
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa
File: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (raw, json)
Hash identifier: /MFUfSDFxjyUNAWC9nKYACUnYExfFRRhHuhwdWcwusA=
Subject key identifier: FA:3E:FB:FD:B2:A1:8B:EF:48:A3:7D:0E:66:77:C5:80:53:82:AC:E1
Certificate issuer: /CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Certificate serial: 362B4B460A2727DC13F92FFF09C531082B8E5058
Authority key identifier: 3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa
Signing time: Sun 03 May 2026 02:43:55 +0000
ROA not before: Sun 03 May 2026 02:38:55 +0000
ROA not after: Sun 02 May 2027 02:43:55 +0000
asID: 147120
IP address blocks: 103.175.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:2b:4b:46:0a:27:27:dc:13:f9:2f:ff:09:c5:31:08:2b:8e:50:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Validity
Not Before: May 3 02:38:55 2026 GMT
Not After : May 2 02:43:55 2027 GMT
Subject: CN=FA3EFBFDB2A18BEF48A37D0E6677C5805382ACE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:61:9b:9e:6c:a3:47:74:a5:fe:6d:02:3d:
b9:c1:4a:f5:60:eb:5b:9b:f2:da:f3:06:f7:8a:4e:
65:44:7b:56:57:71:3a:2d:c1:44:f3:72:d8:0c:f5:
e2:6c:93:a7:ce:3d:44:d3:f4:c6:ac:1f:b8:8d:e8:
65:7f:8e:39:dc:0e:17:77:67:84:04:0d:35:1f:9e:
e7:71:3c:bb:18:be:6b:0b:e5:70:b3:39:72:f1:80:
cd:50:02:4a:33:9c:8c:9d:65:11:c6:f4:d4:22:e1:
bb:5f:3a:4b:c2:18:89:fe:8f:d9:81:de:06:df:ce:
c2:2b:52:15:8d:eb:f6:87:f1:bc:41:57:a6:8e:d2:
58:55:82:b4:f5:b2:e5:57:b6:ec:4f:70:ea:41:a2:
f5:97:8a:76:42:be:24:5d:c8:ab:d4:18:fe:6a:1d:
d2:5f:41:33:e0:ca:ee:77:3c:8f:51:3f:3c:f3:9f:
c6:a0:1e:1e:e3:7f:4d:1a:d2:d9:7f:ad:07:53:7b:
1c:2d:cc:d0:76:bb:b0:4a:98:7c:61:d3:ac:bf:ad:
40:73:b6:bc:6c:80:80:2e:4a:6f:c2:85:ae:a9:a1:
46:94:47:0b:78:1f:cd:0b:32:ea:b8:0b:ef:9d:ec:
70:6a:b3:36:6e:95:9e:63:b2:cd:be:22:20:9e:4a:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3E:FB:FD:B2:A1:8B:EF:48:A3:7D:0E:66:77:C5:80:53:82:AC:E1
X509v3 Authority Key Identifier:
keyid:3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.156.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:fb:7b:c7:b0:cb:4f:5f:1d:b6:f9:4e:fd:3a:12:c2:19:5d:
c7:71:b8:7f:4c:73:1c:a3:7b:c1:f7:13:54:9b:7b:0f:12:7f:
8a:3e:6e:a3:6a:40:01:11:1d:bb:7d:74:21:5a:9d:9e:d4:cb:
e6:5e:0f:01:98:de:67:50:99:43:97:27:4b:5c:1b:14:2a:07:
d3:df:41:89:0e:18:ea:c2:f2:6d:62:5c:64:1c:64:10:5c:db:
ab:c4:9b:80:44:2d:74:8c:cc:54:9e:10:7f:06:8e:f6:ec:cf:
57:dd:70:20:9b:16:1a:0d:cd:3e:a9:97:eb:5a:40:8f:f9:b0:
e9:89:79:05:a9:f3:51:41:1b:6a:d1:12:60:93:bc:d0:0b:88:
8a:36:8f:11:a8:be:31:dd:b4:7f:6f:bd:5f:7c:4b:29:35:b0:
d9:92:20:6d:8d:07:36:cb:17:bc:9a:1d:17:23:bf:56:d9:28:
62:3b:93:6b:ba:80:a0:47:55:4b:9a:f6:a3:8a:5c:24:04:90:
ba:a4:e3:21:fd:e6:d2:96:13:15:27:d7:01:cb:b0:f1:a0:48:
db:55:4e:0d:2a:8c:57:75:33:c3:17:16:3d:d5:e6:c5:62:91:
1e:24:0c:ef:9e:d9:cc:ae:54:5a:93:e5:91:59:72:db:61:f5:
50:76:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:09 2026 by rpki-client