
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135322e302f32322d3234203d3e2039373934.roa
File: 3131352e3137382e3135322e302f32322d3234203d3e2039373934.roa (raw, json)
Hash identifier: b1b/vDhQE75TtqmclYBzlCTy3gXzi6HuGFmdw2fyLmg=
Subject key identifier: A5:7F:4B:8F:8E:BE:6A:AB:1D:0B:A3:99:0F:CD:4D:F9:13:D5:BB:9F
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 25EF823A8D90FD119A5F28D9D0D55FC2B2A654CC
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135322e302f32322d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:21 +0000
ROA not before: Sun 03 May 2026 03:12:21 +0000
ROA not after: Sun 02 May 2027 03:17:21 +0000
asID: 9794
IP address blocks: 115.178.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ef:82:3a:8d:90:fd:11:9a:5f:28:d9:d0:d5:5f:c2:b2:a6:54:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:21 2026 GMT
Not After : May 2 03:17:21 2027 GMT
Subject: CN=A57F4B8F8EBE6AAB1D0BA3990FCD4DF913D5BB9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:53:3b:80:62:e3:d8:fa:6f:53:a1:ac:87:
93:d8:8f:32:92:8c:7e:b2:a6:59:0b:2f:32:8a:fc:
a0:35:63:ad:29:59:06:00:34:65:9c:b0:c8:e9:92:
43:06:9f:d1:19:b6:a7:c7:b9:cb:c4:c0:13:76:b3:
4f:f1:6d:7f:b2:97:42:29:d5:2b:5b:2e:5a:17:67:
63:33:6b:b3:07:6b:85:58:b3:34:b8:37:ad:58:2e:
b2:f4:7d:61:5f:9a:5f:b7:50:a8:00:cb:80:3c:9a:
9a:4b:cc:1a:58:17:95:9d:38:89:ae:65:38:05:59:
40:8b:54:5a:1b:07:2e:26:36:0f:87:16:35:b7:73:
06:58:72:31:96:53:95:7c:63:cf:d5:1a:b6:2e:8a:
10:a8:ce:31:f8:c2:b2:e8:ac:04:eb:78:32:7c:38:
9b:6d:26:2b:c2:34:89:d4:8a:b5:a0:2b:60:0d:1e:
50:7e:d3:6a:2f:4e:1a:42:b5:07:2c:6f:b1:45:1f:
43:36:b6:5e:72:b4:db:df:1c:26:60:f5:9d:be:c3:
b6:7a:09:8c:fb:e3:7c:b1:75:94:77:d1:31:9b:4b:
c9:19:e4:f9:9a:e5:c8:08:dd:c9:f8:d1:2b:e7:26:
37:e8:85:f2:45:64:e8:9e:e7:31:47:e7:f2:b6:9c:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7F:4B:8F:8E:BE:6A:AB:1D:0B:A3:99:0F:CD:4D:F9:13:D5:BB:9F
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135322e302f32322d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:45:97:d5:d2:01:7b:e3:a0:53:ad:98:97:aa:70:4b:25:81:
4e:32:f8:b4:a8:7e:53:20:79:d5:37:72:2c:c5:6e:6a:db:a4:
c1:78:8e:0e:27:45:64:ef:54:7f:75:8b:1e:1e:a4:5c:74:61:
48:41:2f:a8:4b:02:ce:9e:2a:ec:30:63:fa:d1:dc:58:51:74:
9d:f8:dc:af:76:d9:00:5d:56:30:9e:06:88:c7:9d:f7:26:40:
ae:c1:8e:9a:d0:92:9d:da:6a:a2:0d:fb:a5:db:67:6e:22:7a:
7f:f0:58:47:fc:f3:94:e1:7d:fa:9e:16:60:93:52:ba:ef:c4:
d5:a0:85:f2:b1:4f:f7:ff:8b:fb:64:5d:ca:de:02:bc:a9:17:
ec:f5:62:b6:c7:9e:73:22:5d:27:2e:26:a0:a4:4e:10:51:61:
eb:6d:8a:3c:9f:3f:5f:12:0e:9d:96:58:ad:3e:a0:8a:30:64:
04:5b:a6:2d:ce:f8:35:b1:94:f4:f1:eb:b9:d8:97:09:75:96:
ce:ff:11:d5:4e:76:f8:4b:c0:fe:90:63:3d:8a:e9:89:3b:11:
74:e6:a7:a3:5a:7f:a5:33:09:a5:b0:5b:71:97:8b:ab:7d:62:
14:47:39:f0:3d:24:ad:60:fa:3b:2f:f6:d1:cb:c8:3c:ed:9c:
84:8e:fd:22
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJe+COo2Q/RGaXyjZ0NVfwrKmVMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1
OUNFRThBMzAeFw0yNjA1MDMwMzEyMjFaFw0yNzA1MDIwMzE3MjFaMDMxMTAvBgNV
BAMTKEE1N0Y0QjhGOEVCRTZBQUIxRDBCQTM5OTBGQ0Q0REY5MTNENUJCOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYiFM7gGLj2PpvU6Gsh5PYjzKS
jH6yplkLLzKK/KA1Y60pWQYANGWcsMjpkkMGn9EZtqfHucvEwBN2s0/xbX+yl0Ip
1StbLloXZ2Mza7MHa4VYszS4N61YLrL0fWFfml+3UKgAy4A8mppLzBpYF5WdOImu
ZTgFWUCLVFobBy4mNg+HFjW3cwZYcjGWU5V8Y8/VGrYuihCozjH4wrLorATreDJ8
OJttJivCNInUirWgK2ANHlB+02ovThpCtQcsb7FFH0M2tl5ytNvfHCZg9Z2+w7Z6
CYz743yxdZR30TGbS8kZ5Pma5cgI3cn40SvnJjfohfJFZOie5zFH5/K2nPx/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUpX9Lj46+aqsdC6OZD81N+RPVu58wHwYDVR0j
BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC
QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF
OEEzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTM1MzIyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnOymDANBgkqhkiG
9w0BAQsFAAOCAQEArkWX1dIBe+OgU62Yl6pwSyWBTjL4tKh+UyB51TdyLMVuatuk
wXiODidFZO9Uf3WLHh6kXHRhSEEvqEsCzp4q7DBj+tHcWFF0nfjcr3bZAF1WMJ4G
iMed9yZArsGOmtCSndpqog37pdtnbiJ6f/BYR/zzlOF9+p4WYJNSuu/E1aCF8rFP
9/+L+2Rdyt4CvKkX7PVitseecyJdJy4moKROEFFh622KPJ8/XxIOnZZYrT6gijBk
BFumLc74NbGU9PHrudiXCXWWzv8R1U52+EvA/pBjPYrpiTsRdOano1p/pTMJpbBb
cZeLq31iFEc58D0krWD6Oy/20cvIPO2chI79Ig==
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:23 2026 by rpki-client