
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135362e302f32322d3234203d3e2039373934.roa
File: 3131352e3137382e3135362e302f32322d3234203d3e2039373934.roa (raw, json)
Hash identifier: izMiwPM+w4qm0w5Ba6mdISSyqugvvojJkoTJd4QJhus=
Subject key identifier: 7D:12:52:6E:D4:8F:AB:89:12:CF:26:AD:8E:9D:83:70:9F:30:E1:C1
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 0243C7438A145319F47C50D66A31B637209B6016
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135362e302f32322d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:09 +0000
ROA not before: Sun 03 May 2026 03:12:09 +0000
ROA not after: Sun 02 May 2027 03:17:09 +0000
asID: 9794
IP address blocks: 115.178.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:43:c7:43:8a:14:53:19:f4:7c:50:d6:6a:31:b6:37:20:9b:60:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:09 2026 GMT
Not After : May 2 03:17:09 2027 GMT
Subject: CN=7D12526ED48FAB8912CF26AD8E9D83709F30E1C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:91:22:75:2c:da:b1:33:a8:80:b8:22:5b:
cf:bf:5e:1e:54:b6:94:76:73:30:23:70:09:1e:ed:
4a:42:23:1f:78:84:8e:16:a8:e9:74:bd:af:82:72:
29:cb:29:b9:a2:e5:15:53:88:64:51:f3:62:72:2d:
6f:d7:87:a6:a7:bf:33:c6:9e:f6:77:21:96:77:e4:
03:fd:e6:40:0b:fa:6b:1e:3a:df:05:ae:2d:81:49:
53:6c:77:90:38:d8:07:f9:3a:2d:00:d2:3e:7f:81:
d3:27:54:b9:4a:18:5f:48:80:f0:a4:86:14:dc:06:
ce:a7:b0:9b:71:9c:d2:0e:90:ed:3e:d2:c7:86:a4:
6e:a9:b4:1b:1b:5b:06:3f:77:a8:40:bb:f0:91:bc:
42:9f:f0:da:58:b0:f1:b5:ec:cc:c9:7f:da:76:22:
49:d6:c2:13:cb:68:5b:73:1e:f8:f9:0b:8b:7b:22:
39:d6:af:a9:b7:78:9c:6d:2d:e6:bc:40:36:65:9f:
d4:7a:1e:62:50:d2:22:1b:8a:72:a1:36:08:9d:a0:
45:1a:b5:64:5c:84:28:b6:65:f5:e0:4c:1a:e1:36:
b1:e0:24:03:01:8d:dc:e2:d1:c5:98:30:4b:fd:3b:
ca:d1:9f:57:2e:53:f8:00:6c:23:6d:8c:cf:e3:36:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:12:52:6E:D4:8F:AB:89:12:CF:26:AD:8E:9D:83:70:9F:30:E1:C1
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135362e302f32322d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.156.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:59:c5:57:8b:8b:ed:ea:da:0d:55:19:ea:07:07:67:32:55:
45:8b:6c:df:f0:96:d8:f4:99:ca:74:4b:34:2c:8b:aa:84:c7:
7c:46:d6:41:7d:7c:27:0a:d2:75:16:2e:c2:6c:67:66:a1:af:
48:c1:53:3f:6d:7f:54:62:ad:41:df:40:07:c7:da:1d:76:9e:
c9:65:1e:d8:39:39:3f:8a:dd:aa:21:17:2e:2a:56:1e:f2:e3:
ff:9f:b2:4a:c0:05:86:e4:18:7e:9e:87:26:c9:4b:c2:9f:7d:
85:77:c6:04:8f:51:3e:82:44:10:a3:8e:e5:ce:33:b7:46:d1:
23:a9:8c:03:23:0e:b4:6a:a6:30:eb:a8:8d:d9:43:68:6c:7c:
5c:b5:6a:2e:06:03:68:c4:4e:f3:8d:d0:95:63:ce:5c:0b:9f:
c5:53:50:15:cf:81:55:80:5f:3c:79:f7:78:d5:1c:ef:20:04:
bb:7a:2c:7a:03:60:c5:e0:c6:f5:8a:a9:b0:c8:f8:a3:fc:c9:
f3:d3:c1:f9:24:9f:ea:0f:af:47:22:fd:e7:07:9d:3a:27:00:
c5:1e:29:7b:3e:0b:43:a5:f4:ea:90:f8:71:57:16:66:d6:6f:
52:fd:8e:56:af:2a:ff:28:5f:cf:c6:c8:1e:9f:d8:17:19:53:
07:90:bb:1e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUAkPHQ4oUUxn0fFDWajG2NyCbYBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1
OUNFRThBMzAeFw0yNjA1MDMwMzEyMDlaFw0yNzA1MDIwMzE3MDlaMDMxMTAvBgNV
BAMTKDdEMTI1MjZFRDQ4RkFCODkxMkNGMjZBRDhFOUQ4MzcwOUYzMEUxQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxJEidSzasTOogLgiW8+/Xh5U
tpR2czAjcAke7UpCIx94hI4WqOl0va+CcinLKbmi5RVTiGRR82JyLW/Xh6anvzPG
nvZ3IZZ35AP95kAL+mseOt8Fri2BSVNsd5A42Af5Oi0A0j5/gdMnVLlKGF9IgPCk
hhTcBs6nsJtxnNIOkO0+0seGpG6ptBsbWwY/d6hAu/CRvEKf8NpYsPG17MzJf9p2
IknWwhPLaFtzHvj5C4t7IjnWr6m3eJxtLea8QDZln9R6HmJQ0iIbinKhNgidoEUa
tWRchCi2ZfXgTBrhNrHgJAMBjdzi0cWYMEv9O8rRn1cuU/gAbCNtjM/jNmh1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUfRJSbtSPq4kSzyatjp2DcJ8w4cEwHwYDVR0j
BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC
QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF
OEEzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTM1MzYyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnOynDANBgkqhkiG
9w0BAQsFAAOCAQEAbVnFV4uL7eraDVUZ6gcHZzJVRYts3/CW2PSZynRLNCyLqoTH
fEbWQX18JwrSdRYuwmxnZqGvSMFTP21/VGKtQd9AB8faHXaeyWUe2Dk5P4rdqiEX
LipWHvLj/5+ySsAFhuQYfp6HJslLwp99hXfGBI9RPoJEEKOO5c4zt0bRI6mMAyMO
tGqmMOuojdlDaGx8XLVqLgYDaMRO843QlWPOXAufxVNQFc+BVYBfPHn3eNUc7yAE
u3osegNgxeDG9YqpsMj4o/zJ89PB+SSf6g+vRyL95wedOicAxR4pez4LQ6X06pD4
cVcWZtZvUv2OVq8q/yhfz8bIHp/YFxlTB5C7Hg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:43:43 2026 by rpki-client