
$ rpki-client -vvf rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa
File: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (raw, json)
Hash identifier: lsAH30jSOhgM8OAAJtXdQCjaCWk5sZqIYZ6QuMuRymM=
Subject key identifier: 5A:45:6B:9D:58:B9:7D:42:FA:A1:BD:58:E6:35:FA:D4:AA:67:8F:5B
Certificate issuer: /CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Certificate serial: 4EEC1C4249B62E0BAFA7CFF8260751A3C98D2755
Authority key identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa
Signing time: Sun 03 May 2026 02:30:18 +0000
ROA not before: Sun 03 May 2026 02:25:18 +0000
ROA not after: Sun 02 May 2027 02:30:18 +0000
asID: 149324
IP address blocks: 103.178.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ec:1c:42:49:b6:2e:0b:af:a7:cf:f8:26:07:51:a3:c9:8d:27:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Validity
Not Before: May 3 02:25:18 2026 GMT
Not After : May 2 02:30:18 2027 GMT
Subject: CN=5A456B9D58B97D42FAA1BD58E635FAD4AA678F5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:a1:75:7b:8e:79:d7:9e:da:31:b5:dc:74:
58:c6:b3:48:f7:e7:8f:dc:fa:be:9f:03:7e:f3:a1:
54:a0:fb:9d:a7:65:7c:b9:32:1e:5c:0b:70:37:cf:
50:f1:9f:0d:b5:c8:b3:f5:52:e0:ce:f5:c7:12:cc:
c2:8d:40:a8:52:49:43:22:8e:3a:bf:7b:27:1e:d0:
9c:28:39:15:c7:43:6a:56:27:08:97:94:29:65:f7:
a4:dd:a4:02:ed:c9:c3:61:37:ec:08:ff:b4:2f:f4:
2d:b1:f9:28:c9:9f:18:a8:88:98:8a:8a:ae:a7:41:
d4:4a:9d:e2:4d:b6:55:35:0d:7f:0b:99:7f:e6:79:
fa:07:d2:c1:d7:fd:d7:2b:1c:cb:8e:f4:1b:07:3e:
88:52:35:47:bd:d1:5d:42:1c:3f:93:37:f5:20:78:
46:8a:2f:7f:72:5e:d4:39:da:22:db:23:98:36:85:
1f:8d:a6:7b:24:7c:35:9a:db:da:29:d7:4c:5b:fc:
af:24:84:32:1d:72:26:7e:b8:94:0d:ea:c9:5d:b6:
a7:92:d7:d0:bf:d5:c7:c7:30:0f:57:d2:c0:8f:e0:
f1:a2:99:24:ae:26:f2:0c:e4:5d:5f:25:d8:9d:a8:
a7:9d:8f:13:fa:fc:81:51:40:2f:d0:c1:9e:29:9b:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:45:6B:9D:58:B9:7D:42:FA:A1:BD:58:E6:35:FA:D4:AA:67:8F:5B
X509v3 Authority Key Identifier:
keyid:88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.150.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e9:03:4b:fb:74:bf:80:dc:99:b4:02:d9:16:a6:c3:c1:6c:
7b:0e:76:bb:94:3b:d5:f8:90:a2:df:d7:be:83:c5:19:52:06:
44:1d:0f:1d:cc:d1:a0:27:1c:c4:07:6a:2d:a7:fd:c2:d9:4e:
1b:a3:ce:83:21:47:71:0c:c1:95:a5:9b:b4:3d:02:28:93:9b:
55:b6:9c:b9:28:91:30:96:d9:b2:83:ed:fc:aa:25:41:93:91:
dc:b5:41:b1:3b:f1:be:3a:0c:c0:ca:c5:87:df:ab:bc:55:2f:
fc:dd:1b:b5:c5:76:ef:e2:7e:7f:2c:ad:f5:dc:cb:3b:bc:87:
26:b6:f8:38:f1:8a:29:07:57:f9:2b:8a:03:29:65:91:9c:81:
65:95:c7:1b:3b:66:1d:48:f0:d4:23:c0:59:e2:14:95:e7:7d:
d0:80:25:65:89:4b:92:65:70:98:18:82:91:5e:49:e5:23:e7:
96:55:2f:26:c9:13:c9:ed:76:9f:cd:65:89:02:71:4a:e6:bf:
a4:b6:a3:2b:e9:3e:e4:f6:e1:e3:2c:04:a0:9e:7f:db:c2:51:
00:46:a1:65:02:23:b7:6f:08:e7:a4:dc:4d:43:53:10:39:a7:
78:bc:1c:88:31:1e:8d:4d:e1:5a:dd:4b:5a:0d:52:b0:f6:2b:
cb:95:2f:c8
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUTuwcQkm2Lguvp8/4JgdRo8mNJ1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgzNjY0REE2MTNDOTA2N0M4MTU1NDM2NjkzQUVGMUE4
MkIzQjFBNzAeFw0yNjA1MDMwMjI1MThaFw0yNzA1MDIwMjMwMThaMDMxMTAvBgNV
BAMTKDVBNDU2QjlENThCOTdENDJGQUExQkQ1OEU2MzVGQUQ0QUE2NzhGNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ+KF1e455157aMbXcdFjGs0j3
54/c+r6fA37zoVSg+52nZXy5Mh5cC3A3z1Dxnw21yLP1UuDO9ccSzMKNQKhSSUMi
jjq/eyce0JwoORXHQ2pWJwiXlCll96TdpALtycNhN+wI/7Qv9C2x+SjJnxioiJiK
iq6nQdRKneJNtlU1DX8LmX/mefoH0sHX/dcrHMuO9BsHPohSNUe90V1CHD+TN/Ug
eEaKL39yXtQ52iLbI5g2hR+NpnskfDWa29op10xb/K8khDIdciZ+uJQN6sldtqeS
19C/1cfHMA9X0sCP4PGimSSuJvIM5F1fJdidqKedjxP6/IFRQC/QwZ4pm1hTAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUWkVrnVi5fUL6ob1Y5jX61Kpnj1swHwYDVR0j
BBgwFoAUiDZk2mE8kGfIFVQ2aTrvGoKzsacwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDY1ZmE5OGYtMWU4NS00NjM4LWJiOWQtMjg3Mzc4YTRjZTg3LzAvODgzNjY0REE2
MTNDOTA2N0M4MTU1NDM2NjkzQUVGMUE4MkIzQjFBNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84ODM2NjREQTYxM0M5MDY3QzgxNTU0MzY2OTNBRUYxQTgyQjNC
MUE3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ2NWZhOThmLTFlODUtNDYzOC1i
YjlkLTI4NzM3OGE0Y2U4Ny8wLzMxMzAzMzJlMzEzNzM4MmUzMTM1MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzMyMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnspYwDQYJ
KoZIhvcNAQELBQADggEBAE7pA0v7dL+A3Jm0AtkWpsPBbHsOdruUO9X4kKLf176D
xRlSBkQdDx3M0aAnHMQHai2n/cLZThujzoMhR3EMwZWlm7Q9AiiTm1W2nLkokTCW
2bKD7fyqJUGTkdy1QbE78b46DMDKxYffq7xVL/zdG7XFdu/ifn8srfXcyzu8hya2
+DjxiikHV/krigMpZZGcgWWVxxs7Zh1I8NQjwFniFJXnfdCAJWWJS5JlcJgYgpFe
SeUj55ZVLybJE8ntdp/NZYkCcUrmv6S2oyvpPuT24eMsBKCef9vCUQBGoWUCI7dv
COek3E1DUxA5p3i8HIgxHo1N4VrdS1oNUrD2K8uVL8g=
-----END CERTIFICATE-----
Generated at Wed May 13 16:43:02 2026 by rpki-client