
$ rpki-client -vvf rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa
File: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (raw, json)
Hash identifier: dkL3RYxUqFK92RNM9WTwGTBFmcpnH2zcxM4bqSEuW3M=
Subject key identifier: 4D:3A:A4:3B:CD:9A:35:7C:4A:6E:0A:FC:55:E3:4D:DB:FA:CE:D4:45
Certificate issuer: /CN=7F6A7DA96EFF248F18836BABFDA129185606504D
Certificate serial: 7DC53B8CEB15E298495C9CD41F8E4E850CC7A22C
Authority key identifier: 7F:6A:7D:A9:6E:FF:24:8F:18:83:6B:AB:FD:A1:29:18:56:06:50:4D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F6A7DA96EFF248F18836BABFDA129185606504D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa
Signing time: Sun 03 May 2026 02:53:25 +0000
ROA not before: Sun 03 May 2026 02:48:25 +0000
ROA not after: Sun 02 May 2027 02:53:25 +0000
asID: 149328
IP address blocks: 103.177.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.crl
rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F6A7DA96EFF248F18836BABFDA129185606504D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c5:3b:8c:eb:15:e2:98:49:5c:9c:d4:1f:8e:4e:85:0c:c7:a2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F6A7DA96EFF248F18836BABFDA129185606504D
Validity
Not Before: May 3 02:48:25 2026 GMT
Not After : May 2 02:53:25 2027 GMT
Subject: CN=4D3AA43BCD9A357C4A6E0AFC55E34DDBFACED445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:d4:0a:b3:59:f9:e8:af:f9:bb:33:3e:b7:
87:43:6a:48:b7:50:85:1d:3c:c7:71:66:79:b6:81:
fa:e6:c4:fa:82:3b:0d:b3:18:fd:49:ea:5c:56:06:
c4:ce:5f:3d:ee:a7:66:f6:46:d1:96:c8:fd:6a:e5:
bb:ea:9d:64:88:8d:b5:fc:58:d1:94:f1:a1:e2:93:
bb:b9:2d:20:4c:d4:0d:42:29:ae:36:85:b5:f7:38:
0d:e3:ad:3d:88:c4:0e:32:8b:0e:9d:d4:30:30:7c:
8b:e1:dd:d6:ea:2f:86:8e:6e:7e:3a:f3:f4:4c:66:
89:30:9b:cd:49:24:70:75:38:05:18:af:20:53:8b:
ad:b9:dc:a2:7f:3d:19:7e:65:1a:71:5b:6a:0a:e8:
e6:15:e9:48:03:b4:99:fa:9f:82:eb:93:9e:9f:fb:
1d:b0:25:22:57:3b:57:f3:c0:5f:82:d0:e8:2a:83:
ef:3e:2e:2a:f1:7a:a3:55:2b:10:8b:8b:8c:ee:a0:
d9:8d:37:13:ee:5a:b8:bb:4d:f3:c8:28:80:ce:db:
fe:77:7b:f2:5b:61:f0:4d:4e:fd:0e:67:13:e6:03:
4e:58:a1:03:37:03:d6:0c:61:25:e1:cc:53:28:5a:
49:55:bc:8f:ba:21:62:b8:0d:56:3c:d2:3b:23:ee:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3A:A4:3B:CD:9A:35:7C:4A:6E:0A:FC:55:E3:4D:DB:FA:CE:D4:45
X509v3 Authority Key Identifier:
keyid:7F:6A:7D:A9:6E:FF:24:8F:18:83:6B:AB:FD:A1:29:18:56:06:50:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F6A7DA96EFF248F18836BABFDA129185606504D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:76:c6:8f:29:09:b1:fa:01:6f:6a:2f:53:4c:87:9d:d8:f9:
67:39:3b:6e:f1:b1:ae:3d:12:82:8c:0f:3e:f0:26:3b:b7:31:
d8:75:37:53:9b:69:11:91:77:17:b6:4d:c9:9c:cc:f5:65:b8:
82:9f:84:96:c0:5a:db:85:9d:49:47:2f:92:77:7d:8e:a5:20:
03:28:82:c2:1a:c0:34:07:77:ce:82:44:5d:df:63:95:b0:b7:
b9:79:ff:52:0c:29:e4:bc:ca:5c:0f:8a:36:df:87:5a:5f:18:
c5:c3:3f:07:bc:12:80:56:4d:31:ba:52:2c:b3:ad:49:79:98:
b0:71:9f:10:d5:54:ce:05:7e:b4:a1:8c:d9:85:cd:16:be:f3:
5b:0f:de:a2:eb:b3:7a:03:c7:e9:d4:d5:7f:e3:0a:1c:07:d9:
29:a0:b9:db:84:76:84:dd:03:fc:1c:67:b2:ff:c8:14:0d:c4:
f4:49:d1:1a:06:63:7c:28:14:a1:38:48:85:10:3c:f1:45:c9:
22:03:76:41:55:91:5d:ea:c4:da:08:e2:a7:70:80:9f:db:d5:
19:66:14:81:e5:0a:dd:8d:80:d2:4e:5e:0b:07:49:6f:2c:4b:
f0:a1:77:43:af:41:26:a6:50:26:8f:11:e6:a8:ee:b0:78:6e:
53:a9:b1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:13 2026 by rpki-client