
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa
File: 3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa (raw, json)
Hash identifier: uY3yyx4wQkOkesdmZiKQBfO/mX9p5Uwb9aYVUKsyBH0=
Subject key identifier: FB:7E:77:24:7E:0F:A1:A1:B5:80:A3:7F:72:83:CD:27:9A:B2:80:18
Certificate issuer: /CN=3C38CDC785C4C8B22E60377271E55409582CCE11
Certificate serial: 32ABDEB47BC3BA1973DFC131B490E07425C756CF
Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa
Signing time: Sun 03 May 2026 02:36:48 +0000
ROA not before: Sun 03 May 2026 02:31:48 +0000
ROA not after: Sun 02 May 2027 02:36:48 +0000
asID: 138143
IP address blocks: 103.134.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl
rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ab:de:b4:7b:c3:ba:19:73:df:c1:31:b4:90:e0:74:25:c7:56:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11
Validity
Not Before: May 3 02:31:48 2026 GMT
Not After : May 2 02:36:48 2027 GMT
Subject: CN=FB7E77247E0FA1A1B580A37F7283CD279AB28018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:5c:cc:63:10:fe:87:10:f6:f4:77:85:09:
0c:d0:a9:9e:7f:91:07:07:66:db:2c:9d:41:cd:53:
02:7b:6c:05:c6:4d:93:32:1a:e8:11:f0:d5:0a:e6:
79:fc:8f:b9:fd:a9:17:de:b7:87:2c:6b:72:d1:5f:
d3:99:b6:4f:f2:e9:a4:a4:ec:ab:79:bf:27:10:a9:
ea:da:22:f8:9b:90:de:f6:46:09:9d:35:6c:18:ff:
20:4a:f1:69:55:eb:5a:5c:c2:cd:f7:b1:38:10:d5:
19:df:13:91:c9:be:96:d6:41:0c:71:3b:34:fd:37:
3b:d9:cd:f5:e7:90:55:2d:e9:b7:6d:c8:2a:f8:bf:
1d:8e:fc:46:23:3f:63:e5:c1:16:22:00:fd:55:a6:
22:a0:61:48:c7:24:e1:fe:66:a3:88:e1:02:56:57:
d1:55:6f:aa:d1:9c:11:82:d1:86:44:14:ca:28:a7:
e4:01:cc:ce:6a:1f:7e:77:41:2f:eb:81:50:8b:08:
31:b5:a4:25:36:8e:41:5a:d9:93:10:7a:13:46:3f:
12:b5:ec:d2:77:a3:20:24:3b:80:37:6c:2c:2a:89:
6e:d0:e8:10:e0:44:68:1a:a6:09:a2:34:c0:57:e9:
30:16:eb:aa:f4:05:31:43:d6:7b:1b:2d:5a:00:32:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:77:24:7E:0F:A1:A1:B5:80:A3:7F:72:83:CD:27:9A:B2:80:18
X509v3 Authority Key Identifier:
keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a9:cd:a5:17:f0:41:50:18:2c:ce:23:de:84:95:9f:22:1c:
4f:51:d3:bf:0b:a0:b3:37:2e:c4:73:75:eb:cd:76:d3:3e:af:
65:4f:ff:f1:c0:59:69:e2:b9:44:50:5e:99:59:ec:f6:36:51:
7e:2a:7d:6a:f5:06:54:90:13:2a:a7:7d:f7:dc:ce:f3:fb:d6:
ff:30:5f:b4:ae:e8:6c:5a:8b:62:ac:23:8a:f0:32:88:25:ca:
76:9f:5f:c5:d5:bc:68:f2:a6:a2:67:f9:8b:11:86:e7:a7:83:
2f:c2:16:f7:79:19:b7:6a:c9:2d:c5:da:f4:b2:7d:9f:d6:e0:
b6:a3:36:fd:9d:12:ac:e5:c2:4b:12:e0:9c:38:f1:8c:03:87:
66:36:31:a1:d7:79:14:9a:4e:4e:20:7f:2f:78:e5:0b:b4:a0:
50:6b:dc:c4:e0:57:68:bb:18:da:a6:c2:d0:76:13:a5:af:a7:
3d:4a:28:e6:3e:0a:4d:9b:61:bc:0f:32:08:b9:d7:cd:3b:7d:
ad:49:94:09:34:21:31:81:69:e0:5f:42:78:bd:b7:b6:63:7f:
95:56:47:d6:da:73:b4:7a:f9:69:43:6c:d1:84:21:e3:89:65:
15:3f:92:a1:88:21:10:be:54:42:a0:dd:f3:33:f1:ba:7b:32:
0c:fb:76:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:57 2026 by rpki-client