
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa
File: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier: PKamMspjwCbW9/wmGhI81OH48EZJP0jTkY5TCE2XWoM=
Subject key identifier: 00:AA:17:04:1E:60:98:8A:26:1F:F0:72:48:6D:2F:07:3B:2A:8D:FB
Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial: 20BFB2D1A4170017F39608401830B460D158E031
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa
Signing time: Sun 03 May 2026 02:15:54 +0000
ROA not before: Sun 03 May 2026 02:10:54 +0000
ROA not after: Sun 02 May 2027 02:15:54 +0000
asID: 38150
IP address blocks: 180.214.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:bf:b2:d1:a4:17:00:17:f3:96:08:40:18:30:b4:60:d1:58:e0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Validity
Not Before: May 3 02:10:54 2026 GMT
Not After : May 2 02:15:54 2027 GMT
Subject: CN=00AA17041E60988A261FF072486D2F073B2A8DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:39:16:ef:95:45:d3:5c:58:c0:b8:42:a7:
74:c8:67:c4:6e:cd:11:68:bf:61:3a:04:fd:b5:10:
ee:0b:46:f4:b3:17:9b:8b:84:02:a7:7a:87:ec:61:
1a:b1:ba:de:b0:27:81:c2:9e:f6:de:6b:9b:f0:05:
ce:49:a7:24:59:59:c1:6f:91:49:a8:76:bb:44:0d:
97:26:83:7a:0a:75:c4:cd:63:fd:12:a7:5c:e5:07:
56:a1:9d:e7:a6:1e:3e:58:82:83:75:a7:7c:9c:a4:
bd:40:04:11:0e:1a:c6:5c:bb:bc:ae:d6:c0:66:a7:
3c:5c:e7:c8:2c:58:ae:e7:e8:7f:3e:f8:f3:ed:92:
9b:c4:38:93:89:8e:46:08:91:70:95:21:2c:e9:1a:
43:86:d7:e3:7e:5c:95:4b:77:40:80:97:6f:bc:96:
8d:40:48:d9:9c:85:9d:64:28:7e:4f:e8:ad:07:0b:
c5:fd:a7:3e:2c:6a:1b:aa:5a:d9:f3:be:e1:ce:fe:
b1:a5:fd:f2:f0:27:45:c6:f3:68:b6:24:4f:86:98:
eb:cb:51:4c:5c:3a:0f:68:15:d2:56:ca:92:5a:29:
50:1a:8a:ba:3c:91:87:af:ad:ca:80:31:4d:82:42:
5b:9a:72:90:4d:0d:b9:e1:da:91:d6:31:99:1f:c9:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:17:04:1E:60:98:8A:26:1F:F0:72:48:6D:2F:07:3B:2A:8D:FB
X509v3 Authority Key Identifier:
keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.214.247.0/24
Signature Algorithm: sha256WithRSAEncryption
06:23:42:46:3e:43:86:44:7f:2c:d0:f1:9e:0e:53:60:98:7e:
c3:7a:ad:e8:00:8e:04:e9:03:78:d8:cc:4c:29:43:8d:4d:23:
92:8d:42:cd:35:6a:80:65:e7:d9:17:a8:ca:80:f5:62:cb:f5:
db:4a:dd:23:23:ec:f4:58:e1:46:6e:4f:a6:1b:3e:bc:bd:7c:
c2:9c:e5:8e:3d:a8:2c:9b:0e:0f:87:e8:45:b6:ee:84:00:c3:
a5:a4:e9:46:d1:72:b1:e0:74:d0:ba:58:82:5f:20:40:10:9f:
fc:38:b2:51:52:d6:ef:2b:1a:62:74:60:bd:e6:ad:4e:8c:75:
a8:b5:a7:2d:46:a6:55:73:f2:f2:08:ca:e8:3a:9a:0b:74:11:
18:d0:71:db:7c:5d:3e:47:3c:b0:4e:25:b4:d8:c6:ec:8d:35:
52:28:57:9f:91:92:91:36:0e:13:94:ed:9a:c9:36:c4:ba:48:
7d:de:08:87:f5:1f:b3:dc:93:d6:97:4b:fa:a1:64:af:77:d1:
0a:b2:f2:ac:6a:80:10:7f:c7:bf:ce:d3:d5:54:e6:a9:c6:bc:
0b:45:ce:02:a7:07:d5:e8:ee:b0:d6:8b:44:76:7f:29:cd:ba:
4f:5d:69:9e:f0:34:fa:f9:1b:3d:7d:19:53:17:ec:67:eb:23:
6c:3d:6c:7d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUIL+y0aQXABfzlghAGDC0YNFY4DEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAyQ0IyMjgyNTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0
OUNENzJFMTAeFw0yNjA1MDMwMjEwNTRaFw0yNzA1MDIwMjE1NTRaMDMxMTAvBgNV
BAMTKDAwQUExNzA0MUU2MDk4OEEyNjFGRjA3MjQ4NkQyRjA3M0IyQThERkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qzkW75VF01xYwLhCp3TIZ8Ru
zRFov2E6BP21EO4LRvSzF5uLhAKneofsYRqxut6wJ4HCnvbea5vwBc5JpyRZWcFv
kUmodrtEDZcmg3oKdcTNY/0Sp1zlB1ahneemHj5YgoN1p3ycpL1ABBEOGsZcu7yu
1sBmpzxc58gsWK7n6H8++PPtkpvEOJOJjkYIkXCVISzpGkOG1+N+XJVLd0CAl2+8
lo1ASNmchZ1kKH5P6K0HC8X9pz4sahuqWtnzvuHO/rGl/fLwJ0XG82i2JE+GmOvL
UUxcOg9oFdJWypJaKVAairo8kYevrcqAMU2CQluacpBNDbnh2pHWMZkfyYV7AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUAKoXBB5gmIomH/BySG0vBzsqjfswHwYDVR0j
BBgwFoAUECyyKCVaxZwG9Wv5KRqr3UnNcuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTdlNjViNjctOTA1Yy00MDNjLThjNzktMjMxNTY1OTY2OGFhLzAvMTAyQ0IyMjgy
NTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0OUNENzJFMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDJDQjIyODI1NUFDNTlDMDZGNTZCRjkyOTFBQUJERDQ5Q0Q3
MkUxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04
Yzc5LTIzMTU2NTk2NjhhYS8wLzMxMzgzMDJlMzIzMTM0MmUzMjM0MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtNb3MA0GCSqG
SIb3DQEBCwUAA4IBAQAGI0JGPkOGRH8s0PGeDlNgmH7Deq3oAI4E6QN42MxMKUON
TSOSjULNNWqAZefZF6jKgPViy/XbSt0jI+z0WOFGbk+mGz68vXzCnOWOPagsmw4P
h+hFtu6EAMOlpOlG0XKx4HTQuliCXyBAEJ/8OLJRUtbvKxpidGC95q1OjHWotact
RqZVc/LyCMroOpoLdBEY0HHbfF0+RzywTiW02MbsjTVSKFefkZKRNg4TlO2ayTbE
ukh93giH9R+z3JPWl0v6oWSvd9EKsvKsaoAQf8e/ztPVVOapxrwLRc4CpwfV6O6w
1otEdn8pzbpPXWme8DT6+Rs9fRlTF+xn6yNsPWx9
-----END CERTIFICATE-----
Generated at Wed May 13 05:55:05 2026 by rpki-client