
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa
File: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier: 8kLzKJI2nja5geHzz7DQr+VguP3Mo1f3FK0nffBs5Fc=
Subject key identifier: 21:3C:EA:4F:24:85:02:BD:64:7C:88:C9:31:11:66:BD:B1:8D:41:B9
Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial: 662C26E9472A00B783D880E153C4F53597FA1ABF
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa
Signing time: Sun 03 May 2026 02:15:55 +0000
ROA not before: Sun 03 May 2026 02:10:55 +0000
ROA not after: Sun 02 May 2027 02:15:55 +0000
asID: 38150
IP address blocks: 180.214.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2c:26:e9:47:2a:00:b7:83:d8:80:e1:53:c4:f5:35:97:fa:1a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Validity
Not Before: May 3 02:10:55 2026 GMT
Not After : May 2 02:15:55 2027 GMT
Subject: CN=213CEA4F248502BD647C88C9311166BDB18D41B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:14:ef:7b:3f:c5:d8:7d:0b:60:8a:95:76:
54:61:81:78:16:68:29:9d:4a:d3:34:b8:3d:00:c4:
83:11:04:66:ee:7d:b4:82:f6:64:b8:a0:b9:89:be:
4b:a4:4e:a4:07:94:ed:b8:8d:ef:f3:29:71:af:42:
d4:3f:da:e4:3b:d4:8b:79:69:84:92:18:1a:b2:02:
a8:e1:4a:9f:da:f2:ae:67:04:fb:08:17:1f:23:da:
38:db:7b:16:2a:48:4e:44:fd:8a:71:60:eb:ac:b6:
7d:d1:9a:22:a8:0f:12:5d:ee:73:66:5b:09:26:04:
d9:bf:b6:7a:73:bd:2f:8c:4a:ee:74:1a:ba:aa:0c:
7f:ee:80:84:b3:0c:f1:07:63:19:2c:84:c6:3a:5b:
fc:52:72:69:e6:27:24:e9:08:f2:8b:7f:a2:58:94:
5f:a5:20:04:ac:91:62:5e:1b:e5:7a:fc:94:e6:c2:
ab:f4:bf:70:ef:6a:af:1b:15:05:32:84:36:1e:75:
49:f5:0c:1e:6f:54:0a:c7:4a:37:c6:c2:a1:62:fa:
4f:8e:75:30:5d:81:be:1b:81:ee:23:fe:7a:6a:58:
f8:ff:61:13:95:12:33:df:b8:6c:10:95:fb:cb:51:
4e:07:ec:0b:98:65:36:27:dd:22:5d:21:a0:3b:65:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3C:EA:4F:24:85:02:BD:64:7C:88:C9:31:11:66:BD:B1:8D:41:B9
X509v3 Authority Key Identifier:
keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.214.248.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:ac:d5:c6:f7:e1:3a:0b:67:c3:59:1c:38:93:a6:5c:9b:85:
d7:aa:23:29:00:0e:4d:8d:7e:fa:9c:a9:2d:5c:88:2a:74:50:
bc:70:ca:f3:a6:01:68:78:5e:89:df:37:1e:5b:4c:c4:53:6d:
28:c2:bb:66:de:e0:f7:15:cb:a5:2b:ab:53:2e:f7:f8:a4:70:
7c:b2:eb:71:4f:3a:28:76:d9:d2:ff:b6:68:a1:4a:8d:9f:49:
0a:53:64:51:e2:3e:62:b5:37:33:35:02:e6:3f:e1:b3:82:ec:
52:7f:78:b3:a2:21:a3:4c:72:c2:a5:ab:2b:08:48:fd:be:ce:
d6:b3:ba:ce:3e:c6:38:79:53:91:5a:2f:f4:33:86:39:be:03:
3d:5c:f2:5a:31:da:0f:6f:cd:0c:fc:4c:3b:07:34:e0:b9:57:
86:2a:7f:3a:74:06:51:24:63:a8:00:77:ac:e1:f5:cd:f1:11:
f0:a3:0f:4f:af:fd:81:29:3b:86:3e:b4:be:0f:e5:e0:f2:27:
c3:23:48:9f:85:c3:e1:61:b8:b4:05:3b:2f:63:ab:f4:d8:3b:
89:97:d3:a4:57:04:fb:11:1a:3b:ac:89:de:f9:c0:cb:dd:c8:
7e:f4:a1:ee:88:5e:20:8a:4b:26:0e:f9:48:5c:b5:11:a8:2c:
3d:8e:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:22 2026 by rpki-client