
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa
File: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (raw, json)
Hash identifier: /19J6lbfu3WuykzZIAFXcyc9WvzK7MOPaoDjJFgPDAo=
Subject key identifier: 7B:B1:EB:29:7E:71:D9:11:25:66:92:E6:D0:9D:68:20:86:DD:88:9B
Certificate issuer: /CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E
Certificate serial: 3188CCF7471B70D272EC06D97386D7330A809E88
Authority key identifier: C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa
Signing time: Sun 03 May 2026 02:32:03 +0000
ROA not before: Sun 03 May 2026 02:27:03 +0000
ROA not after: Sun 02 May 2027 02:32:03 +0000
asID: 142389
IP address blocks: 103.178.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl
rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:88:cc:f7:47:1b:70:d2:72:ec:06:d9:73:86:d7:33:0a:80:9e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E
Validity
Not Before: May 3 02:27:03 2026 GMT
Not After : May 2 02:32:03 2027 GMT
Subject: CN=7BB1EB297E71D911256692E6D09D682086DD889B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:4a:be:dc:95:bc:26:39:2d:ed:f6:0c:47:
ce:5b:b7:5d:1d:9e:b5:11:e5:47:3a:21:e3:fd:1e:
3c:b1:23:80:cd:05:24:cc:d3:cd:fc:24:47:1a:dd:
eb:1d:19:73:f3:74:2f:58:84:4b:4b:12:87:0f:7a:
20:f8:30:4e:ec:83:5f:91:28:dc:33:a9:5d:a5:83:
8a:7a:3e:41:62:75:64:ae:f5:dd:cc:cc:83:27:f2:
dd:3e:a4:5a:70:12:f8:c0:38:a2:9a:d8:26:6a:f5:
c8:d6:01:c7:56:e8:1a:2a:30:f3:ec:df:5c:0a:6f:
b2:fd:96:89:d2:58:45:28:ef:63:ab:44:b0:1b:88:
c1:c7:ea:c0:2d:dc:22:21:d9:cc:c5:e7:e2:83:6b:
d7:a1:2b:e6:4e:ac:74:b2:36:82:fe:58:7c:f8:43:
cd:f5:7b:b0:25:11:1a:12:9b:bc:da:38:cc:84:42:
97:d2:e4:26:48:20:48:93:a0:5d:81:f6:a8:c5:5f:
50:a7:4c:e6:73:af:7a:08:55:99:a8:53:b3:61:61:
41:27:bf:a5:39:9f:ed:75:73:81:26:a9:3e:e4:65:
96:f7:55:a2:24:c6:41:48:21:35:fa:59:4e:e2:ca:
d3:2e:7a:33:4d:86:b8:63:75:cd:86:68:3e:4c:fa:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B1:EB:29:7E:71:D9:11:25:66:92:E6:D0:9D:68:20:86:DD:88:9B
X509v3 Authority Key Identifier:
keyid:C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.125.0/24
Signature Algorithm: sha256WithRSAEncryption
54:fa:ac:10:93:a6:f2:b3:e7:9d:36:ee:c5:9e:c7:b5:34:e7:
3b:bf:dc:2d:8e:1f:79:2a:44:2b:1a:a1:78:91:8d:76:b4:53:
0f:6d:d6:1e:a0:f8:89:43:23:0c:37:d9:86:c1:57:3b:f2:41:
8e:67:7d:3d:de:30:0f:47:67:1f:cf:5a:d6:7f:25:5f:e0:c5:
5b:52:db:0e:9e:1f:9b:27:24:48:30:8c:aa:f0:ef:f3:fb:8c:
ce:63:3d:06:85:c2:62:1f:a8:e3:4c:bf:d3:39:61:d0:50:2f:
5b:08:a3:3f:ea:ac:a6:6e:9a:9c:e5:76:4e:ee:a8:d0:d6:4c:
31:6e:7b:66:11:dc:50:de:da:fc:9b:7f:df:3f:5c:5b:51:0b:
6a:b8:6f:db:80:c6:87:4d:68:11:44:f2:89:9b:d2:bd:18:db:
d6:ae:d1:e2:ba:65:dc:78:70:d5:9e:57:72:e2:56:e6:f0:7d:
18:47:15:11:f3:9c:b0:70:5b:de:f0:26:db:62:69:9f:3f:b3:
3b:35:b8:a7:ec:ad:13:d5:e9:94:5d:0e:6d:37:b7:1a:6d:c9:
05:5f:06:f7:b9:67:2a:50:24:a2:43:ab:60:e1:e6:2f:0d:cf:
8a:dd:bb:02:43:3c:fc:c7:95:d1:7a:15:d6:57:c3:82:7c:76:
99:49:cc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:21 2026 by rpki-client