
$ rpki-client -vvf rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa
File: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (raw, json)
Hash identifier: dc+32akDqD+whWWKGoW6auMBb4nmyq1TxJGgB+DF/Mw=
Subject key identifier: DD:F9:A4:03:7E:61:83:C2:FF:14:32:79:F4:5A:4A:0E:39:AE:09:C4
Certificate issuer: /CN=65177A3236E4CDE9DEABA6D24D81798C0342B359
Certificate serial: 24D5B00CED1CA582B25C0B642135FB2B2B1A0EE4
Authority key identifier: 65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa
Signing time: Sun 03 May 2026 02:28:53 +0000
ROA not before: Sun 03 May 2026 02:23:53 +0000
ROA not after: Sun 02 May 2027 02:28:53 +0000
asID: 150186
IP address blocks: 103.146.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl
rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d5:b0:0c:ed:1c:a5:82:b2:5c:0b:64:21:35:fb:2b:2b:1a:0e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65177A3236E4CDE9DEABA6D24D81798C0342B359
Validity
Not Before: May 3 02:23:53 2026 GMT
Not After : May 2 02:28:53 2027 GMT
Subject: CN=DDF9A4037E6183C2FF143279F45A4A0E39AE09C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:ce:ae:99:3e:45:f3:25:1a:ae:e4:be:a5:
55:84:ae:30:97:e6:91:aa:9d:8e:56:d5:a2:f0:54:
87:1a:bd:31:d4:68:5a:06:07:45:a9:55:ca:5b:ce:
ad:32:91:40:b6:29:29:c9:23:b8:e3:54:31:43:3c:
8f:d6:91:4d:d2:12:a8:dc:07:c0:36:e7:03:35:a9:
f1:ef:30:bc:c7:13:ce:3c:72:92:0d:f8:83:47:07:
43:9c:ff:ff:6c:61:f1:69:2e:d1:c7:79:5e:04:ae:
64:ee:7d:ff:86:d5:f2:95:dc:ab:ba:0f:06:bd:89:
57:dc:e5:7b:e4:3e:16:e3:79:7f:e5:6c:06:1b:dc:
3f:e1:2d:ec:ea:61:8f:db:2c:45:9a:47:43:d9:7c:
3d:be:ea:ad:2f:f5:c5:25:af:84:76:73:15:cf:8e:
82:d0:86:62:30:0b:c7:b5:c0:2c:e8:fb:35:af:43:
6c:dd:94:85:ae:6f:11:b4:c8:9c:b8:3c:c5:ac:ea:
52:5b:b4:27:1b:53:07:64:da:a7:0b:73:91:f9:97:
d8:7c:09:4b:11:e3:de:f7:80:78:a3:12:48:cb:cb:
f2:de:2c:8d:e3:45:83:37:dd:6b:94:cc:49:66:44:
e3:ef:c1:3b:c1:7f:43:7d:b0:bc:a4:0f:82:ae:dd:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:A4:03:7E:61:83:C2:FF:14:32:79:F4:5A:4A:0E:39:AE:09:C4
X509v3 Authority Key Identifier:
keyid:65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:83:1a:19:41:be:90:35:17:0e:1a:1d:ad:ab:ab:ca:b6:b2:
04:09:b0:a2:fe:02:48:58:91:8b:b7:46:d0:78:d1:bb:0a:2f:
6d:47:c4:6a:85:01:28:f8:1d:3f:9c:59:d6:f3:92:85:51:26:
68:1f:ae:a7:4e:02:61:d0:23:07:72:58:09:71:35:fd:63:3a:
d7:9a:bf:b5:cb:aa:ea:fc:64:fd:0e:7d:d6:64:e4:ea:13:68:
cf:ea:89:07:e7:83:3a:03:d3:cf:1f:fc:bf:30:c2:36:c8:65:
87:19:5f:e5:17:de:a0:17:8d:1f:8b:85:c0:c4:4a:ba:47:eb:
6e:31:f5:87:ca:34:57:15:c7:a9:40:d1:0f:d9:be:7e:b5:ba:
76:ea:98:24:0f:b7:a8:7a:7f:97:1a:0c:b4:b2:c8:4d:f5:1e:
d6:aa:e2:97:29:40:67:ea:e4:fe:b8:5a:9f:a9:2d:18:4b:93:
ac:7d:9a:7d:c3:1d:89:5e:95:a0:fc:a8:94:d2:03:2d:ae:ff:
88:48:42:2c:63:59:3b:0a:c9:78:2e:80:bb:b4:45:c5:ec:b6:
b3:c4:2d:2c:6a:3a:28:90:5d:0d:51:10:b1:a9:c0:8a:7a:fd:
9a:ba:95:c5:20:bf:b8:92:fe:e9:40:91:1e:4e:97:3e:98:ef:
5b:b5:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:02 2026 by rpki-client