
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa
File: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (raw, json)
Hash identifier: kcN1ilK7E8xnv83HZbdHrG6Tuk+JlcKgZPpsoyK0j7M=
Subject key identifier: 18:84:7A:DB:4B:3D:BB:C0:27:C3:DB:A7:2B:BC:52:C4:E9:63:65:31
Certificate issuer: /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55
Certificate serial: 43032D3124773BC7BEAA52EEEC2D41721560BBE0
Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa
Signing time: Sun 03 May 2026 02:31:27 +0000
ROA not before: Sun 03 May 2026 02:26:27 +0000
ROA not after: Sun 02 May 2027 02:31:27 +0000
asID: 149340
IP address blocks: 103.178.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl
rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:03:2d:31:24:77:3b:c7:be:aa:52:ee:ec:2d:41:72:15:60:bb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55
Validity
Not Before: May 3 02:26:27 2026 GMT
Not After : May 2 02:31:27 2027 GMT
Subject: CN=18847ADB4B3DBBC027C3DBA72BBC52C4E9636531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:39:39:99:a2:94:69:dd:b9:d7:e0:47:b8:a7:
ad:9a:e9:87:4c:4f:cd:eb:92:36:9a:df:a3:dc:db:
90:4b:e5:29:18:cd:59:b7:8e:de:d9:27:ae:81:4e:
f3:08:dd:36:fe:1a:b4:39:e5:92:79:50:44:0d:2e:
d0:e8:44:13:18:42:3b:6b:dd:92:c3:9c:93:88:d2:
4a:ff:65:3b:8e:ea:4c:b4:c9:82:ab:5d:bc:35:7f:
ae:67:0f:68:74:27:14:7f:ca:76:3d:d1:01:29:7a:
c1:d0:86:a2:49:4e:6f:a1:e5:18:34:58:8b:05:e1:
50:bb:6d:04:82:1e:1f:cb:83:87:81:7c:3c:35:a2:
b0:0e:c5:42:27:12:bc:7d:ef:c3:1c:76:08:6d:45:
4f:31:2c:95:63:07:3f:58:2b:ef:40:d0:fe:5f:3c:
9e:3f:e7:ee:95:7e:e6:b5:d6:d6:a5:94:80:a8:2f:
8b:94:74:04:d6:57:32:c9:25:dd:f4:59:66:9e:27:
30:c6:4b:e8:fa:13:69:8c:c3:33:8a:33:aa:6a:10:
e6:78:33:6f:8a:b8:b8:cb:99:af:da:b3:27:4f:2c:
82:f0:15:b8:e8:d6:01:9d:eb:67:9a:70:b9:96:c7:
1d:16:59:9f:56:f7:32:bd:06:b3:a2:4a:ed:81:62:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:84:7A:DB:4B:3D:BB:C0:27:C3:DB:A7:2B:BC:52:C4:E9:63:65:31
X509v3 Authority Key Identifier:
keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.146.0/23
Signature Algorithm: sha256WithRSAEncryption
00:17:37:89:a9:e9:34:16:f9:fd:eb:d9:2b:b2:a8:aa:c4:97:
87:f1:01:a5:79:b6:2f:ae:05:4a:e1:80:53:94:26:24:b0:7d:
7a:76:5e:22:ec:dd:70:50:cb:f9:8b:09:84:21:f5:cc:d0:be:
75:b1:f7:fa:be:8e:19:f8:45:00:4a:ec:81:c7:b6:f0:95:e3:
8c:1c:25:51:5a:e8:44:65:ef:af:09:0c:1d:42:38:a0:be:dd:
09:4d:72:31:8a:6d:b7:cd:7a:2b:24:61:c8:21:a3:3a:7b:07:
20:67:d5:e5:06:d5:d2:ab:a4:00:40:7a:f7:35:f1:7a:0c:7a:
9d:86:bf:42:0b:be:cb:b2:1c:10:cf:0e:4d:b2:52:3e:cc:51:
5a:26:7c:f8:63:1d:de:05:2c:54:16:2a:5a:ea:02:3c:bc:9f:
6d:6b:a4:7b:38:3b:d4:7c:8c:5e:c7:36:e3:49:1c:60:2a:5f:
6b:ed:c2:c5:41:27:1f:57:36:67:06:e6:7e:52:4f:c3:df:9b:
41:be:9a:d9:e6:de:87:ae:6e:84:3b:a4:30:8b:a1:d0:02:8f:
9b:f3:20:a1:7a:53:bd:4b:11:3c:3f:45:69:1a:ed:8e:2b:b9:
c9:66:17:ef:b4:07:3f:0a:31:49:74:85:e0:47:a4:39:61:4a:
48:ea:8c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:49:51 2026 by rpki-client