
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31372e302f32342d3234203d3e2039333431.roa
File: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: Jbbv7LheQBY4j7uxSO+OAvKD/NoLJjSel5LCZW8mlwI=
Subject key identifier: 20:F6:65:C0:80:53:23:8C:EC:A6:9A:D9:3F:84:CB:4F:DC:D0:8B:EF
Certificate issuer: /CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89
Certificate serial: 2DF8509B9779E8209C9523034D19D5B72D1A95F6
Authority key identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31372e302f32342d3234203d3e2039333431.roa
Signing time: Sun 03 May 2026 02:49:49 +0000
ROA not before: Sun 03 May 2026 02:44:49 +0000
ROA not after: Sun 02 May 2027 02:49:49 +0000
asID: 9341
IP address blocks: 103.178.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl
rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f8:50:9b:97:79:e8:20:9c:95:23:03:4d:19:d5:b7:2d:1a:95:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89
Validity
Not Before: May 3 02:44:49 2026 GMT
Not After : May 2 02:49:49 2027 GMT
Subject: CN=20F665C08053238CECA69AD93F84CB4FDCD08BEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:cd:8b:8f:0e:02:a3:17:4a:e7:5d:c5:16:
22:2b:f8:a8:e7:5b:9f:27:57:38:63:9c:a4:12:6c:
54:19:76:be:66:2b:7e:b9:f8:d0:5e:17:95:3c:74:
13:5d:2f:a6:df:4e:62:f8:ab:c8:87:cd:ec:64:4f:
61:ca:96:65:35:05:0b:73:eb:5e:72:37:36:8c:02:
0d:8c:88:d9:76:dd:55:84:9f:39:df:87:ad:06:c6:
dd:d5:69:d2:2a:9a:e6:13:a8:6d:9d:20:5f:3c:e6:
0c:3d:c9:fd:c6:05:0f:f5:d0:02:03:1f:70:6b:69:
1c:fe:2f:2c:da:1f:88:08:0f:84:66:e8:a5:1b:3d:
77:10:cd:cd:d0:92:fd:e5:73:b8:47:5f:c7:bc:dc:
bb:29:d5:fd:cf:83:72:87:b2:32:98:ff:87:26:67:
21:b3:d4:b2:97:5b:88:cd:a5:85:0a:37:34:90:40:
25:5a:42:04:e6:c4:45:e5:32:01:ac:ac:1b:ad:36:
40:71:40:0b:5b:b5:4e:17:c0:e4:16:fd:b2:3b:be:
8e:89:c5:e9:86:c0:fa:77:07:23:da:7b:ba:67:57:
b5:3c:95:df:ad:a0:1f:06:e8:59:cb:d0:73:c4:1f:
c8:33:14:00:83:e1:3f:fa:22:43:69:cd:3d:d8:4b:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F6:65:C0:80:53:23:8C:EC:A6:9A:D9:3F:84:CB:4F:DC:D0:8B:EF
X509v3 Authority Key Identifier:
keyid:D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31372e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.17.0/24
Signature Algorithm: sha256WithRSAEncryption
74:af:c7:e2:f0:6b:17:17:e8:d6:e3:cd:0d:c2:80:08:07:aa:
b7:0d:ff:19:74:ce:67:91:9a:35:fe:18:d2:ce:f6:de:69:63:
64:81:9b:e5:ed:dc:a4:90:96:b7:4f:77:42:01:5f:13:c5:50:
71:ff:e7:17:fa:0f:6c:23:dc:e5:07:fd:2e:48:d2:cd:59:b0:
a3:b9:48:ae:2a:fb:c9:7b:dc:40:8b:a1:be:0b:e1:67:ba:7d:
76:75:10:1c:d2:50:61:24:b6:0b:b0:84:c8:71:4d:c7:0c:5e:
83:cc:7c:74:78:6a:77:2f:15:5c:6a:0b:c5:ec:3a:ee:70:71:
53:0a:ce:29:7d:02:40:72:76:d2:48:45:bd:54:77:f4:a5:10:
4e:3e:1d:7f:a9:a3:de:8b:56:6e:f4:45:78:52:c4:b6:a0:f1:
cf:33:73:56:2a:22:0b:0c:73:00:bb:ca:4e:26:8b:f7:ea:63:
2f:20:d8:06:bc:6e:79:10:f8:7e:79:2e:07:81:20:b4:21:78:
14:c0:17:1c:66:6d:28:50:ff:32:34:c2:97:62:d1:aa:49:38:
da:b1:8f:8f:3b:8e:91:6d:55:90:7b:72:a4:13:e3:ee:59:63:
e9:c8:29:b2:c7:d2:30:b1:97:f0:2b:ef:f5:70:dd:57:08:e8:
01:8c:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:31:45 2026 by rpki-client