
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa
File: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (raw, json)
Hash identifier: rIYPSEZBQY119pZKRCgQ7fA+t5XlH5FXxB4mSA7mWtU=
Subject key identifier: 60:1D:DE:C8:46:58:73:BC:38:1D:FB:6A:69:8F:8A:E9:CE:F6:98:8D
Certificate issuer: /CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Certificate serial: 1C25B305778AD89560A075CB50FE1B4573CC79D1
Authority key identifier: 3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa
Signing time: Sun 03 May 2026 02:43:54 +0000
ROA not before: Sun 03 May 2026 02:38:54 +0000
ROA not after: Sun 02 May 2027 02:43:54 +0000
asID: 147120
IP address blocks: 103.175.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:25:b3:05:77:8a:d8:95:60:a0:75:cb:50:fe:1b:45:73:cc:79:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E2F6BF0D403588302286670BF848A78CBDFCC03
Validity
Not Before: May 3 02:38:54 2026 GMT
Not After : May 2 02:43:54 2027 GMT
Subject: CN=601DDEC8465873BC381DFB6A698F8AE9CEF6988D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9f:38:9a:16:0e:2a:d0:04:02:2a:3a:5a:ab:
3e:54:dd:83:dc:44:53:ad:c5:b0:aa:a9:40:a5:6a:
db:b0:a2:b9:f4:bf:dd:a3:c7:bd:8a:a5:a8:86:9f:
4a:6b:c9:9e:fe:4d:3a:22:f1:f8:d0:f7:7a:6d:9b:
5a:dc:55:68:bc:ed:7d:01:c6:c7:69:1d:7e:74:bf:
61:65:dc:f5:a7:c3:6a:a3:8c:7e:89:89:bd:a2:67:
5d:88:7b:e6:27:1d:46:99:e2:fe:ad:4c:ba:b1:c5:
f0:72:e5:25:51:85:62:e9:7d:18:89:5f:52:c1:09:
ff:5f:6b:14:90:7c:c7:92:da:20:88:43:b6:c7:13:
c8:74:69:10:b5:2c:22:d3:4e:4d:29:73:1c:3a:90:
e1:26:c0:39:d5:d0:3f:55:92:1b:a6:b2:df:13:bf:
91:61:46:c9:4c:7c:05:83:30:80:5f:78:f4:98:c6:
38:4c:90:42:e2:7c:79:0d:ae:c5:5d:86:22:a4:49:
ed:0c:c6:f6:a1:85:ab:2e:b2:7a:a8:56:30:36:5b:
7d:74:90:31:97:6f:1c:65:14:0e:09:56:95:1d:20:
9a:02:8d:5f:b6:a4:23:a3:69:da:39:b9:40:d5:d6:
88:b4:ee:05:61:dd:c8:43:92:ef:bf:44:db:a6:47:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:DE:C8:46:58:73:BC:38:1D:FB:6A:69:8F:8A:E9:CE:F6:98:8D
X509v3 Authority Key Identifier:
keyid:3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.157.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e3:d4:00:8d:06:5c:be:fe:d7:0e:56:a3:3c:a3:cd:50:6f:
b0:7e:d9:ce:32:c2:7d:2e:32:9d:01:92:63:a9:73:cd:b3:1b:
e4:bd:4a:7e:4b:97:05:34:a3:bc:43:10:ad:86:cb:83:cd:cf:
95:7b:20:b3:20:1c:c2:40:1f:24:23:0b:4f:1a:e3:8d:53:61:
24:a7:13:7c:7b:8c:15:9c:00:19:9f:60:b3:37:e0:bb:88:20:
67:0f:bd:ae:ff:5a:c7:e2:32:ad:19:4d:4b:e4:9f:c4:52:fa:
74:dc:ee:34:19:3c:a0:a2:31:46:37:de:03:9b:98:25:04:da:
4e:b8:d5:32:3f:40:52:03:c4:2d:fe:c4:69:d6:8d:0b:0f:c5:
85:55:cc:40:1f:64:0e:b1:2c:d3:48:d5:1d:18:a9:66:fe:23:
4a:28:a7:d4:6e:86:01:5f:b4:c4:b4:94:1f:47:74:1d:c0:2c:
ef:ea:f7:b1:40:7a:25:6d:1c:c8:33:f8:90:02:25:cc:f4:14:
1a:aa:5f:08:c9:fa:c6:e0:d4:47:bf:13:36:f1:06:19:ef:df:
45:89:1d:bd:8a:57:06:60:31:97:7b:ae:dd:34:69:5f:c5:fa:
8d:83:3d:54:18:6d:05:bd:82:7a:06:d9:09:43:c9:e6:bc:58:
c6:83:b0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:19 2026 by rpki-client