
$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138332e302f32342d3234203d3e203234353330.roa
File: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (raw, json)
Hash identifier: DRkP4Rbo/CCQujXep36UcLsFucXNff21TtbLk7RG9SM=
Subject key identifier: 9F:8C:4A:31:76:E4:E9:39:AB:35:94:E7:84:43:AE:28:09:3A:8E:15
Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Certificate serial: 6D9C91841B284A490C9EFEA065B033D2D48DCB54
Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138332e302f32342d3234203d3e203234353330.roa
Signing time: Sun 03 May 2026 02:10:48 +0000
ROA not before: Sun 03 May 2026 02:05:48 +0000
ROA not after: Sun 02 May 2027 02:10:48 +0000
asID: 24530
IP address blocks: 119.10.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9c:91:84:1b:28:4a:49:0c:9e:fe:a0:65:b0:33:d2:d4:8d:cb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Validity
Not Before: May 3 02:05:48 2026 GMT
Not After : May 2 02:10:48 2027 GMT
Subject: CN=9F8C4A3176E4E939AB3594E78443AE28093A8E15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:21:16:bf:29:21:58:1a:f2:80:12:bf:7f:
20:fa:80:0d:fe:11:a3:57:71:63:a9:cf:11:a2:49:
b6:2e:27:4d:9f:13:83:32:15:77:59:1c:e8:ab:24:
9b:27:4b:74:cc:7a:66:7e:2d:89:48:02:f8:06:d2:
92:fd:c7:bc:6d:75:8c:f0:c3:e4:66:cb:51:df:24:
a7:99:e9:32:19:47:b7:a3:05:c9:dc:19:43:22:4b:
38:c6:98:dc:21:3c:ec:a3:db:b6:51:f8:10:43:45:
65:ea:53:01:61:7c:59:17:d2:36:7b:ba:41:48:26:
16:6b:b5:2f:e1:95:7e:73:7a:96:98:2f:42:d6:e2:
bb:1f:62:b5:a0:5a:62:c0:e2:9e:b1:76:ff:47:bb:
f1:9a:8a:41:4b:e8:80:93:80:79:e9:6b:8d:ca:b9:
38:01:3f:13:96:91:68:69:84:2a:54:3a:5c:b0:73:
83:12:2b:da:71:38:b3:34:5c:27:4d:c5:a9:52:a1:
95:0c:5a:46:51:98:ac:08:9c:b0:7c:3f:e1:0c:f1:
f3:29:76:b3:bf:e0:54:ce:35:e9:ea:89:42:5f:3f:
45:3c:15:45:7f:02:68:4d:11:38:c9:f6:f9:cf:e6:
be:6d:17:42:2b:df:c6:7f:87:cd:14:96:76:fe:3c:
60:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8C:4A:31:76:E4:E9:39:AB:35:94:E7:84:43:AE:28:09:3A:8E:15
X509v3 Authority Key Identifier:
keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138332e302f32342d3234203d3e203234353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.10.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4b:96:0c:c2:7b:ce:41:15:59:c9:71:4c:08:92:9c:27:63:
65:26:2b:94:8a:03:32:6b:6f:0d:2d:03:1e:72:14:d3:f5:47:
15:8c:83:6e:c1:11:e7:f2:b5:1d:60:a4:bc:92:44:7d:98:90:
00:72:84:4e:be:eb:b0:68:2f:34:c8:33:b2:12:72:02:15:1c:
b4:db:00:6b:cd:ff:26:6a:fb:e5:5b:3e:35:58:f8:d1:56:58:
29:bd:fb:77:e3:29:c1:4c:4b:4b:38:d3:ce:65:d1:61:f7:e3:
a0:92:ee:08:7c:1e:0a:81:47:aa:8a:72:84:a0:ae:58:d4:68:
9f:83:3a:bc:bb:a5:f3:d4:41:09:4f:41:50:72:d6:4a:24:5b:
fc:12:92:97:a3:a3:de:6c:db:01:fe:2c:3f:fd:b0:e1:16:c3:
11:aa:53:e4:a3:59:e7:ea:50:37:58:ae:5e:c1:9e:fc:2f:ca:
d7:e6:20:76:cc:aa:fc:4a:44:5b:5c:2a:49:32:01:1f:14:de:
9a:2b:d9:6e:0d:8c:e3:2c:86:d1:35:48:55:1e:b7:39:60:b8:
84:30:6d:b3:9a:ea:22:10:3e:80:db:56:eb:a0:cb:cb:50:c3:
cc:5e:7a:f2:77:e6:ad:1a:71:ec:9d:94:b0:eb:23:d6:06:8d:
44:6a:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:31 2026 by rpki-client