
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa
File: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (raw, json)
Hash identifier: ba9T7QeA28DMOyzLlfoljNenw5738a58LQmu3hf+TMU=
Subject key identifier: C3:E8:D5:7A:89:0C:5D:31:B8:84:F7:13:15:47:08:F6:A2:F1:38:04
Certificate issuer: /CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3
Certificate serial: 08665C7C7C95C7D81708BF547C93D159BBF280E4
Authority key identifier: 2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa
Signing time: Sun 03 May 2026 03:07:06 +0000
ROA not before: Sun 03 May 2026 03:02:06 +0000
ROA not after: Sun 02 May 2027 03:07:06 +0000
asID: 149318
IP address blocks: 103.178.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl
rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:66:5c:7c:7c:95:c7:d8:17:08:bf:54:7c:93:d1:59:bb:f2:80:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3
Validity
Not Before: May 3 03:02:06 2026 GMT
Not After : May 2 03:07:06 2027 GMT
Subject: CN=C3E8D57A890C5D31B884F713154708F6A2F13804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:bc:82:a5:a7:67:39:d8:bc:45:4f:c7:f0:
aa:72:ef:74:98:96:da:5b:76:1e:c1:62:bc:8a:98:
6b:70:4d:e3:a1:55:55:c5:a9:98:9a:ff:40:59:d6:
6d:1d:6a:54:87:c8:ba:bd:ea:48:93:24:9f:99:3a:
ac:9d:13:9e:16:0d:8c:5f:80:55:a5:f7:a9:d9:56:
bc:73:b2:41:7a:c9:2f:4f:ee:cb:cb:ea:35:f7:87:
c1:1c:5a:7b:aa:22:90:95:aa:5a:13:ec:f6:19:3b:
94:dc:97:8b:5d:e7:53:29:55:5b:c9:a5:8c:b1:16:
ce:f0:7f:18:5c:7d:3e:9c:d5:8a:b1:14:c8:be:77:
12:8a:f2:aa:82:77:30:ad:4c:3a:4c:df:fa:9b:dc:
85:f5:02:7b:21:b0:82:5e:fa:80:f9:54:37:fe:22:
e0:9a:90:5e:99:9f:1b:d0:f5:96:d9:46:dd:4c:99:
aa:67:44:f9:c2:57:54:ad:2e:57:b5:ca:08:f9:94:
00:7a:fe:9e:90:3d:77:97:a7:f0:3f:91:c4:c1:bd:
d7:c3:2f:8e:fa:64:bb:c8:aa:08:09:81:a6:7b:26:
a6:1b:b3:f8:f7:0a:5a:98:84:74:b1:9a:f9:58:79:
0c:9f:d8:48:2f:71:0c:c8:84:de:f6:9e:6e:bc:20:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E8:D5:7A:89:0C:5D:31:B8:84:F7:13:15:47:08:F6:A2:F1:38:04
X509v3 Authority Key Identifier:
keyid:2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.85.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bf:f6:82:19:fd:a0:34:fb:c4:29:76:28:77:78:2d:94:d1:
94:1e:d3:61:f2:15:d5:f5:03:70:81:c3:d4:67:3a:3d:72:c1:
b6:71:41:64:f8:bd:16:e4:49:93:fe:87:47:dc:10:3f:d6:c2:
db:b8:4c:88:e0:4d:23:1d:b1:70:1d:fb:29:97:35:07:34:72:
45:f9:37:cd:8f:60:4e:bf:f5:ee:1f:0d:f6:23:b5:ae:a8:ba:
ef:0a:31:b4:41:12:ae:83:20:9f:ec:5d:14:ad:5a:0e:69:6d:
0c:7a:7c:78:d8:07:bd:e4:f7:2b:92:18:aa:a2:2f:ca:06:96:
a3:18:63:de:b6:55:18:f4:58:2e:6e:32:60:bf:3e:1b:b2:53:
2c:a9:87:25:33:1e:55:6a:a5:c3:00:31:28:9f:99:60:0e:17:
f7:04:a0:3d:41:2f:6e:62:5f:a2:76:ed:ee:b8:51:f5:63:42:
61:71:d8:44:fc:4a:38:36:58:1e:c0:29:69:d1:7d:cd:f9:ca:
89:ea:85:e0:9e:c0:12:45:33:76:44:bb:c9:24:24:3b:f5:33:
e6:54:61:fb:c9:d4:1d:e2:f7:0e:b2:32:81:dc:9e:6b:c6:29:
87:27:bb:7a:b7:5e:ee:9e:64:3d:1e:fc:57:96:b7:a4:03:65:
40:7d:71:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:48 2026 by rpki-client