
$ rpki-client -vvf rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/3130332e3234382e382e302f32332d3234203d3e20313531353338.roa
File: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (raw, json)
Hash identifier: ccnKpMhAZ50WINER3EYQ3VYvFkNVbacY8s+OufsENRg=
Subject key identifier: A7:A3:AF:B4:4D:C8:70:0C:7F:AE:D5:65:33:52:DE:BD:AB:50:2F:32
Certificate issuer: /CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4
Certificate serial: 7E4806B9937015E78D9801513FE94AD361BDBF94
Authority key identifier: 77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/3130332e3234382e382e302f32332d3234203d3e20313531353338.roa
Signing time: Sun 03 May 2026 02:21:27 +0000
ROA not before: Sun 03 May 2026 02:16:27 +0000
ROA not after: Sun 02 May 2027 02:21:27 +0000
asID: 151538
IP address blocks: 103.248.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl
rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 10:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:48:06:b9:93:70:15:e7:8d:98:01:51:3f:e9:4a:d3:61:bd:bf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4
Validity
Not Before: May 3 02:16:27 2026 GMT
Not After : May 2 02:21:27 2027 GMT
Subject: CN=A7A3AFB44DC8700C7FAED5653352DEBDAB502F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:50:4b:d0:c8:c1:db:34:e7:64:1c:0e:3d:
25:ea:3e:04:23:6b:62:c1:bc:94:3b:fd:ae:eb:03:
b8:45:8a:ea:1f:2d:ae:21:7f:73:82:1c:da:e7:87:
17:0e:52:84:46:0b:88:fb:dc:75:1b:7d:02:30:b5:
0a:d3:68:0e:2d:56:52:7b:74:06:0f:57:e4:26:15:
fd:2e:03:a6:6d:7b:0e:8a:49:72:b9:ce:99:1f:ad:
20:6e:1b:9f:6d:ca:7d:df:81:5d:e2:38:ed:b6:6f:
37:ce:f6:04:f7:e7:32:19:20:8b:96:4a:22:18:e8:
b0:41:ef:2f:f3:00:b7:8a:26:aa:4d:3c:99:d0:19:
e9:ea:da:ff:26:80:03:1d:d7:6d:41:33:2e:88:56:
52:39:ad:e5:2a:ae:8f:29:96:2a:a7:96:fe:21:5b:
49:98:2c:94:80:a4:7e:fa:91:f8:d0:e4:c2:72:ed:
0d:c7:44:34:19:9a:85:e0:09:67:ca:14:3c:ac:06:
cd:d3:1b:64:89:e0:39:e8:11:d3:70:a9:32:71:6f:
8b:16:fe:8b:4c:65:ce:89:08:f5:b4:31:45:53:d8:
0f:25:77:12:7e:ad:c7:0d:dc:0b:ab:21:a9:57:f1:
f1:c6:db:b7:b7:92:2a:0e:f6:37:42:f5:72:c9:47:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A3:AF:B4:4D:C8:70:0C:7F:AE:D5:65:33:52:DE:BD:AB:50:2F:32
X509v3 Authority Key Identifier:
keyid:77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/3130332e3234382e382e302f32332d3234203d3e20313531353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.8.0/23
Signature Algorithm: sha256WithRSAEncryption
76:a2:f7:33:d9:ce:ec:05:7d:79:f8:5b:9a:0b:17:94:74:0a:
94:2e:98:ea:35:61:60:08:ec:9d:f5:8d:4c:cf:38:3a:81:31:
5f:ce:c1:91:0a:9e:d3:8c:c3:49:d1:4d:47:d7:10:50:da:52:
01:35:8d:3e:3b:9f:ff:7e:a4:66:3b:34:a2:ea:e4:ab:a4:32:
ab:4c:11:28:16:9b:b7:c5:e7:1b:1f:ca:58:55:8b:28:bc:78:
88:73:dc:ad:36:72:e7:5d:60:2e:71:8b:20:cd:f4:2e:ac:20:
6b:a1:04:3b:9a:45:0f:ab:14:c3:a9:6d:75:2b:af:b9:e9:3d:
66:b7:47:1d:95:39:c6:9a:6a:6e:97:c5:d5:b2:a6:13:00:da:
ed:ab:73:f1:ae:ef:23:e8:d4:ca:9b:f4:63:f0:44:05:40:b4:
0e:a3:6e:38:00:a6:fa:d0:4b:58:0a:e4:18:f6:6c:0a:c8:7c:
7a:b6:e5:ee:15:4c:f6:27:d0:92:c4:ef:a6:c0:96:75:dc:c0:
1c:af:f7:32:6a:fc:2b:56:a5:46:0a:5b:17:48:4b:9c:1f:f3:
9e:e8:eb:4f:3b:a7:27:1e:12:de:61:6c:f7:7e:e5:97:4e:9e:
91:14:b2:f1:a4:40:c6:9c:4d:2e:7e:ac:9c:9d:d3:50:af:6d:
44:4c:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:56 2026 by rpki-client