
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa
File: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier: 5UlSEWJmILcSCfVnTwCxa/ENvvAkNUAYdbFPlsU3zCg=
Subject key identifier: F6:20:48:48:26:D4:A3:A7:68:26:4C:5A:CF:61:18:2C:67:C7:85:30
Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial: 02795929C4A548F1CE4E70E9748EA470F99EBF6F
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa
Signing time: Sun 03 May 2026 02:16:00 +0000
ROA not before: Sun 03 May 2026 02:11:00 +0000
ROA not after: Sun 02 May 2027 02:16:00 +0000
asID: 38150
IP address blocks: 180.214.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:79:59:29:c4:a5:48:f1:ce:4e:70:e9:74:8e:a4:70:f9:9e:bf:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Validity
Not Before: May 3 02:11:00 2026 GMT
Not After : May 2 02:16:00 2027 GMT
Subject: CN=F620484826D4A3A768264C5ACF61182C67C78530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:f1:b9:6a:9c:bb:20:82:38:6b:aa:c5:6d:
b0:bd:eb:bd:37:d5:f0:08:2a:e3:26:10:71:db:ab:
fb:af:3e:c9:93:c0:7a:3f:e2:65:34:36:45:2b:5d:
fe:4c:60:6f:51:6c:30:cd:8a:3d:f6:c8:d6:04:f8:
34:25:18:35:6c:1f:a3:2d:0a:2e:2f:eb:ae:01:cc:
50:bb:4c:0f:95:1f:7a:e1:00:b8:ca:53:c7:dd:69:
fe:de:80:a7:f3:b2:e7:8c:8a:d4:67:11:ed:4a:99:
60:b8:49:0a:c6:9a:02:2b:25:7c:69:6d:5c:e2:81:
a7:b3:4b:68:ff:50:0d:c6:33:81:34:e4:f4:db:f5:
d4:55:9a:00:11:c9:7f:c2:b5:e8:c6:dd:49:20:b3:
bd:b5:4d:79:02:37:e6:75:fa:f7:f5:ff:73:48:2d:
51:44:26:43:b2:f7:3d:f6:ae:7a:a4:0f:c2:e1:b4:
5a:d0:36:36:76:60:a8:28:ef:96:85:2a:22:b1:59:
ac:81:c1:85:d9:4d:16:14:7f:c8:59:b5:7a:a3:08:
fd:b9:fc:c3:e9:8a:0c:23:64:6e:28:0a:08:b8:b3:
3c:e3:92:e1:82:a3:9e:f4:df:47:db:49:9c:f3:4b:
f2:c2:7e:4f:5e:d5:0c:58:2b:8f:4e:91:28:b1:45:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:20:48:48:26:D4:A3:A7:68:26:4C:5A:CF:61:18:2C:67:C7:85:30
X509v3 Authority Key Identifier:
keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.214.253.0/24
Signature Algorithm: sha256WithRSAEncryption
60:20:24:03:d0:2c:b4:28:e7:25:85:77:64:71:0b:c6:91:b4:
f9:53:83:d8:85:c2:50:a6:6c:bf:e5:4d:b4:5f:b4:5b:45:65:
b6:90:af:0d:3f:c1:79:86:7d:aa:e1:b1:34:b0:06:e4:56:4b:
88:c6:dd:4b:7a:47:18:29:f5:4b:60:44:b9:aa:97:0a:9a:24:
d9:c2:1c:95:ff:8c:d0:d1:9e:82:0f:6c:87:13:17:47:84:fe:
8a:87:52:f9:3d:c7:5d:91:70:1c:16:69:6c:5f:b6:90:97:62:
33:46:ee:db:0c:3f:c4:33:c1:63:14:b6:bf:31:15:e9:78:fd:
e8:68:96:15:1b:13:58:06:af:31:ae:c8:54:c1:73:04:73:fe:
5a:ef:9c:62:0a:d2:60:7c:f6:fd:e3:e7:c1:f4:f0:fd:18:94:
8e:6e:c8:6d:52:e5:2d:ee:38:2d:af:aa:ba:4a:e0:43:22:0a:
ad:78:61:fd:de:ce:d6:45:4f:26:1f:a5:c9:33:f7:45:c6:86:
e1:67:45:18:e3:3f:28:a6:ce:d7:14:14:80:3f:07:d1:96:69:
0e:b5:d2:e7:0f:81:15:3c:7c:5e:90:c6:a8:13:18:5c:5e:30:
00:cb:33:36:5d:d7:85:8b:07:17:21:ae:12:45:d3:5e:09:a9:
23:5c:07:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:25 2026 by rpki-client