
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa
File: 3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa (raw, json)
Hash identifier: sVStbcQT0Dg1mRwp+9cYAazoCqlBRysLCitqo3Go7nY=
Subject key identifier: 2B:78:CC:32:6D:23:19:73:03:42:0F:56:11:BA:20:A9:58:5F:CC:AE
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 49B5CFF893B41310B7E1D914197AC37F47D9A51D
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:12 +0000
ROA not before: Sun 03 May 2026 03:12:12 +0000
ROA not after: Sun 02 May 2027 03:17:12 +0000
asID: 9794
IP address blocks: 115.178.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b5:cf:f8:93:b4:13:10:b7:e1:d9:14:19:7a:c3:7f:47:d9:a5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:12 2026 GMT
Not After : May 2 03:17:12 2027 GMT
Subject: CN=2B78CC326D23197303420F5611BA20A9585FCCAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8c:b6:91:bb:f5:81:8d:57:a3:77:41:86:e4:
ea:d8:9f:12:de:5b:37:1f:cb:30:b6:d2:f7:09:15:
70:34:32:d3:2a:22:fe:3e:c1:33:6f:b5:01:54:71:
12:c6:e8:be:10:a3:0c:81:13:b7:76:d5:12:16:6d:
c6:08:13:0e:6e:cb:33:62:a2:43:35:5b:16:0e:d4:
d6:f7:17:9e:e6:cb:36:c6:46:ba:78:9a:da:4f:d9:
c9:2f:b6:5f:c1:8e:0a:83:ce:49:b8:da:78:b8:8c:
84:76:07:e2:9c:cb:7f:97:13:1b:5d:3a:9e:e1:5a:
df:07:fd:97:ea:33:85:38:be:30:c9:af:62:f0:e3:
8b:8e:aa:ce:74:4e:0a:21:6e:77:01:d2:fe:dd:c1:
1a:7c:bd:3d:ec:a4:19:a1:53:6c:3f:8f:3b:82:e3:
d1:22:11:ef:78:85:ff:1c:48:fa:6f:50:db:54:a9:
44:29:d2:cc:d4:52:09:84:42:f0:52:21:61:e3:1a:
2c:f3:28:48:f8:33:47:9e:48:43:af:bc:f2:4f:b3:
9e:7a:a8:52:0b:d9:7d:10:00:5e:14:53:fc:ef:b0:
72:25:a1:5d:a3:d2:db:58:a7:66:41:89:89:53:e0:
a4:52:09:4d:12:dd:3e:43:4d:63:91:1c:b2:f0:e3:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:78:CC:32:6D:23:19:73:03:42:0F:56:11:BA:20:A9:58:5F:CC:AE
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.136.0/23
Signature Algorithm: sha256WithRSAEncryption
84:93:a6:ff:d9:fe:86:00:13:3d:b5:9a:b3:c5:49:ab:f5:01:
e9:4b:3f:8f:54:c0:46:3a:95:05:c1:cf:91:74:11:04:03:14:
eb:0a:75:9a:58:6d:25:e8:6f:86:ed:27:ac:cc:c3:08:2e:0c:
af:62:46:c6:c2:df:6d:5e:e5:c6:ef:96:37:b8:5b:97:f5:ab:
f4:1c:09:b7:00:32:39:87:c1:8c:4d:07:42:d7:8b:b4:57:2d:
28:f3:fd:30:4a:24:64:11:8a:eb:0b:a8:bc:8f:d6:24:99:fe:
d8:90:2f:1f:3b:b5:88:c9:7e:d6:6a:dd:af:d7:cb:67:3e:55:
5e:f9:5a:e7:0e:5e:9e:5d:dc:bd:5c:a7:fd:1c:a3:76:17:3a:
de:86:57:8a:e8:c8:78:d5:02:2e:90:77:f3:a5:3b:f0:9f:d4:
3f:f4:03:bb:ca:9f:98:68:51:24:a2:8a:c6:b2:b8:be:3d:3c:
21:23:6e:c3:72:03:b3:a2:19:03:fc:62:b0:60:77:4b:e7:68:
44:e4:30:71:74:6f:f8:77:d4:63:80:f9:3e:be:68:e9:8c:be:
7c:8e:dd:0e:9f:65:6f:ec:41:08:88:26:2a:7d:01:31:13:d7:
69:f0:a9:80:6b:a7:23:88:06:9e:a8:c2:f1:6d:9c:fc:2f:ba:
1d:83:14:dd
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUSbXP+JO0ExC34dkUGXrDf0fZpR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1
OUNFRThBMzAeFw0yNjA1MDMwMzEyMTJaFw0yNzA1MDIwMzE3MTJaMDMxMTAvBgNV
BAMTKDJCNzhDQzMyNkQyMzE5NzMwMzQyMEY1NjExQkEyMEE5NTg1RkNDQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNjLaRu/WBjVejd0GG5OrYnxLe
WzcfyzC20vcJFXA0MtMqIv4+wTNvtQFUcRLG6L4QowyBE7d21RIWbcYIEw5uyzNi
okM1WxYO1Nb3F57myzbGRrp4mtpP2ckvtl/BjgqDzkm42ni4jIR2B+Kcy3+XExtd
Op7hWt8H/ZfqM4U4vjDJr2Lw44uOqs50TgohbncB0v7dwRp8vT3spBmhU2w/jzuC
49EiEe94hf8cSPpvUNtUqUQp0szUUgmEQvBSIWHjGizzKEj4M0eeSEOvvPJPs556
qFIL2X0QAF4UU/zvsHIloV2j0ttYp2ZBiYlT4KRSCU0S3T5DTWORHLLw41kbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUK3jMMm0jGXMDQg9WEbogqVhfzK4wHwYDVR0j
BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC
QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF
OEEzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTMzMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXOyiDANBgkqhkiG
9w0BAQsFAAOCAQEAhJOm/9n+hgATPbWas8VJq/UB6Us/j1TARjqVBcHPkXQRBAMU
6wp1mlhtJehvhu0nrMzDCC4Mr2JGxsLfbV7lxu+WN7hbl/Wr9BwJtwAyOYfBjE0H
QteLtFctKPP9MEokZBGK6wuovI/WJJn+2JAvHzu1iMl+1mrdr9fLZz5VXvla5w5e
nl3cvVyn/Ryjdhc63oZXiujIeNUCLpB386U78J/UP/QDu8qfmGhRJKKKxrK4vj08
ISNuw3IDs6IZA/xisGB3S+doROQwcXRv+HfUY4D5Pr5o6Yy+fI7dDp9lb+xBCIgm
Kn0BMRPXafCpgGunI4gGnqjC8W2c/C+6HYMU3Q==
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:20 2026 by rpki-client