
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa
File: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (raw, json)
Hash identifier: SJt1SBaXEP9+A3/U6mnd55r9+cQvaamR3U/aBvUPC3E=
Subject key identifier: 76:D4:85:B4:A5:16:F2:6C:CD:12:F1:4F:22:85:FE:63:41:74:9C:9B
Certificate issuer: /CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A
Certificate serial: 296056B881923A14D9793AF04FD2C50F9CBA70C5
Authority key identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa
Signing time: Sun 03 May 2026 03:01:59 +0000
ROA not before: Sun 03 May 2026 02:56:59 +0000
ROA not after: Sun 02 May 2027 03:01:59 +0000
asID: 142374
IP address blocks: 103.171.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl
rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:60:56:b8:81:92:3a:14:d9:79:3a:f0:4f:d2:c5:0f:9c:ba:70:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A
Validity
Not Before: May 3 02:56:59 2026 GMT
Not After : May 2 03:01:59 2027 GMT
Subject: CN=76D485B4A516F26CCD12F14F2285FE6341749C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:67:a5:bd:28:85:b0:23:02:05:1a:08:77:
d0:99:55:28:fb:e1:65:09:2c:ec:7f:8d:3c:a5:88:
db:a9:6b:06:10:7d:68:b5:89:e1:ff:2b:68:d1:38:
b5:91:fe:c6:f5:71:b3:71:08:f0:5e:75:7c:32:ae:
9e:d9:a8:d9:9b:97:57:c7:eb:81:c2:d8:ab:7b:6b:
a7:44:d6:af:5b:3d:32:44:f2:68:6b:30:04:e0:33:
87:ad:64:b8:71:6d:1c:99:f2:33:ee:c8:f8:71:45:
74:bd:2a:d1:b8:4f:eb:d2:e1:06:df:ec:ae:aa:ab:
5e:ae:a0:3a:4c:5e:a9:5b:ab:6f:11:24:d9:2f:cf:
3d:ea:6c:ba:6a:2f:36:32:50:e6:2f:43:7b:c5:2d:
06:ee:2b:87:1e:8a:69:c7:41:94:d9:f6:3e:25:14:
13:b6:60:36:dd:b0:bb:4a:93:e9:85:cd:b1:7e:3e:
b5:95:e6:77:03:f7:c8:82:5f:7e:5e:b0:d2:ff:ca:
d4:5d:d6:1e:03:4a:dd:ca:19:25:85:3a:52:67:3d:
44:75:a0:41:37:3a:aa:bc:2d:0f:03:4f:99:c1:c2:
a4:89:fd:27:8c:2a:c7:3b:e4:eb:1e:14:7a:0a:5c:
69:da:99:ce:13:7d:4a:0c:3c:5a:8b:9d:30:b9:4c:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:85:B4:A5:16:F2:6C:CD:12:F1:4F:22:85:FE:63:41:74:9C:9B
X509v3 Authority Key Identifier:
keyid:DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f7:dc:8a:9b:09:08:0f:47:98:b5:63:88:f5:e7:c0:46:e1:
cb:8e:46:a5:5d:43:3c:bd:53:1e:8c:0c:3d:42:60:07:ae:2a:
70:88:f7:ae:3e:88:0e:e4:f3:1a:a4:23:6d:89:58:ed:fd:15:
5a:31:5f:c6:8a:af:af:2e:d1:7d:87:b6:19:43:92:ef:b9:1b:
3e:f8:52:e2:6a:1d:22:26:0e:bc:0a:b9:e4:6c:2c:2d:8b:f1:
14:db:6c:04:74:4b:b6:fa:20:d3:4e:34:89:63:5a:b8:5e:f1:
e3:d1:db:eb:6c:8d:be:86:3b:2d:5b:b8:21:df:a6:97:c8:67:
b4:b9:6c:c8:1e:0d:1f:a1:c5:8e:0c:2b:e4:36:e0:7b:da:ec:
44:20:fe:d7:fd:1f:75:98:5a:9e:d8:46:d5:a7:f9:65:b5:69:
22:91:27:e5:2a:33:d4:c5:15:16:1d:c0:27:de:87:5a:e5:d7:
0b:40:57:64:2d:3e:ff:dd:04:ab:0d:d5:48:b4:4a:57:82:dc:
f5:ba:04:17:a9:09:78:19:8a:fd:b3:08:54:e7:83:25:d0:57:
e1:e6:45:87:a3:20:c1:83:0f:eb:8c:24:9a:37:19:58:0e:32:
8c:e5:77:bc:7e:3e:3b:cc:64:8a:24:b4:57:27:fe:34:61:6c:
02:ef:32:c0
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUKWBWuIGSOhTZeTrwT9LFD5y6cMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU3Q0RFMUVBQjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRB
RUY4RkUyQTAeFw0yNjA1MDMwMjU2NTlaFw0yNzA1MDIwMzAxNTlaMDMxMTAvBgNV
BAMTKDc2RDQ4NUI0QTUxNkYyNkNDRDEyRjE0RjIyODVGRTYzNDE3NDlDOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlWelvSiFsCMCBRoId9CZVSj7
4WUJLOx/jTyliNupawYQfWi1ieH/K2jROLWR/sb1cbNxCPBedXwyrp7ZqNmbl1fH
64HC2Kt7a6dE1q9bPTJE8mhrMATgM4etZLhxbRyZ8jPuyPhxRXS9KtG4T+vS4Qbf
7K6qq16uoDpMXqlbq28RJNkvzz3qbLpqLzYyUOYvQ3vFLQbuK4ceimnHQZTZ9j4l
FBO2YDbdsLtKk+mFzbF+PrWV5ncD98iCX35esNL/ytRd1h4DSt3KGSWFOlJnPUR1
oEE3Oqq8LQ8DT5nBwqSJ/SeMKsc75OseFHoKXGnamc4TfUoMPFqLnTC5TJrJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUdtSFtKUW8mzNEvFPIoX+Y0F0nJswHwYDVR0j
BBgwFoAU3nzeHqubDvvoDgeHR+5g/a74/iowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yjg1NWY0NTAtZWI3Zi00YTI2LWE2YzQtZjk4MjdlZTBhNWI4LzAvREU3Q0RFMUVB
QjlCMEVGQkU4MEUwNzg3NDdFRTYwRkRBRUY4RkUyQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ERTdDREUxRUFCOUIwRUZCRTgwRTA3ODc0N0VFNjBGREFFRjhG
RTJBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I4NTVmNDUwLWViN2YtNGEyNi1h
NmM0LWY5ODI3ZWUwYTViOC8wLzMxMzAzMzJlMzEzNzMxMmUzMTM4MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM3MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnq7gwDQYJ
KoZIhvcNAQELBQADggEBAGz33IqbCQgPR5i1Y4j158BG4cuORqVdQzy9Ux6MDD1C
YAeuKnCI964+iA7k8xqkI22JWO39FVoxX8aKr68u0X2HthlDku+5Gz74UuJqHSIm
DrwKueRsLC2L8RTbbAR0S7b6INNONIljWrhe8ePR2+tsjb6GOy1buCHfppfIZ7S5
bMgeDR+hxY4MK+Q24Hva7EQg/tf9H3WYWp7YRtWn+WW1aSKRJ+UqM9TFFRYdwCfe
h1rl1wtAV2QtPv/dBKsN1Ui0SleC3PW6BBepCXgZiv2zCFTngyXQV+HmRYejIMGD
D+uMJJo3GVgOMozld7x+PjvMZIoktFcn/jRhbALvMsA=
-----END CERTIFICATE-----
Generated at Wed May 13 12:12:29 2026 by rpki-client