
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3130332e3135352e3138362e302f32342d3234203d3e203234313938.roa
File: 3130332e3135352e3138362e302f32342d3234203d3e203234313938.roa (raw, json)
Hash identifier: qLyqBtZOi6bzPzQ5YmenFV5BuE3tMCCGIzP66ZoAfsE=
Subject key identifier: 2D:CC:55:57:4C:0D:97:16:AA:72:E1:86:A7:BD:1A:43:82:F9:6D:69
Certificate issuer: /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial: 656EF0F9EE4E0AAA5325A2887AA0689688909A72
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3130332e3135352e3138362e302f32342d3234203d3e203234313938.roa
Signing time: Thu 30 Jul 2026 01:52:58 +0000
ROA not before: Thu 30 Jul 2026 01:47:58 +0000
ROA not after: Thu 29 Jul 2027 01:52:58 +0000
asID: 24198
IP address blocks: 103.155.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 11:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6e:f0:f9:ee:4e:0a:aa:53:25:a2:88:7a:a0:68:96:88:90:9a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Validity
Not Before: Jul 30 01:47:58 2026 GMT
Not After : Jul 29 01:52:58 2027 GMT
Subject: CN=2DCC55574C0D9716AA72E186A7BD1A4382F96D69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:c9:ec:19:c0:c8:e6:91:48:e9:fd:50:f0:
d8:52:72:ea:b1:61:0c:79:17:9f:2a:7c:e1:0f:d3:
d5:98:b5:17:2a:e9:9e:30:6f:bd:1d:5b:82:f3:2a:
ab:29:bc:86:d5:df:7e:6a:f9:71:71:c4:ef:f4:a4:
cd:7f:bb:8d:e7:73:d3:74:d9:e1:9b:ce:df:80:7c:
5e:22:55:b1:a2:ba:63:4f:63:00:01:00:04:73:37:
d8:1e:d8:e3:d2:ee:4c:2e:45:d2:f7:04:11:c7:bd:
15:b8:4c:dd:be:89:60:b1:99:a6:8c:fc:b0:73:0e:
fa:05:6d:31:54:9f:f3:56:2f:af:b0:fc:43:dd:81:
83:03:d4:0d:ea:e2:1f:d0:16:9e:b8:44:3b:1e:6d:
55:04:bf:05:bd:bd:9f:2e:14:9d:0d:b4:99:24:a4:
61:bd:64:f9:69:62:88:c0:9a:e4:0c:8f:b0:f0:18:
af:8d:d4:12:15:b4:69:4f:89:57:04:ee:d2:fa:d3:
53:ec:fc:61:5c:6d:bd:f9:b4:a3:1c:7b:36:84:8d:
90:37:3a:77:da:a6:d6:a3:1f:e6:62:8a:26:55:ce:
b8:2e:82:0d:da:06:b7:f1:f0:7d:e6:cf:d2:3b:5b:
2c:6c:b4:3e:87:e9:69:cb:ef:f9:46:2f:85:bf:ea:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CC:55:57:4C:0D:97:16:AA:72:E1:86:A7:BD:1A:43:82:F9:6D:69
X509v3 Authority Key Identifier:
keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3130332e3135352e3138362e302f32342d3234203d3e203234313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c7:4e:1a:37:16:e7:47:b5:27:72:2d:78:47:3e:26:c3:f8:
26:20:ea:fd:a9:72:1b:5d:26:e3:bb:97:ee:02:68:74:06:87:
c6:23:92:3a:3f:d1:88:3f:ee:7a:9c:61:2d:d1:0b:ca:fd:a2:
53:e6:f4:f8:7f:d1:ae:95:22:29:21:c7:eb:d7:88:cf:56:84:
d1:92:0d:a0:1f:b8:60:6c:24:ca:82:81:47:fd:ec:03:a2:79:
8d:ee:69:0f:5d:f2:ea:9b:0e:04:8e:fc:74:71:92:8a:3a:eb:
91:64:3a:6e:8b:db:6b:6a:c3:af:35:6f:e5:c5:9c:a9:d4:c9:
bc:07:50:39:80:5e:05:ff:1a:bf:69:cb:d2:5a:e3:b1:82:38:
b3:81:a8:28:4c:3d:ca:ee:34:ff:08:a2:dc:7b:a4:33:11:56:
50:fd:44:e2:8b:12:8c:b7:42:b9:34:0c:48:c1:0e:f5:1a:09:
94:39:a0:3e:a7:fa:b2:e5:36:32:8a:b9:99:dc:32:86:ca:33:
38:67:c9:db:13:20:b4:73:a5:a8:1c:07:ba:64:30:06:d4:b2:
d8:34:bf:06:b4:03:6b:ab:22:84:a9:37:f3:69:d9:e7:bb:3f:
74:01:e6:6a:c5:38:81:ff:67:a5:ad:38:57:d6:75:de:f6:f3:
55:df:b8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:33:17 2026 by rpki-client