
$ rpki-client -vvf rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa
File: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (raw, json)
Hash identifier: Yz7WTJdxRW1CYrN9boz8edyp4I9Scuuedk3B0vEsAGc=
Subject key identifier: 82:6D:BF:0E:22:2D:39:AF:85:9F:DD:67:B1:CE:42:4D:25:4B:65:BC
Certificate issuer: /CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Certificate serial: 2B7DA1D1E476F9AB141518E001E6AEE14A759998
Authority key identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa
Signing time: Sun 03 May 2026 02:30:18 +0000
ROA not before: Sun 03 May 2026 02:25:18 +0000
ROA not after: Sun 02 May 2027 02:30:18 +0000
asID: 149324
IP address blocks: 103.178.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7d:a1:d1:e4:76:f9:ab:14:15:18:e0:01:e6:ae:e1:4a:75:99:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Validity
Not Before: May 3 02:25:18 2026 GMT
Not After : May 2 02:30:18 2027 GMT
Subject: CN=826DBF0E222D39AF859FDD67B1CE424D254B65BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:c7:55:3d:e8:bf:6f:fc:60:c6:0c:3b:a2:
d6:40:16:66:3f:90:60:25:01:5d:99:3d:83:c8:f8:
50:0b:ff:09:c8:a6:a7:77:94:47:df:42:10:d6:10:
e9:1c:88:5e:fe:4c:f8:57:a9:47:f1:67:36:c6:05:
1d:c1:34:a7:6a:94:fb:2a:0f:cc:b3:09:90:c2:2a:
9d:12:0f:0d:78:55:da:87:23:b3:eb:4d:03:c2:d4:
2e:0f:4c:fd:83:eb:9e:df:2f:69:30:d3:f3:a1:fc:
2e:82:53:4a:a4:53:8d:36:f1:eb:be:16:d3:48:c4:
92:57:fe:fe:f0:1e:0f:34:4f:ba:f1:2c:ca:f3:af:
d9:d6:ba:48:f5:39:e4:e5:a1:09:c7:2b:c6:ff:32:
cc:ff:a1:68:21:41:50:bd:ec:4a:b6:4d:e1:6e:b0:
0a:a8:41:1b:64:5a:9b:4e:86:d2:1a:f2:27:97:d9:
ba:e6:2f:ff:cd:e8:10:06:fb:74:87:08:63:ff:d1:
04:7b:a5:18:a8:41:bd:8e:33:bf:7e:a7:d6:0a:31:
b4:98:6c:b5:22:b2:d0:7e:93:23:ae:84:d7:fa:84:
3a:2b:2e:b0:3a:ff:98:0d:e3:3f:b0:15:1d:94:a7:
da:44:a2:08:24:d7:6f:b8:8d:cb:78:00:79:26:22:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6D:BF:0E:22:2D:39:AF:85:9F:DD:67:B1:CE:42:4D:25:4B:65:BC
X509v3 Authority Key Identifier:
keyid:88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.150.0/23
Signature Algorithm: sha256WithRSAEncryption
04:00:45:ca:fa:23:aa:96:17:89:89:e8:7d:60:d8:52:59:41:
da:a8:72:b7:63:0d:1d:cd:d2:ce:1a:ac:17:fe:b4:30:2b:43:
72:7c:d8:fd:26:e4:ac:10:4a:48:3f:83:01:8e:8f:1e:2f:1f:
d3:32:b4:a2:77:3d:85:c3:b6:d9:2f:0e:48:24:6b:16:51:ea:
67:6a:ca:e1:40:65:26:35:41:93:db:7f:0f:14:64:7e:e7:cc:
c2:3c:dc:ef:cf:0c:ca:26:32:73:d9:cd:bd:91:cd:0a:5d:60:
6f:59:49:89:a9:4a:66:96:28:71:2f:ff:fc:9c:da:ee:20:83:
12:98:bd:76:ba:cc:6d:1a:87:57:14:24:53:48:c8:a0:ba:24:
83:ac:85:7d:2f:c3:c4:d1:06:44:2e:c4:1e:6c:86:ee:23:18:
00:d6:0f:95:94:a0:cb:18:a8:43:50:eb:9a:d4:83:7e:07:00:
ec:79:b1:4c:55:5e:71:4c:13:34:7c:fe:36:58:93:8b:6f:eb:
97:c5:74:49:24:71:03:f6:40:03:0d:1e:65:8a:4d:c0:76:e5:
9f:e3:f2:f0:b7:04:76:d7:02:5e:6a:04:ea:f3:c3:33:d1:b6:
43:16:28:61:d8:18:b2:5d:09:8c:ab:8e:26:15:13:ec:e1:fd:
46:f4:0a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:27:23 2026 by rpki-client