
$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138302e302f32332d3233203d3e203234353330.roa
File: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (raw, json)
Hash identifier: J3mFc+blOdqx9rOGug3IYw5ONv5fbpx/wInrtP6ubZ8=
Subject key identifier: 2F:BF:D9:6C:F4:7B:CE:98:40:9A:5B:17:3B:0E:F7:DB:DE:BF:8F:26
Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Certificate serial: 7E0CDB2F8E9E8F1D6849AD7457634A68D4FED485
Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138302e302f32332d3233203d3e203234353330.roa
Signing time: Sun 03 May 2026 02:10:42 +0000
ROA not before: Sun 03 May 2026 02:05:42 +0000
ROA not after: Sun 02 May 2027 02:10:42 +0000
asID: 24530
IP address blocks: 119.10.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0c:db:2f:8e:9e:8f:1d:68:49:ad:74:57:63:4a:68:d4:fe:d4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Validity
Not Before: May 3 02:05:42 2026 GMT
Not After : May 2 02:10:42 2027 GMT
Subject: CN=2FBFD96CF47BCE98409A5B173B0EF7DBDEBF8F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:3a:99:4a:29:a7:33:f0:5e:84:ea:1d:bb:
58:b2:ae:ec:3e:9e:02:19:a3:1d:ae:7f:2b:0e:a4:
29:03:59:66:e8:65:b6:36:dc:d9:fc:7d:62:51:c3:
0e:3f:9e:ec:e9:fc:bf:3a:37:62:e8:79:e3:1d:73:
d7:4a:84:1f:76:34:96:f4:e6:a5:03:ba:fb:d8:71:
b5:6f:ae:3b:8b:6b:31:b6:e7:47:e0:ac:c4:b6:a6:
ad:a4:58:c7:1a:b4:fb:2c:0c:da:5e:44:b5:12:60:
b5:6d:e6:05:83:82:c0:2d:41:e0:c4:71:1a:16:50:
30:51:bb:b2:54:8f:99:af:a2:4a:b9:e5:f1:04:a6:
61:86:5f:7a:7f:50:f3:1c:69:6f:a1:33:c1:d1:1b:
72:35:a4:ef:17:52:d3:58:5a:c3:4c:22:4b:cb:cd:
1e:ef:39:8e:bf:9a:85:26:72:e3:7c:2e:dd:51:1f:
20:7b:b0:d3:ad:b2:0b:1a:18:89:fc:d7:ff:e5:bd:
30:d4:a8:72:19:79:93:58:0e:c1:b6:d1:cb:9e:60:
bf:9b:ee:22:6c:77:a5:08:97:ca:db:4d:cb:31:19:
7e:98:01:0a:54:96:52:fe:23:58:7b:3c:80:8f:e6:
e9:4e:2c:95:64:db:e0:11:66:ca:73:93:3b:99:f7:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BF:D9:6C:F4:7B:CE:98:40:9A:5B:17:3B:0E:F7:DB:DE:BF:8F:26
X509v3 Authority Key Identifier:
keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138302e302f32332d3233203d3e203234353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.10.180.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:38:09:f3:ee:83:64:03:65:06:a1:d4:72:fa:1e:53:c2:da:
78:d1:44:49:38:d3:45:e0:f1:e8:98:86:b3:b3:de:c3:fc:87:
d2:06:3c:b6:7b:6c:b9:4f:76:88:dd:02:d0:86:35:3c:c1:92:
7d:78:fe:80:92:20:22:6a:fa:55:6f:23:1f:dd:f9:db:de:04:
1c:90:9b:2d:8c:02:36:cf:2f:cc:9e:d4:2c:31:66:dd:6c:ff:
2c:3f:98:7d:30:4f:68:68:32:1e:3a:c9:8b:6f:11:be:aa:36:
39:d4:a1:5d:1e:18:ad:4a:84:db:70:b1:af:23:9d:2f:80:b4:
d7:bc:ba:41:06:d9:15:21:c6:48:f3:92:69:86:9a:a3:d1:44:
02:a2:7d:c2:a3:76:f6:d5:57:fb:2e:bb:23:ec:64:c1:bd:77:
93:df:47:f4:5e:a8:d5:7f:03:2c:ae:0c:12:ac:ff:b3:1c:a4:
95:75:61:46:2c:08:13:29:d1:4c:91:4f:fe:72:00:24:ee:97:
b5:95:8f:49:3e:a0:a6:87:af:15:51:83:72:2b:01:5a:10:b4:
f9:71:e4:11:8c:32:a8:60:01:bc:44:bb:fc:29:47:79:7a:7e:
6c:4a:34:fd:8e:cc:d0:1d:7d:d7:44:3f:29:65:e1:fa:e4:23:
03:08:09:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:46 2026 by rpki-client