
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa
File: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (raw, json)
Hash identifier: Y/EQKcpkANIA0psSjIaznqwzitz7bm3TFARBNjc3Kms=
Subject key identifier: F8:7F:F2:E9:54:12:C7:71:DA:54:EE:A7:82:2C:B7:2D:01:06:AB:2F
Certificate issuer: /CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A
Certificate serial: 77A9C9A6E232F20849D7DE324AF061D14FA8E9D0
Authority key identifier: D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa
Signing time: Sun 03 May 2026 02:55:02 +0000
ROA not before: Sun 03 May 2026 02:50:02 +0000
ROA not after: Sun 02 May 2027 02:55:02 +0000
asID: 149352
IP address blocks: 103.174.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl
rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a9:c9:a6:e2:32:f2:08:49:d7:de:32:4a:f0:61:d1:4f:a8:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A
Validity
Not Before: May 3 02:50:02 2026 GMT
Not After : May 2 02:55:02 2027 GMT
Subject: CN=F87FF2E95412C771DA54EEA7822CB72D0106AB2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:b3:be:af:13:68:6c:28:8d:f7:ad:f9:8a:
cd:0a:b3:ac:bc:aa:87:1a:e9:93:08:1e:ac:2e:c3:
95:18:47:5f:94:10:d7:0a:58:ae:19:13:11:e0:bf:
99:7c:e6:5e:48:87:17:b3:0f:71:91:2b:ff:76:8e:
ac:4c:98:b6:9b:33:fd:08:4e:56:f0:6b:fb:af:52:
b0:ce:b5:cc:d0:59:6e:60:b6:08:43:ad:ee:ee:ab:
bd:d1:78:12:f0:b8:ee:25:e3:a2:c7:62:28:82:59:
6e:6a:88:a3:6e:d9:bd:3c:c3:52:00:11:ac:35:d1:
25:b1:7e:97:0b:ce:d4:07:04:c2:4e:50:93:c4:75:
78:00:94:a8:e4:0e:2d:94:aa:3f:6f:b1:ea:cf:8b:
d2:e5:83:e7:9b:d9:e4:6e:52:84:4f:38:48:c6:68:
61:f8:2f:5f:e8:cd:6b:b5:22:49:a5:61:a4:55:f7:
32:be:55:77:c9:f6:59:e7:f2:68:71:94:5d:55:05:
dd:82:71:f8:10:2d:2e:1a:81:ca:ab:d8:af:28:4e:
70:b0:de:88:f5:6f:88:00:cb:dc:22:f0:1e:8a:33:
b9:73:3f:3a:12:a2:a1:1e:fc:22:0c:0d:8e:8e:e6:
cf:c8:c6:1b:1c:cd:b7:a6:42:db:fd:21:41:ed:69:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7F:F2:E9:54:12:C7:71:DA:54:EE:A7:82:2C:B7:2D:01:06:AB:2F
X509v3 Authority Key Identifier:
keyid:D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.174.14.0/23
Signature Algorithm: sha256WithRSAEncryption
10:64:98:f8:31:61:a3:ce:2c:38:fa:59:7c:ec:30:12:52:d1:
41:61:43:1c:52:88:b6:5f:a2:ff:cb:b8:de:b2:8c:c2:49:2b:
38:d7:bd:f4:e7:b2:d7:bc:dd:ab:ef:df:41:c6:e0:b6:12:ca:
b3:c1:e7:fd:28:5c:41:a2:c9:bd:20:a1:85:0f:82:8a:62:c1:
62:51:a7:f5:f1:2a:3c:ad:66:57:64:bd:a2:a1:af:de:43:4a:
38:0d:56:3e:23:98:e9:4c:ae:07:7b:02:cc:95:78:da:61:9b:
9b:27:b4:76:d3:e2:40:58:34:e4:df:70:f0:da:33:98:b2:48:
a7:db:d1:62:55:37:fd:3b:d4:5d:91:11:76:54:30:26:bc:71:
30:40:f5:4d:21:82:96:0e:a7:7f:93:1a:27:3d:a5:bc:ed:77:
23:4c:a5:fb:96:a3:f2:d1:c8:04:68:c4:42:89:3f:5c:d4:67:
cd:7a:44:e8:b8:ba:ee:9e:43:8a:df:31:8d:97:37:0e:ae:0e:
c8:52:67:fe:b4:f6:75:ea:0e:f1:53:3c:e5:4f:20:b7:f0:1b:
39:ef:3d:da:6d:dd:46:ba:72:b0:e7:35:78:76:78:ad:40:ee:
9f:d8:e3:7a:ae:ae:7c:84:43:53:c1:37:b6:1d:3d:a3:80:83:
b0:ba:99:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:02 2026 by rpki-client