
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa
File: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (raw, json)
Hash identifier: KaRNE9dqQ7RSBfTQU4dvi8JpMAiXvlNB1zGB1/yX/kk=
Subject key identifier: 52:77:63:B2:0F:A7:25:DD:4F:48:84:27:4F:95:07:44:41:BC:F7:1D
Certificate issuer: /CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Certificate serial: 28B0655EA9CEA07E0D8CD01E84E0AE7C530AE05D
Authority key identifier: 3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa
Signing time: Sun 03 May 2026 02:43:55 +0000
ROA not before: Sun 03 May 2026 02:38:55 +0000
ROA not after: Sun 02 May 2027 02:43:55 +0000
asID: 147120
IP address blocks: 103.175.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b0:65:5e:a9:ce:a0:7e:0d:8c:d0:1e:84:e0:ae:7c:53:0a:e0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Validity
Not Before: May 3 02:38:55 2026 GMT
Not After : May 2 02:43:55 2027 GMT
Subject: CN=527763B20FA725DD4F4884274F95074441BCF71D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:12:d7:d8:dd:c2:d5:7e:ad:ae:d7:22:97:
8a:b0:2b:5d:1f:3e:39:4e:09:78:2f:d2:d0:fc:81:
87:95:f3:aa:cb:44:35:70:61:12:56:e5:41:65:3b:
43:ab:cc:0b:11:58:00:29:ff:b2:d9:42:d8:83:b9:
7b:5d:97:97:ef:05:c1:31:5d:1c:27:ef:c1:f2:e5:
78:4f:5e:d7:78:e9:da:6d:db:8d:ed:24:52:ed:1f:
00:77:e4:e8:0a:67:70:1c:68:e1:5f:4d:82:5a:49:
8a:73:96:11:80:8c:b1:87:bb:3f:71:6a:53:18:a4:
be:b6:d8:71:93:2c:a8:13:43:7b:37:76:dd:cc:08:
93:49:c5:e3:90:42:92:80:3f:b6:e2:64:46:15:84:
e4:bb:c3:60:a9:a4:33:e5:34:2c:2f:b6:76:a0:df:
e7:30:b9:69:d4:23:62:03:55:15:de:ec:69:09:45:
32:a0:9b:83:1d:2a:fb:b5:10:72:74:b8:9c:16:c2:
75:63:c4:4e:ac:b5:78:5a:25:16:8e:e6:d3:c4:1e:
7b:06:00:8b:71:65:83:74:ff:b7:f8:93:82:00:82:
6c:fd:42:9c:a8:fb:3a:cd:34:03:c5:45:9a:3c:dd:
a8:7d:00:ce:c9:b3:71:d2:e4:ad:6b:3a:b4:38:a1:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:77:63:B2:0F:A7:25:DD:4F:48:84:27:4F:95:07:44:41:BC:F7:1D
X509v3 Authority Key Identifier:
keyid:3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:aa:33:9f:43:40:57:96:53:1f:6e:ec:e9:8e:a0:d6:f4:07:
6d:3f:c7:7f:33:b2:62:bf:37:33:70:46:2a:56:a1:7d:65:14:
8f:d1:b3:b9:57:89:ea:98:c8:79:22:ba:e0:97:fd:3b:c0:e9:
6e:dc:7f:05:76:32:4b:95:5e:ae:ab:4f:5e:c1:99:02:d9:19:
48:96:d9:f6:37:de:e4:f8:cc:5e:65:b6:09:8c:1d:38:f6:1c:
ed:64:5c:21:2c:ff:2e:3a:5c:d2:b8:b8:37:a3:58:62:87:fe:
82:a9:bd:3d:a4:29:17:56:d0:cc:4e:33:65:2e:f7:70:76:8a:
d7:9c:ad:0a:8e:63:ab:81:2e:c6:91:d1:97:a8:c1:88:1e:88:
b2:89:2f:46:24:13:67:21:3c:ed:d0:cc:06:a8:c5:f7:71:a1:
de:a2:87:7b:1b:53:fb:e9:85:80:fd:ac:56:9e:85:58:cb:f5:
78:49:ff:73:67:72:c5:56:b3:20:00:ba:9f:b5:3d:e0:b6:10:
ed:e5:4c:86:3f:6e:83:79:1c:d6:82:59:a3:d2:53:71:f5:12:
d9:77:51:e5:81:f9:f1:22:eb:db:4d:6f:f6:96:bc:bc:c4:72:
e3:fb:5a:32:3a:a0:48:96:98:ac:73:a9:90:5f:37:78:b0:0d:
dd:ee:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:49:48 2026 by rpki-client