
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa
File: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier: Bsl+Ml+xMEPfhqeDDIHDIbx421tKnpSF2bvwWW1cG4s=
Subject key identifier: 56:0F:FC:F5:BE:9A:AF:8C:97:3F:25:E4:E3:EA:EB:04:56:E8:76:A8
Certificate issuer: /CN=181AE15A381C4B158527A37B5B320F08B7BB589F
Certificate serial: 445175CD0A4EF17EBEF7186D09A1C25A8F78DEE2
Authority key identifier: 18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa
Signing time: Sun 03 May 2026 02:59:25 +0000
ROA not before: Sun 03 May 2026 02:54:25 +0000
ROA not after: Sun 02 May 2027 02:59:25 +0000
asID: 138131
IP address blocks: 103.164.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.crl
rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:51:75:cd:0a:4e:f1:7e:be:f7:18:6d:09:a1:c2:5a:8f:78:de:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181AE15A381C4B158527A37B5B320F08B7BB589F
Validity
Not Before: May 3 02:54:25 2026 GMT
Not After : May 2 02:59:25 2027 GMT
Subject: CN=560FFCF5BE9AAF8C973F25E4E3EAEB0456E876A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:f8:64:52:06:54:8e:38:95:14:f7:bb:85:
b7:8e:d4:68:a7:3e:95:44:3e:3c:fa:81:57:ec:ee:
5d:72:f8:9f:05:7e:fd:35:55:47:e9:f8:de:9e:26:
9b:da:e4:91:b7:b9:7e:c1:a8:ca:68:f4:ab:1a:dc:
cf:a6:de:2d:e5:18:67:3f:22:16:0e:7e:e6:7e:29:
e1:99:c1:08:f8:be:62:76:83:09:4e:14:19:e9:17:
d0:11:65:d3:4b:dc:7f:55:ab:53:80:57:9a:2b:68:
5d:73:09:cd:a4:b9:19:f6:a9:90:e6:b9:a7:c9:1c:
ca:94:c5:dc:38:78:f6:e1:c6:fa:54:56:01:93:95:
86:f0:77:bd:35:f7:b3:b4:eb:26:0e:8f:83:e3:56:
8a:e3:84:e8:ad:06:3c:1a:5a:ac:61:13:13:2f:ce:
24:9b:37:47:0e:e6:95:af:c8:5c:95:5d:44:51:88:
d8:b4:5d:f4:d0:91:c7:d6:27:4b:1f:b8:d4:4b:6d:
76:f4:ce:61:ff:0d:0c:bb:48:68:a3:69:80:8b:d3:
8d:e9:31:dd:e2:51:1b:78:24:a2:ea:22:08:77:77:
bb:b5:59:65:ac:cc:70:80:19:03:30:49:d4:58:7f:
54:e9:fa:7c:a0:98:86:30:9d:45:d9:29:0d:90:c2:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:FC:F5:BE:9A:AF:8C:97:3F:25:E4:E3:EA:EB:04:56:E8:76:A8
X509v3 Authority Key Identifier:
keyid:18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.173.0/24
Signature Algorithm: sha256WithRSAEncryption
25:86:12:12:36:2d:5b:a5:ed:93:0a:c9:60:1f:6e:3f:ad:5b:
4f:10:75:1a:f0:67:ba:35:f8:1c:5f:89:b2:ac:2e:12:b8:3c:
86:ae:24:e4:9f:72:05:d1:23:50:c7:9b:bd:2a:62:62:f0:2c:
b6:8e:e9:6e:db:bb:78:9e:36:2e:a5:de:41:db:2b:66:df:3e:
3d:80:2b:b8:e0:29:c3:1b:23:1e:f6:ca:0a:69:0f:33:83:51:
67:5f:26:fa:fa:34:89:39:b6:0b:6b:81:65:1f:56:2b:6b:66:
73:55:8f:da:9f:4d:46:eb:fe:65:6e:60:69:5d:42:8e:04:c9:
e4:a9:18:94:e7:f7:d4:c6:6f:34:91:f4:a0:35:3a:b6:0e:87:
d8:ad:72:6d:49:81:c9:cf:87:ad:a3:9b:3f:d8:2a:4c:79:b1:
6e:d7:35:32:eb:59:73:da:01:28:a5:3b:74:86:b4:0f:f4:dc:
5a:d1:88:b1:6e:78:ad:94:f7:87:b0:be:a9:87:f6:51:b7:f4:
a6:30:bc:39:1d:aa:91:ab:d2:83:54:cc:78:f9:6c:43:66:a0:
30:33:7e:4e:ba:17:5d:25:32:6b:8d:51:9d:a6:d4:50:f2:02:
fc:6a:fa:c5:ff:b1:96:ac:81:51:ac:b9:73:17:2c:7a:b2:49:
ff:06:31:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:33 2026 by rpki-client