
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa
File: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier: xYUCxNjbL6KiwbzD5tLh736zsjEEIJXbWkyCaYS6mBM=
Subject key identifier: 89:0C:70:48:92:4C:E8:65:38:76:58:6B:02:04:51:ED:72:EA:CC:EC
Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial: 6DEA6A101AAB0C029C25BBC3AC8B5EEB97FEA9FA
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa
Signing time: Sun 03 May 2026 02:16:01 +0000
ROA not before: Sun 03 May 2026 02:11:01 +0000
ROA not after: Sun 02 May 2027 02:16:01 +0000
asID: 38150
IP address blocks: 180.214.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 10:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ea:6a:10:1a:ab:0c:02:9c:25:bb:c3:ac:8b:5e:eb:97:fe:a9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Validity
Not Before: May 3 02:11:01 2026 GMT
Not After : May 2 02:16:01 2027 GMT
Subject: CN=890C7048924CE8653876586B020451ED72EACCEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:bf:5e:22:68:c6:c9:ce:e2:31:43:d3:84:
91:76:0e:f5:0c:27:c6:49:bc:45:79:09:73:0e:fa:
6c:eb:16:78:9a:a2:a6:8e:bb:30:82:47:f2:31:2d:
3c:bc:b9:75:e0:66:10:5a:f0:fa:37:1c:e9:cc:e2:
ea:08:a7:4a:5f:21:de:09:74:be:df:cf:81:f7:24:
4d:f2:ef:46:50:15:79:48:73:ea:7f:7a:dd:3a:39:
6d:2c:d1:de:c8:49:3e:ad:83:06:d2:55:1b:f0:18:
f0:58:00:f7:85:83:4d:22:ae:13:7d:ed:e5:40:81:
7d:b4:01:2f:7b:aa:db:a5:bb:7f:d6:3a:4b:0e:a8:
4f:5b:39:bb:c9:e0:26:9f:18:0a:c4:dc:bb:7a:2f:
03:b7:77:60:9f:07:68:ba:d5:8b:a9:d6:43:f1:35:
1d:08:8f:65:cf:6c:bb:03:89:3a:e0:72:2c:29:9d:
8c:b4:d7:e9:2d:9d:38:0a:69:cc:82:be:82:56:74:
57:a5:bc:76:4d:27:68:31:3c:c0:fc:ef:a6:20:31:
9b:b7:ef:c3:9b:57:af:4d:72:c8:fe:7f:df:60:9a:
f4:09:83:8e:6c:88:cd:a9:59:c5:68:87:f6:6b:21:
e6:ce:36:b7:69:69:79:8b:62:cb:dd:98:4e:8a:27:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0C:70:48:92:4C:E8:65:38:76:58:6B:02:04:51:ED:72:EA:CC:EC
X509v3 Authority Key Identifier:
keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.214.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:71:ff:4a:d2:28:e5:98:15:6e:a2:f9:6f:88:6b:18:a7:4f:
36:6f:c1:84:6a:4a:43:34:0d:a8:ac:7d:03:bb:8a:fc:65:8a:
33:ae:62:0f:b2:85:96:c5:a7:91:05:ac:7b:54:b7:01:75:2e:
20:d6:36:4e:60:ad:51:1e:ab:af:f0:df:4b:19:5e:0a:67:73:
6a:e7:45:51:3d:75:a7:6f:11:ca:5c:10:b5:53:45:77:15:42:
26:aa:d1:db:b1:9d:6c:ce:67:ab:b3:9c:1f:e7:09:29:e8:ac:
bb:ef:6e:7d:84:7a:63:75:57:62:de:a2:ec:f8:08:d0:2f:9b:
2e:25:79:62:1d:2a:05:29:10:98:32:be:21:1c:8c:28:d8:e3:
7a:a0:b2:0f:91:48:a0:cb:3b:95:84:bd:c4:52:b8:58:62:22:
c5:c0:31:b2:e9:eb:ef:df:3f:09:ad:51:16:f5:35:6d:dc:2d:
1d:70:21:59:9d:79:c2:90:91:6f:d8:96:83:86:b5:48:88:25:
bc:62:c8:b1:22:03:bd:0f:91:91:bb:c5:63:e4:83:c9:43:42:
86:04:93:77:13:14:dd:19:b5:d3:ce:29:22:4a:fe:a1:36:e1:
45:a9:cd:b1:89:f7:09:4e:db:7c:dd:a3:40:f6:4f:10:93:d9:
14:f0:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:28 2026 by rpki-client