
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa
File: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (raw, json)
Hash identifier: 7ETsMsldfe5UrsfaSRsi4x54y8+ydy+yp/J35qzk+sc=
Subject key identifier: A5:EC:A0:01:54:96:D7:A5:F1:3D:70:12:B2:40:5C:84:6F:19:B1:4F
Certificate issuer: /CN=357778A786AA1E6854673B0A6AAAA40B85254E94
Certificate serial: 68C26811926700DE514B4BE27B9065027B6153CD
Authority key identifier: 35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa
Signing time: Sun 03 May 2026 02:44:53 +0000
ROA not before: Sun 03 May 2026 02:39:53 +0000
ROA not after: Sun 02 May 2027 02:44:53 +0000
asID: 147101
IP address blocks: 103.174.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl
rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c2:68:11:92:67:00:de:51:4b:4b:e2:7b:90:65:02:7b:61:53:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357778A786AA1E6854673B0A6AAAA40B85254E94
Validity
Not Before: May 3 02:39:53 2026 GMT
Not After : May 2 02:44:53 2027 GMT
Subject: CN=A5ECA0015496D7A5F13D7012B2405C846F19B14F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:1e:6d:1a:ad:6e:97:95:d8:88:a1:5f:26:
8f:0f:39:c0:be:c8:2b:57:81:99:46:83:81:87:9d:
33:a7:57:6a:60:be:e4:5b:de:9b:56:77:9e:a1:ea:
c6:69:14:82:65:62:d1:a0:45:71:e8:fb:4d:80:c7:
dc:f8:46:14:71:53:fc:26:0c:08:a7:a6:d1:da:c5:
0f:aa:b9:74:f4:36:c0:b2:f8:e6:d9:e5:81:31:69:
00:28:75:6a:71:55:5d:1b:86:ae:50:d8:fe:42:d8:
eb:07:40:74:8a:31:84:5f:83:98:4c:52:4c:7a:e6:
57:dc:af:99:90:8e:9a:bb:0a:ef:6f:78:30:37:e2:
36:38:7f:8d:03:9b:ff:bc:15:17:b0:05:5a:4a:c9:
20:e4:d0:c5:e3:b9:a3:36:e3:d1:0a:51:e9:c1:03:
93:88:f3:1f:fe:b3:f3:30:a9:3d:a2:c4:bb:35:3e:
f5:c2:5f:88:cb:28:96:40:73:7c:59:12:79:ca:38:
50:75:28:1f:17:dc:06:95:27:e8:6b:c8:db:3b:15:
da:c0:cb:cf:8e:1d:7f:a4:22:d7:a6:be:49:cb:82:
58:41:4a:7c:ec:3b:a7:8f:7b:54:dc:cd:38:2c:bb:
b2:46:79:17:1d:15:65:65:ea:0d:61:02:81:78:f4:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EC:A0:01:54:96:D7:A5:F1:3D:70:12:B2:40:5C:84:6F:19:B1:4F
X509v3 Authority Key Identifier:
keyid:35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:76:89:fa:4b:20:15:2b:0b:95:29:ad:9c:62:1e:c6:00:c1:
ad:11:62:08:1e:88:96:15:49:e9:5a:75:a2:3e:80:1a:23:a8:
e0:7f:68:dd:b5:29:b3:4d:71:94:93:c3:e8:1e:ea:b6:cf:29:
70:71:fa:0e:22:e5:4a:73:79:81:78:5b:dc:47:b5:c0:91:e7:
fe:27:27:17:4c:26:94:c8:b1:f5:9f:05:9b:a9:64:d2:9c:2d:
ec:2e:e3:2f:7d:db:8b:f8:4a:16:05:ed:61:c4:ef:d8:e5:c3:
9c:0e:a6:75:a1:51:27:d7:61:ec:40:a2:18:32:06:a3:0d:48:
1c:5b:53:4c:73:4e:97:5f:27:c8:cf:7c:83:7f:2e:16:b0:1a:
84:5c:dc:b9:37:21:01:77:ce:c4:88:bf:4a:cf:22:e7:ac:49:
05:11:31:1b:e9:90:a2:1f:4a:13:e6:07:93:ae:43:3f:9c:9f:
04:69:ac:14:19:46:0c:cb:14:45:68:74:67:7d:33:5c:0a:9a:
df:79:50:cc:41:4d:1b:1c:30:d7:c0:4a:fb:0f:f2:e7:8e:69:
1e:c0:d5:d6:15:ab:90:ab:03:54:4b:8c:c1:e3:15:f4:09:60:
ea:f1:a6:ff:6d:e7:ba:29:3c:0a:b3:0b:ea:e6:cb:fd:7d:aa:
c5:46:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:11 2026 by rpki-client