
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa
File: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (raw, json)
Hash identifier: jeXX5N22FqZkneiGWqodT0kr8qubxNOsLcNDrNQZPLo=
Subject key identifier: FA:53:11:FA:14:7B:8B:01:15:65:EA:1D:16:59:E0:99:06:86:DB:7A
Certificate issuer: /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55
Certificate serial: 574DA322C077DE024D3859A5E9B3EDBB033192B0
Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa
Signing time: Sun 03 May 2026 02:31:27 +0000
ROA not before: Sun 03 May 2026 02:26:27 +0000
ROA not after: Sun 02 May 2027 02:31:27 +0000
asID: 149340
IP address blocks: 103.178.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl
rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:4d:a3:22:c0:77:de:02:4d:38:59:a5:e9:b3:ed:bb:03:31:92:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55
Validity
Not Before: May 3 02:26:27 2026 GMT
Not After : May 2 02:31:27 2027 GMT
Subject: CN=FA5311FA147B8B011565EA1D1659E0990686DB7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:89:4d:f6:94:22:21:b7:8a:d8:be:6c:3e:
a5:e7:0a:9a:f6:f0:1a:bb:2b:ea:4a:f9:9c:1c:09:
44:3a:9b:72:7a:87:9a:5b:71:a0:b8:48:0c:34:9d:
99:86:d1:f2:3d:a9:a9:57:46:04:bc:73:31:6e:bb:
d7:b1:cb:38:43:6b:9f:7a:3f:41:fc:09:59:21:fa:
9d:b6:6c:ab:bc:00:70:af:37:53:6e:05:3f:76:47:
de:55:d0:63:6c:29:f5:79:e5:6c:1d:9f:7a:6e:d8:
98:aa:0e:62:38:e2:57:ce:5f:00:21:db:3c:e0:70:
68:78:57:15:86:b3:5d:4e:d1:e3:6d:9c:1e:7a:7d:
73:5a:fc:e4:1f:aa:73:cd:3d:6e:0a:d2:40:96:bb:
42:2a:bb:93:4f:c3:ba:29:5c:ed:d4:46:0f:d7:5a:
a2:74:3a:ce:58:5c:28:28:43:73:9b:9b:a3:a7:a0:
0a:68:ce:6a:f0:7a:83:de:e0:15:fe:80:c1:27:93:
13:77:7e:42:a0:d2:52:dc:75:00:b9:ac:56:47:7c:
95:e4:26:f3:48:cb:e9:ad:88:ac:e5:b6:dc:c4:05:
9a:6c:38:34:e8:bb:ca:3f:34:d1:50:75:dc:4d:68:
0c:6c:ba:e6:8b:ea:ba:e2:08:64:eb:b9:12:82:e0:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:53:11:FA:14:7B:8B:01:15:65:EA:1D:16:59:E0:99:06:86:DB:7A
X509v3 Authority Key Identifier:
keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.147.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0b:d8:ae:a6:c4:f0:ab:3e:e5:03:03:45:c8:25:ae:70:52:
da:a9:75:7e:77:3f:0e:a4:0e:da:62:3c:1c:a8:27:b2:a4:0b:
7f:cf:b8:9d:04:4d:18:17:c3:62:6f:99:ef:3f:21:e6:ba:bd:
1f:e0:f8:d9:c8:6f:2b:b2:70:99:ad:ae:75:68:58:da:d8:6a:
31:a8:54:63:d9:6a:ab:b3:7e:76:0a:0a:30:82:07:f4:4c:fd:
be:91:37:67:1d:1d:6d:15:39:70:e3:98:47:c7:56:c1:af:1d:
b2:36:65:2e:ca:18:b1:ed:6a:be:87:bb:8b:44:f2:09:d1:0a:
27:fe:3b:83:ce:41:ac:51:89:8a:f0:b0:ec:51:2c:16:a6:64:
55:03:f9:30:e4:30:b2:ef:ef:4c:41:96:43:44:d9:e8:c1:cf:
b9:7d:fb:28:ee:fc:88:a7:ce:ce:86:60:9f:68:e9:a9:44:9c:
62:7c:a0:c4:72:32:78:d7:a8:79:cf:41:ae:65:f3:a3:ed:8b:
b5:6d:ff:b5:e1:6a:31:5e:79:91:25:53:57:58:83:bc:d2:d9:
8c:40:6c:a1:d8:2d:c5:eb:b1:91:42:47:28:d6:d7:42:7d:b5:
54:64:27:ed:18:02:02:3b:53:d6:b8:ad:9d:21:37:87:1d:6c:
1e:02:b0:38
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUV02jIsB33gJNOFml6bPtuwMxkrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1
MDY5OEQ1NTAeFw0yNjA1MDMwMjI2MjdaFw0yNzA1MDIwMjMxMjdaMDMxMTAvBgNV
BAMTKEZBNTMxMUZBMTQ3QjhCMDExNTY1RUExRDE2NTlFMDk5MDY4NkRCN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVIlN9pQiIbeK2L5sPqXnCpr2
8Bq7K+pK+ZwcCUQ6m3J6h5pbcaC4SAw0nZmG0fI9qalXRgS8czFuu9exyzhDa596
P0H8CVkh+p22bKu8AHCvN1NuBT92R95V0GNsKfV55Wwdn3pu2JiqDmI44lfOXwAh
2zzgcGh4VxWGs11O0eNtnB56fXNa/OQfqnPNPW4K0kCWu0Iqu5NPw7opXO3URg/X
WqJ0Os5YXCgoQ3Obm6OnoApozmrweoPe4BX+gMEnkxN3fkKg0lLcdQC5rFZHfJXk
JvNIy+mtiKzlttzEBZpsODTou8o/NNFQddxNaAxsuuaL6rriCGTruRKC4Fk3AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU+lMR+hR7iwEVZeodFlngmQaG23owHwYDVR0j
BBgwFoAUlKoO6kgKwzADZd9LM9o/MVBpjVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGJhYjgwNDItMGUxYy00M2IxLWI3MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0
ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1MDY5OEQ1NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NEFBMEVFQTQ4MEFDMzMwMDM2NURGNEIzM0RBM0YzMTUwNjk4
RDU1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRiYWI4MDQyLTBlMWMtNDNiMS1i
NzAzLTYzNDM4YmUyMzI1Yi8wLzMxMzAzMzJlMzEzNzM4MmUzMTM0MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnspMwDQYJ
KoZIhvcNAQELBQADggEBADkL2K6mxPCrPuUDA0XIJa5wUtqpdX53Pw6kDtpiPByo
J7KkC3/PuJ0ETRgXw2Jvme8/Iea6vR/g+NnIbyuycJmtrnVoWNrYajGoVGPZaquz
fnYKCjCCB/RM/b6RN2cdHW0VOXDjmEfHVsGvHbI2ZS7KGLHtar6Hu4tE8gnRCif+
O4POQaxRiYrwsOxRLBamZFUD+TDkMLLv70xBlkNE2ejBz7l9+yju/Iinzs6GYJ9o
6alEnGJ8oMRyMnjXqHnPQa5l86Pti7Vt/7XhajFeeZElU1dYg7zS2YxAbKHYLcXr
sZFCRyjW10J9tVRkJ+0YAgI7U9a4rZ0hN4cdbB4CsDg=
-----END CERTIFICATE-----
Generated at Wed May 13 13:34:26 2026 by rpki-client