
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa
File: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (raw, json)
Hash identifier: fZTmTy6g2R28mCtJrpoBFkv/RRFL2DWAt0Cexpbh3bM=
Subject key identifier: AC:03:65:92:F7:FD:EF:70:82:3A:C4:5E:C8:CD:A8:7D:FB:27:DE:F9
Certificate issuer: /CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB
Certificate serial: 15FE8594E420512C6FA74F2C166FD6F865BA3134
Authority key identifier: AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa
Signing time: Sun 03 May 2026 03:18:45 +0000
ROA not before: Sun 03 May 2026 03:13:45 +0000
ROA not after: Sun 02 May 2027 03:18:45 +0000
asID: 131705
IP address blocks: 103.154.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl
rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:fe:85:94:e4:20:51:2c:6f:a7:4f:2c:16:6f:d6:f8:65:ba:31:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB
Validity
Not Before: May 3 03:13:45 2026 GMT
Not After : May 2 03:18:45 2027 GMT
Subject: CN=AC036592F7FDEF70823AC45EC8CDA87DFB27DEF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:3c:ab:15:f6:55:c2:ab:00:5f:54:fe:d2:
e4:a7:7a:ec:59:b8:80:2d:a8:6f:65:02:6d:a9:b9:
74:23:71:3b:ac:0b:08:af:35:7b:cc:a7:51:ec:eb:
37:67:92:aa:3a:7d:00:cf:1d:e4:0f:e1:c4:14:e8:
5e:4c:b7:57:7d:de:16:7f:61:c6:9f:71:0f:b3:77:
21:c0:41:d1:93:4d:61:29:30:48:b0:eb:62:13:15:
70:9b:48:e0:f7:64:a4:3c:3c:cd:75:04:9a:e7:77:
36:05:73:b8:18:9e:8e:41:f5:7f:5a:a2:77:8e:10:
b6:c6:d6:fe:20:a1:9b:20:da:c3:7d:25:0e:2c:9f:
7e:6c:cb:8a:c6:12:29:61:9f:14:0f:29:ef:b9:90:
7a:56:cc:9f:bd:29:42:83:0d:e3:19:17:b3:b0:29:
23:b3:c3:6d:1b:64:d2:ee:e3:35:2e:10:2e:28:3f:
45:36:ce:22:3b:8b:a5:39:a8:85:58:23:93:7f:03:
b5:b1:bd:fa:0f:aa:0a:77:59:82:da:80:c4:75:87:
88:cf:70:a4:01:5b:97:1e:b5:d0:f8:8a:66:ed:2d:
8c:f1:d8:51:ed:2d:a6:22:06:30:92:31:ba:b4:c0:
5d:af:04:f5:23:08:6b:e4:7e:fa:b5:73:6f:7c:0b:
72:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:03:65:92:F7:FD:EF:70:82:3A:C4:5E:C8:CD:A8:7D:FB:27:DE:F9
X509v3 Authority Key Identifier:
keyid:AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.154.178.0/24
Signature Algorithm: sha256WithRSAEncryption
56:95:d2:b8:da:a8:16:db:02:24:8f:f2:28:ab:ee:f2:53:79:
8c:ba:62:7d:9e:a6:6e:1e:f3:57:47:a9:0c:36:b9:db:ee:49:
50:a1:07:d0:dd:d5:f1:f4:b4:c3:c7:e5:fb:78:d9:7b:ab:e0:
1c:35:33:0e:57:77:4e:e5:5c:36:dd:b4:39:e0:09:d1:b8:27:
ee:8b:d7:de:8d:8c:16:bc:ee:04:f9:0f:52:06:90:b4:73:29:
7b:e5:78:ee:25:e8:17:b8:fb:55:5d:27:f6:1d:74:36:56:45:
f2:b0:68:b9:3f:c6:da:4c:d0:8e:6b:be:98:92:93:87:ee:9f:
9f:f9:98:93:04:ed:62:b1:c8:83:22:00:b0:39:b7:12:93:91:
9b:e2:dc:d3:47:fd:4e:ba:97:40:a6:18:bf:50:99:02:c2:7c:
b4:e7:ca:3a:72:96:e7:de:f9:20:52:9f:07:24:4c:d8:40:4b:
87:10:6e:ec:7a:6a:ab:38:43:14:9a:42:7b:db:cd:f5:d3:ad:
50:f3:f9:76:80:a2:73:f2:a4:47:80:2f:80:ae:ef:ab:5e:31:
38:46:76:27:57:d4:2a:04:2f:a7:6a:0f:db:de:37:51:7b:e6:
14:e3:af:eb:6d:96:93:f5:73:01:44:44:3f:ec:b5:f6:3c:eb:
d1:88:bb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:21:47 2026 by rpki-client