
$ rpki-client -vvf rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233342e302f32342d3234203d3e203634333032.roa
File: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (raw, json)
Hash identifier: eJ1BYbsJGJ2bGSK9jVV+Gd+vXCEbHNqHyQWyZRyuJo0=
Subject key identifier: 5A:43:81:9B:4F:F3:D1:57:3C:DF:13:09:F0:B2:27:C2:1A:22:4C:BC
Certificate issuer: /CN=657097DED993749F454B2CB2980019AC9335E3AD
Certificate serial: 7E382A185AD37C0722860EADA3D716BE93FD0FA6
Authority key identifier: 65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233342e302f32342d3234203d3e203634333032.roa
Signing time: Sun 03 May 2026 03:16:03 +0000
ROA not before: Sun 03 May 2026 03:11:03 +0000
ROA not after: Sun 02 May 2027 03:16:03 +0000
asID: 64302
IP address blocks: 103.78.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl
rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:38:2a:18:5a:d3:7c:07:22:86:0e:ad:a3:d7:16:be:93:fd:0f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657097DED993749F454B2CB2980019AC9335E3AD
Validity
Not Before: May 3 03:11:03 2026 GMT
Not After : May 2 03:16:03 2027 GMT
Subject: CN=5A43819B4FF3D1573CDF1309F0B227C21A224CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:69:65:57:c2:94:72:71:00:52:cf:f2:fc:
22:7c:bf:83:52:48:82:80:9f:96:52:44:cf:df:11:
f0:55:a0:45:a2:21:d7:6d:d4:ed:40:e0:26:41:8e:
c9:82:7b:5b:36:88:89:8c:3d:cf:03:46:d7:f7:3b:
37:60:41:0f:e3:a6:04:58:33:d8:6c:23:c9:b9:ab:
8f:d2:00:d6:a7:8b:36:1e:ff:92:96:20:f4:3b:bd:
aa:d2:68:9b:11:24:2d:44:49:0a:b2:78:b9:dd:df:
43:04:ce:49:0c:0b:f9:c9:c5:5d:14:ac:ec:00:ca:
0c:05:33:3f:ac:70:38:99:b3:2a:4a:01:1d:9c:a6:
9d:9a:a2:7e:ee:ac:87:66:63:1a:3f:24:24:61:66:
df:8d:e2:92:0c:42:e7:88:3f:32:a6:25:b7:6a:8b:
be:6e:46:2a:24:e4:19:bf:01:96:7e:de:48:b0:83:
ae:67:c6:27:aa:62:02:b4:56:6a:fa:fc:ea:3d:7b:
3f:fb:ab:7f:5d:92:6c:db:ce:3b:42:73:06:af:55:
6e:fd:71:38:70:95:c1:56:e1:27:29:80:8a:30:09:
be:1b:f6:6a:97:49:a3:e7:94:a5:ed:ff:1b:11:fb:
5c:ad:b3:71:26:fe:e5:6a:6e:4d:25:fa:f0:1a:1d:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:43:81:9B:4F:F3:D1:57:3C:DF:13:09:F0:B2:27:C2:1A:22:4C:BC
X509v3 Authority Key Identifier:
keyid:65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233342e302f32342d3234203d3e203634333032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.78.234.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:2c:44:4c:ad:73:a2:a1:8c:6d:b3:68:84:49:b2:d8:20:26:
b7:c9:d1:50:68:f4:b0:90:84:d7:07:1d:4d:b3:3c:59:15:ca:
49:33:7e:5b:35:62:4c:95:dd:58:28:35:a3:f7:ef:b6:e2:da:
b8:33:2a:10:87:68:ce:14:50:88:41:9c:b8:3a:f4:b8:84:7b:
92:6d:f0:37:cb:f2:89:86:9e:55:73:b3:89:ca:85:65:f9:e2:
c3:6b:5c:2f:e2:dd:25:85:aa:17:94:fb:80:04:64:d3:05:96:
56:bd:f4:78:1f:42:51:10:ea:bf:30:e9:9a:a3:c3:75:1f:09:
5f:07:b8:ba:7b:03:04:f5:0c:aa:fb:82:b5:71:7f:cd:ff:e9:
c5:dd:1c:32:6d:be:4a:24:4c:65:61:87:5b:aa:5c:f3:ba:35:
2b:11:48:f7:40:b5:05:4e:f4:4b:e6:4f:e8:15:52:64:46:b2:
d1:18:e8:f6:38:81:1a:4f:76:e9:19:f6:ff:e0:f2:43:ce:23:
53:66:e3:e8:39:bc:ee:55:94:8f:f8:97:3c:51:23:63:85:3a:
ec:f2:4d:8e:52:ee:94:f8:d5:bc:f7:1b:12:bd:99:22:30:f1:
6f:33:5d:f1:ef:51:38:b2:67:5a:93:23:ff:61:e9:2b:eb:1c:
81:f8:2e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:47 2026 by rpki-client