
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa
File: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (raw, json)
Hash identifier: zvVBOICq5pKD2ig8o0wI4pJml9B5+zqomhS6S0vqWcI=
Subject key identifier: 7E:CF:2E:D4:4B:B3:12:68:21:BC:17:FD:23:D9:21:2C:B0:A2:94:4B
Certificate issuer: /CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007
Certificate serial: 6DF4489EBA073A57693032DAF7AE4FFCA65871C0
Authority key identifier: E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa
Signing time: Sun 03 May 2026 03:15:33 +0000
ROA not before: Sun 03 May 2026 03:10:33 +0000
ROA not after: Sun 02 May 2027 03:15:33 +0000
asID: 140389
IP address blocks: 103.153.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl
rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f4:48:9e:ba:07:3a:57:69:30:32:da:f7:ae:4f:fc:a6:58:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007
Validity
Not Before: May 3 03:10:33 2026 GMT
Not After : May 2 03:15:33 2027 GMT
Subject: CN=7ECF2ED44BB3126821BC17FD23D9212CB0A2944B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:01:2a:a5:30:1d:15:23:bf:25:75:ea:f7:0f:
6f:ad:1f:9d:a8:56:84:02:be:ea:5e:0f:c0:2d:4b:
41:ec:15:d9:f6:9f:fb:a5:f3:76:d3:9a:59:df:c1:
78:46:ef:ac:c5:82:6f:a4:db:de:79:9b:24:11:95:
cc:50:5a:b2:5f:1b:b0:78:0a:92:4a:a8:71:1d:5a:
26:47:7c:43:13:45:5c:4d:e1:b0:24:e0:59:43:cb:
0a:3f:fb:a7:81:fe:fc:15:4d:f4:a2:4e:f4:ac:8a:
c0:9f:c5:08:b0:db:da:28:c5:06:84:c9:fd:23:5d:
c3:11:97:f7:07:de:51:ee:17:ab:89:ff:d1:85:bd:
99:82:91:bb:3e:b5:e9:22:8c:de:10:3c:d6:1c:cb:
97:40:62:6e:2e:03:e8:4c:c8:c7:55:a3:cc:87:dc:
c3:56:94:86:09:b8:dc:79:e7:eb:ee:16:8d:06:3c:
9c:74:47:e7:a6:e9:d2:b3:4a:55:69:cf:40:43:b4:
da:e9:a2:0d:b4:c0:11:00:3f:95:fb:26:b1:54:a5:
64:ba:00:7b:60:5d:0f:bf:f2:6a:6c:e8:f9:4d:c0:
cb:59:bf:b0:4a:06:eb:96:a7:b1:7e:d9:e3:f6:4e:
02:22:9f:78:c5:05:60:5e:0d:a1:7b:14:c6:13:3e:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CF:2E:D4:4B:B3:12:68:21:BC:17:FD:23:D9:21:2C:B0:A2:94:4B
X509v3 Authority Key Identifier:
keyid:E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.2.0/23
Signature Algorithm: sha256WithRSAEncryption
88:fd:6c:0d:58:b7:b3:91:77:44:f9:2b:36:0b:44:4c:ec:1d:
5e:1b:34:2e:87:f7:97:cb:e5:90:39:77:02:42:ba:53:8e:a9:
9b:46:02:99:99:f6:2c:d9:c3:49:70:a7:93:6a:e4:67:3f:7c:
0d:76:8f:51:3a:5d:a4:cc:71:70:67:45:83:31:3f:b1:82:eb:
69:27:44:b8:a7:d3:73:62:2f:a8:86:11:49:38:1a:21:17:64:
9a:c3:76:d0:42:f8:7e:bb:31:f0:a8:6b:77:fb:ab:cc:cf:52:
da:95:b8:92:6e:3d:3a:13:7d:f9:32:53:d2:eb:f0:b9:9a:1b:
e4:e1:9d:22:2a:32:b9:ca:a7:2b:24:49:49:23:6d:10:df:82:
19:b9:1a:03:b1:33:81:4c:a0:42:b4:c8:d4:98:25:d9:56:95:
1b:19:23:a4:6d:c5:b9:89:0c:aa:cf:35:03:b1:d0:22:fa:84:
70:9f:5f:d7:49:fe:d1:db:9e:43:20:53:b6:b9:7f:35:2d:10:
81:63:22:4d:d1:0c:8a:e3:5d:78:5c:0d:8b:39:c2:28:90:6d:
17:8d:33:46:c9:dc:ed:b5:03:fd:4b:f2:8f:45:e2:19:30:8c:
55:93:2c:b6:4d:09:57:f9:5c:55:aa:19:3f:7d:50:6e:88:ea:
36:c2:92:59
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbfRInroHOldpMDLa965P/KZYccAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBERTIyRjU3N0I0MjQ0RUNCMzMyQjg3QjU4MzFENEFE
N0RBODAwNzAeFw0yNjA1MDMwMzEwMzNaFw0yNzA1MDIwMzE1MzNaMDMxMTAvBgNV
BAMTKDdFQ0YyRUQ0NEJCMzEyNjgyMUJDMTdGRDIzRDkyMTJDQjBBMjk0NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3ASqlMB0VI78lder3D2+tH52o
VoQCvupeD8AtS0HsFdn2n/ul83bTmlnfwXhG76zFgm+k2955myQRlcxQWrJfG7B4
CpJKqHEdWiZHfEMTRVxN4bAk4FlDywo/+6eB/vwVTfSiTvSsisCfxQiw29ooxQaE
yf0jXcMRl/cH3lHuF6uJ/9GFvZmCkbs+tekijN4QPNYcy5dAYm4uA+hMyMdVo8yH
3MNWlIYJuNx55+vuFo0GPJx0R+em6dKzSlVpz0BDtNrpog20wBEAP5X7JrFUpWS6
AHtgXQ+/8mps6PlNwMtZv7BKBuuWp7F+2eP2TgIin3jFBWBeDaF7FMYTPoWJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUfs8u1EuzEmghvBf9I9khLLCilEswHwYDVR0j
BBgwFoAU4N4i9Xe0JE7LMyuHtYMdStfagAcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWJjMWFiNzEtOTFkMC00ZjBiLWJiMjktY2JiN2QzNWU3NGJhLzAvRTBERTIyRjU3
N0I0MjQ0RUNCMzMyQjg3QjU4MzFENEFEN0RBODAwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMERFMjJGNTc3QjQyNDRFQ0IzMzJCODdCNTgzMUQ0QUQ3REE4
MDA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ViYzFhYjcxLTkxZDAtNGYwYi1i
YjI5LWNiYjdkMzVlNzRiYS8wLzMxMzAzMzJlMzEzNTMzMmUzMjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzQzMDMzMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeZAjANBgkqhkiG
9w0BAQsFAAOCAQEAiP1sDVi3s5F3RPkrNgtETOwdXhs0Lof3l8vlkDl3AkK6U46p
m0YCmZn2LNnDSXCnk2rkZz98DXaPUTpdpMxxcGdFgzE/sYLraSdEuKfTc2IvqIYR
STgaIRdkmsN20EL4frsx8Khrd/urzM9S2pW4km49OhN9+TJT0uvwuZob5OGdIioy
ucqnKyRJSSNtEN+CGbkaA7EzgUygQrTI1Jgl2VaVGxkjpG3FuYkMqs81A7HQIvqE
cJ9f10n+0dueQyBTtrl/NS0QgWMiTdEMiuNdeFwNiznCKJBtF40zRsnc7bUD/Uvy
j0XiGTCMVZMstk0JV/lcVaoZP31QbojqNsKSWQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:59:41 2026 by rpki-client