
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa
File: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (raw, json)
Hash identifier: KtDrnG9lvgnRMSX5R+jeLWfcRpbu+ptwzkE+z8AdY3o=
Subject key identifier: A2:C3:DC:DE:5D:36:9A:85:55:48:9F:36:C1:BF:FD:DB:45:6B:0E:F2
Certificate issuer: /CN=4958ACA345C7658A0DAF8E986F7577A772837161
Certificate serial: 427FACE6C4C6E8ACA679A4D89669B516878A4C92
Authority key identifier: 49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa
Signing time: Sun 03 May 2026 03:05:53 +0000
ROA not before: Sun 03 May 2026 03:00:53 +0000
ROA not after: Sun 02 May 2027 03:05:53 +0000
asID: 149335
IP address blocks: 103.179.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl
rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:7f:ac:e6:c4:c6:e8:ac:a6:79:a4:d8:96:69:b5:16:87:8a:4c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4958ACA345C7658A0DAF8E986F7577A772837161
Validity
Not Before: May 3 03:00:53 2026 GMT
Not After : May 2 03:05:53 2027 GMT
Subject: CN=A2C3DCDE5D369A8555489F36C1BFFDDB456B0EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:fd:30:9c:b6:3d:4e:cd:77:28:8a:59:5c:
e1:99:47:27:c2:1d:0e:7f:48:fe:4c:e6:16:2e:2d:
14:3d:ab:cf:85:7a:20:8d:7e:fb:d3:f4:e0:92:97:
e2:25:23:2f:1b:70:a1:4e:ef:d2:46:39:f9:59:f0:
8a:b3:06:d2:52:4a:a4:ef:75:3e:1e:ff:18:8a:ac:
36:b9:88:d2:8c:7b:2c:b9:cb:53:96:bc:07:34:0b:
d8:0f:c9:f4:b4:36:2d:f0:2a:37:81:16:b2:a0:3b:
57:30:14:ad:b6:5a:4e:46:f5:d5:28:be:14:27:25:
59:17:f3:63:1c:a3:54:72:e6:fb:07:80:81:f2:0a:
f3:12:71:07:e9:f8:96:9e:7f:3b:8e:1e:7c:36:ca:
ad:56:85:13:9d:97:8f:be:2e:64:fb:77:fa:22:50:
5a:61:ac:1d:a5:dd:f1:ca:47:96:49:2b:c6:21:93:
b9:21:26:41:7e:d9:0a:a6:08:52:5f:14:e5:b5:60:
68:ea:52:cb:ad:35:12:07:31:56:a4:24:6d:df:6b:
3e:7c:48:e7:18:79:57:ec:b3:40:f7:43:8d:f2:79:
5e:bd:39:b7:93:da:be:5a:90:bd:db:67:38:78:ca:
a0:34:60:5a:98:df:f8:1b:20:13:e3:6d:a2:7a:cf:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:DC:DE:5D:36:9A:85:55:48:9F:36:C1:BF:FD:DB:45:6B:0E:F2
X509v3 Authority Key Identifier:
keyid:49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.64.0/23
Signature Algorithm: sha256WithRSAEncryption
51:09:ed:be:76:fc:92:7e:d2:5c:1c:44:27:58:61:56:3d:48:
8e:29:9a:d4:78:e1:f9:5c:82:38:46:57:9b:1e:bd:f5:56:45:
2e:cb:5d:58:ff:f9:7a:29:d7:2c:1e:6d:8c:10:c9:15:b8:c6:
c2:a6:30:ac:f2:a1:4e:c7:05:d5:e7:e5:05:bd:68:e5:34:f8:
d3:0f:b0:a2:e8:63:54:49:8c:00:d2:86:dd:f2:16:63:59:e7:
ab:c9:8f:2e:a1:7a:c6:31:d5:50:52:05:e9:51:90:64:60:b4:
17:10:75:d2:89:ee:53:fa:7b:67:0c:ce:a8:97:77:65:7f:ac:
47:36:d4:0e:14:ba:28:d6:f8:77:cb:c7:71:da:1c:ad:8c:ef:
d0:2f:b6:97:5a:e9:08:87:1a:53:d7:49:56:3c:7a:86:47:ed:
87:ae:a1:c6:d3:10:d9:fd:ec:b3:1f:ce:11:c6:40:a3:6a:59:
b2:86:84:f9:80:08:10:f7:9a:bd:ed:6f:4e:26:d7:c8:ad:90:
cd:55:a0:79:41:28:23:d1:bf:f4:c8:5d:45:c8:13:e9:4c:62:
96:08:9e:45:dd:8a:e2:9f:e0:d7:3c:85:c3:25:92:82:77:e5:
00:13:81:ed:b2:28:a0:30:60:cb:0e:7c:f6:14:30:d4:89:a3:
74:01:7f:42
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQn+s5sTG6KymeaTYlmm1FoeKTJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk1OEFDQTM0NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3
MjgzNzE2MTAeFw0yNjA1MDMwMzAwNTNaFw0yNzA1MDIwMzA1NTNaMDMxMTAvBgNV
BAMTKEEyQzNEQ0RFNUQzNjlBODU1NTQ4OUYzNkMxQkZGRERCNDU2QjBFRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvif0wnLY9Ts13KIpZXOGZRyfC
HQ5/SP5M5hYuLRQ9q8+FeiCNfvvT9OCSl+IlIy8bcKFO79JGOflZ8IqzBtJSSqTv
dT4e/xiKrDa5iNKMeyy5y1OWvAc0C9gPyfS0Ni3wKjeBFrKgO1cwFK22Wk5G9dUo
vhQnJVkX82Mco1Ry5vsHgIHyCvMScQfp+JaefzuOHnw2yq1WhROdl4++LmT7d/oi
UFphrB2l3fHKR5ZJK8Yhk7khJkF+2QqmCFJfFOW1YGjqUsutNRIHMVakJG3faz58
SOcYeVfss0D3Q43yeV69ObeT2r5akL3bZzh4yqA0YFqY3/gbIBPjbaJ6zz8xAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUosPc3l02moVVSJ82wb/920VrDvIwHwYDVR0j
BBgwFoAUSViso0XHZYoNr46Yb3V3p3KDcWEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yzc3ZGUwMTMtOWI1Ni00OWZmLThiNzktMzY2N2EzNDVjYjhkLzAvNDk1OEFDQTM0
NUM3NjU4QTBEQUY4RTk4NkY3NTc3QTc3MjgzNzE2MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80OTU4QUNBMzQ1Qzc2NThBMERBRjhFOTg2Rjc1NzdBNzcyODM3
MTYxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M3N2RlMDEzLTliNTYtNDlmZi04
Yjc5LTM2NjdhMzQ1Y2I4ZC8wLzMxMzAzMzJlMzEzNzM5MmUzNjM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzMzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7NAMA0GCSqG
SIb3DQEBCwUAA4IBAQBRCe2+dvySftJcHEQnWGFWPUiOKZrUeOH5XII4RlebHr31
VkUuy11Y//l6KdcsHm2MEMkVuMbCpjCs8qFOxwXV5+UFvWjlNPjTD7Ci6GNUSYwA
0obd8hZjWeeryY8uoXrGMdVQUgXpUZBkYLQXEHXSie5T+ntnDM6ol3dlf6xHNtQO
FLoo1vh3y8dx2hytjO/QL7aXWukIhxpT10lWPHqGR+2HrqHG0xDZ/eyzH84RxkCj
almyhoT5gAgQ95q97W9OJtfIrZDNVaB5QSgj0b/0yF1FyBPpTGKWCJ5F3Yrin+DX
PIXDJZKCd+UAE4HtsiigMGDLDnz2FDDUiaN0AX9C
-----END CERTIFICATE-----
Generated at Wed May 13 04:51:25 2026 by rpki-client