:26:0A:F6:52:8E:EF:81:9F:B6:3F
Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial: 1B3BAD807B027039CB166A45775047E3B3170715
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa
Signing time: Sun 03 May 2026 02:15:56 +0000
ROA not before: Sun 03 May 2026 02:10:56 +0000
ROA not after: Sun 02 May 2027 02:15:56 +0000
asID: 38150
IP address blocks: 180.214.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 10:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:3b:ad:80:7b:02:70:39:cb:16:6a:45:77:50:47:e3:b3:17:07:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Validity
Not Before: May 3 02:10:56 2026 GMT
Not After : May 2 02:15:56 2027 GMT
Subject: CN=66E126031FD822EE3F94260AF6528EEF819FB63F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:ce:af:81:21:99:f1:06:99:0a:35:77:db:
c7:1b:77:3c:2c:91:97:a9:86:53:2b:12:68:55:e7:
40:bd:f5:5b:d3:1e:d7:8a:91:c2:5d:da:48:f4:27:
56:ec:dc:6d:0a:c5:61:6c:a3:cc:01:ae:3d:87:84:
f7:a4:b0:06:1d:78:85:68:35:b8:7d:32:91:7e:df:
cf:d2:9d:34:cc:ba:88:f6:ab:de:cc:f4:4d:8e:ac:
e3:a2:1b:a9:1a:c1:06:15:44:a7:ba:73:48:94:7f:
8e:4e:66:10:10:1e:f1:94:a8:4a:8a:9c:06:f8:56:
1e:71:48:c9:9c:b5:47:fc:5a:d1:d8:ef:98:58:b2:
f2:b9:fd:b6:4f:c5:2c:97:1f:a7:5a:48:e7:d2:f1:
16:5a:30:c9:a5:de:2f:88:f6:8c:40:47:d2:66:43:
11:04:c1:6f:8f:ff:07:09:32:9b:dc:c6:96:6f:f0:
b5:ba:de:e9:f3:4d:ae:49:35:25:06:05:83:9b:98:
c3:02:1d:25:93:67:01:f8:5c:57:43:7a:b0:d5:1b:
87:55:36:e1:df:4a:d0:c0:6b:d7:ae:64:e7:da:3b:
a5:00:79:69:88:f3:c0:bd:fa:16:64:f4:69:78:af:
75:19:13:ad:a8:8c:95:3e:d2:cd:97:bc:9b:d2:6a:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E1:26:03:1F:D8:22:EE:3F:94:26:0A:F6:52:8E:EF:81:9F:B6:3F
X509v3 Authority Key Identifier:
keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.214.246.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:80:04:aa:7b:15:21:cc:62:10:9c:c2:36:78:c1:6a:c5:e3:
f5:e4:b8:f0:08:4b:67:8f:e4:e2:d0:0c:af:2e:d5:a5:b1:23:
34:6d:f2:13:9a:96:f1:44:b1:9d:f7:93:12:db:0c:b9:7f:6d:
ff:cb:f3:17:02:87:ae:b6:83:6b:0b:c6:fc:0e:08:32:60:68:
b1:bd:b3:56:a2:43:47:35:26:23:b6:a6:27:6d:e8:c3:86:57:
a8:19:98:d9:a3:d8:75:d1:d0:89:0d:f5:27:d7:50:3e:c0:2b:
be:2d:8d:bd:33:81:6f:77:be:dc:ee:98:7f:b2:77:29:83:0c:
26:4f:4e:54:ca:eb:5d:17:70:ce:5f:9c:14:80:2b:e4:ab:3f:
d3:5b:80:4e:49:90:be:00:29:3d:10:30:85:25:a9:2f:6c:53:
26:8f:98:83:e9:54:55:b1:61:66:51:2a:44:6c:82:6a:54:98:
92:a8:89:e7:26:9a:d6:0a:49:68:5a:0e:c0:4a:ee:be:2b:f6:
63:23:c4:c9:ab:8a:c9:13:c0:6e:6a:b5:38:69:e6:80:0c:fe:
69:d6:b4:57:90:28:6d:68:1f:5f:ce:73:c3:22:64:b0:ba:32:
1b:9d:3b:9b:e7:73:a8:79:3f:0d:94:02:9f:ad:78:8e:ea:1d:
3e:74:2a:7e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGzutgHsCcDnLFmpFd1BH47MXBxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAyQ0IyMjgyNTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0
OUNENzJFMTAeFw0yNjA1MDMwMjEwNTZaFw0yNzA1MDIwMjE1NTZaMDMxMTAvBgNV
BAMTKDY2RTEyNjAzMUZEODIyRUUzRjk0MjYwQUY2NTI4RUVGODE5RkI2M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVg86vgSGZ8QaZCjV328cbdzws
kZephlMrEmhV50C99VvTHteKkcJd2kj0J1bs3G0KxWFso8wBrj2HhPeksAYdeIVo
Nbh9MpF+38/SnTTMuoj2q97M9E2OrOOiG6kawQYVRKe6c0iUf45OZhAQHvGUqEqK
nAb4Vh5xSMmctUf8WtHY75hYsvK5/bZPxSyXH6daSOfS8RZaMMml3i+I9oxAR9Jm
QxEEwW+P/wcJMpvcxpZv8LW63unzTa5JNSUGBYObmMMCHSWTZwH4XFdDerDVG4dV
NuHfStDAa9euZOfaO6UAeWmI88C9+hZk9Gl4r3UZE62ojJU+0s2XvJvSaoHhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZuEmAx/YIu4/lCYK9lKO74Gftj8wHwYDVR0j
BBgwFoAUECyyKCVaxZwG9Wv5KRqr3UnNcuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTdlNjViNjctOTA1Yy00MDNjLThjNzktMjMxNTY1OTY2OGFhLzAvMTAyQ0IyMjgy
NTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0OUNENzJFMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDJDQjIyODI1NUFDNTlDMDZGNTZCRjkyOTFBQUJERDQ5Q0Q3
MkUxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04
Yzc5LTIzMTU2NTk2NjhhYS8wLzMxMzgzMDJlMzIzMTM0MmUzMjM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtNb2MA0GCSqG
SIb3DQEBCwUAA4IBAQCbgASqexUhzGIQnMI2eMFqxeP15LjwCEtnj+Ti0AyvLtWl
sSM0bfITmpbxRLGd95MS2wy5f23/y/MXAoeutoNrC8b8DggyYGixvbNWokNHNSYj
tqYnbejDhleoGZjZo9h10dCJDfUn11A+wCu+LY29M4Fvd77c7ph/sncpgwwmT05U
yutdF3DOX5wUgCvkqz/TW4BOSZC+ACk9EDCFJakvbFMmj5iD6VRVsWFmUSpEbIJq
VJiSqInnJprWCkloWg7ASu6+K/ZjI8TJq4rJE8BuarU4aeaADP5p1rRXkChtaB9f
znPDImSwujIbnTub53OoeT8NlAKfrXiO6h0+dCp+
-----END CERTIFICATE-----
Generated at Wed May 13 05:35:56 2026 by rpki-client