
$ rpki-client -vvf rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa
File: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (raw, json)
Hash identifier: ETbLJXXcJM3Uqzm41+hqN5GkUeg2ajdJtzrh7tkT7pM=
Subject key identifier: 74:6D:AB:34:A0:F8:57:DC:21:9F:8F:DD:8A:59:0B:16:36:0E:0D:39
Certificate issuer: /CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Certificate serial: 15CE27A1DC65AEF6676BC72B101D58D237E4A6FE
Authority key identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa
Signing time: Sun 03 May 2026 02:30:17 +0000
ROA not before: Sun 03 May 2026 02:25:17 +0000
ROA not after: Sun 02 May 2027 02:30:17 +0000
asID: 149324
IP address blocks: 103.178.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ce:27:a1:dc:65:ae:f6:67:6b:c7:2b:10:1d:58:d2:37:e4:a6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Validity
Not Before: May 3 02:25:17 2026 GMT
Not After : May 2 02:30:17 2027 GMT
Subject: CN=746DAB34A0F857DC219F8FDD8A590B16360E0D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:7d:06:73:39:d8:e5:2a:d9:d7:c0:be:0f:
50:a0:3f:20:d2:9f:40:ed:84:ef:f6:a6:eb:03:1e:
0c:1c:84:6b:13:6a:b6:64:57:c2:1a:cb:18:c0:c9:
03:bc:ff:9d:5e:2c:c5:af:f9:df:52:7e:7e:88:a1:
1c:1f:aa:63:93:c2:f2:74:43:9c:fd:6e:5a:23:c4:
6f:7f:83:02:35:54:b0:50:3c:5a:a6:8a:92:06:92:
fa:dd:bf:8b:0c:d4:7a:50:20:2b:60:3b:30:ea:49:
bc:3f:fa:cc:e1:b8:bc:64:05:2e:ea:79:56:1b:c3:
41:80:12:ca:28:f7:1c:6d:ac:8c:bb:b3:3a:55:37:
bb:75:0c:c7:2c:88:ef:01:e4:f0:5b:e6:c2:02:9a:
f1:ea:b3:77:cf:90:5d:52:05:48:65:d8:2f:7f:13:
bc:3e:7f:43:26:82:38:cb:a1:32:28:f4:bf:f6:d7:
e8:e0:6c:12:40:0c:41:4f:16:7e:39:53:a8:32:39:
54:f2:96:0e:39:55:5e:0a:d3:52:fa:e9:c3:6d:0b:
0f:78:89:e6:53:0f:8f:47:26:e2:b5:70:5b:a0:eb:
a4:84:85:58:b0:f0:0a:46:b8:fa:43:53:ef:75:0f:
72:a1:24:18:09:75:9f:fa:44:34:93:dd:3f:68:ad:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6D:AB:34:A0:F8:57:DC:21:9F:8F:DD:8A:59:0B:16:36:0E:0D:39
X509v3 Authority Key Identifier:
keyid:88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.151.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6c:e9:a5:57:6f:6b:e4:00:46:cd:c7:e6:2c:f5:d5:db:68:
2d:b4:29:8b:3b:ae:22:e6:61:e8:b7:e7:5c:64:6f:ae:44:ef:
f9:aa:24:64:31:7a:a7:f8:48:cc:6f:98:08:c3:03:0d:59:dd:
4e:a1:1c:54:df:f7:53:a9:55:4b:01:c2:cb:de:01:23:96:72:
ca:87:74:71:70:2e:53:14:d5:2e:c9:d1:84:c1:e1:1c:f8:00:
94:79:89:4d:f0:a5:1e:df:0e:bd:c3:4b:e4:27:6f:a8:25:ce:
bd:bb:87:27:36:c6:a0:78:3f:48:2a:87:49:14:eb:ce:9e:16:
7e:cb:bc:a9:a5:62:28:72:8f:81:4b:21:cc:a1:c9:5e:7b:62:
36:2f:21:d7:b9:b2:80:dc:5f:ed:6d:02:d8:a6:6c:cf:88:60:
cf:a9:8f:b4:eb:24:fe:c1:ac:ad:80:28:1d:2d:98:90:52:37:
44:0d:f7:59:7c:ef:14:9f:3a:7b:14:8e:16:1a:20:0b:8e:67:
44:38:fc:01:aa:de:e3:53:fa:05:7c:83:78:16:ce:a0:74:ce:
e4:96:49:50:13:b8:8c:82:86:35:d5:2d:24:9e:db:a8:c2:d5:
c7:0c:b8:d8:77:d8:af:11:72:4e:0f:67:dd:99:7d:fc:ee:28:
81:fd:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:43:35 2026 by rpki-client