
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa
File: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (raw, json)
Hash identifier: BKt7x+HSwXt0hFZm36Nu9CrkQ0Drly/dgK6bERbk3xk=
Subject key identifier: 4C:5B:A3:06:F1:7A:31:EC:82:A1:FC:C5:AD:5A:C8:ED:E4:53:E8:07
Certificate issuer: /CN=BF072074B801AFE1292270FB7A3E090A276EB893
Certificate serial: 016FE455FCD936CDBBD460426526896951F4A862
Authority key identifier: BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa
Signing time: Sun 03 May 2026 02:17:31 +0000
ROA not before: Sun 03 May 2026 02:12:31 +0000
ROA not after: Sun 02 May 2027 02:17:31 +0000
asID: 152048
IP address blocks: 210.79.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.crl
rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:6f:e4:55:fc:d9:36:cd:bb:d4:60:42:65:26:89:69:51:f4:a8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF072074B801AFE1292270FB7A3E090A276EB893
Validity
Not Before: May 3 02:12:31 2026 GMT
Not After : May 2 02:17:31 2027 GMT
Subject: CN=4C5BA306F17A31EC82A1FCC5AD5AC8EDE453E807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:34:71:de:80:49:45:ee:34:4e:e7:8f:b4:
03:56:bf:82:e8:75:ea:a9:7a:d4:02:6b:a2:2e:54:
5b:53:6d:0a:9c:b3:bd:ae:0d:25:b2:f8:37:86:e7:
bd:da:01:ca:16:15:7a:77:66:1a:b8:f0:55:8f:ef:
f6:3f:75:b4:c2:9d:65:8e:8e:4b:4d:cd:c5:08:a7:
75:44:e0:fb:16:a9:44:b8:19:53:5e:9a:0c:62:2f:
a6:71:c4:d8:32:97:ab:73:e4:78:65:24:e4:bb:fe:
49:72:0c:49:80:1f:d9:0f:66:4c:53:e2:c4:07:f7:
a3:72:ac:3c:28:53:53:3d:f0:4b:d1:8f:0f:66:d6:
27:da:6c:bc:34:74:1d:cf:18:63:2d:d1:df:61:f3:
37:7f:15:01:68:b9:50:02:86:a1:3a:b2:14:14:6f:
88:54:6c:c6:20:9a:3b:04:32:95:db:0d:63:8a:c2:
83:2a:f0:c4:69:d9:a6:3f:41:77:b3:9f:82:4d:83:
4d:f2:35:b8:ad:38:7c:74:47:60:cf:96:0e:c4:dc:
df:c7:c5:52:28:54:2d:8b:31:7c:e4:7c:f9:c9:77:
04:f3:e5:14:79:6b:68:4e:f8:34:93:86:d2:72:b4:
17:bd:fd:f2:fc:64:0d:b0:81:b0:c1:c4:ac:12:09:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5B:A3:06:F1:7A:31:EC:82:A1:FC:C5:AD:5A:C8:ED:E4:53:E8:07
X509v3 Authority Key Identifier:
keyid:BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.79.141.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0d:73:2b:4c:2c:1e:1f:40:15:83:d1:f8:70:61:10:8f:11:
e6:a2:a6:43:d0:80:ad:5a:26:e9:c2:ff:df:bc:af:fb:57:5c:
16:b5:15:d8:3d:f6:c7:c9:9a:22:86:4e:f7:e5:7c:40:30:b5:
8b:dd:b1:d0:c1:9d:bc:ad:96:bc:fb:c4:9f:18:7f:07:b5:32:
92:59:9d:2a:9b:62:e0:4c:57:e6:df:a9:38:60:4b:a6:d6:b7:
16:69:8b:62:cf:47:f5:0d:3d:c7:31:c6:f6:d6:dc:c2:59:b9:
f2:00:18:a5:0a:71:aa:3f:43:ca:8f:e1:e6:09:fb:f3:87:15:
c2:70:cc:fa:27:66:08:a7:cf:88:98:5c:51:3b:ec:ce:f9:2f:
aa:7a:56:e3:2b:1f:ad:9f:a3:97:49:0e:c8:fa:29:f2:46:b1:
d8:a6:eb:4e:a5:4d:e1:f4:07:d6:46:78:b4:44:8f:6d:52:2d:
57:89:f1:a4:e0:af:73:ae:ce:dd:8d:48:de:e8:52:ec:02:a1:
f4:b4:f0:6b:70:3c:c0:e9:e0:2c:f1:fc:bc:7b:66:4e:cf:45:
19:98:d6:91:14:5e:87:a4:08:24:fa:37:58:f6:aa:6a:c0:df:
91:fa:f0:17:e6:9a:f3:8f:ef:76:b1:76:a1:0d:84:09:c4:68:
cf:25:da:6d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUAW/kVfzZNs271GBCZSaJaVH0qGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYwNzIwNzRCODAxQUZFMTI5MjI3MEZCN0EzRTA5MEEy
NzZFQjg5MzAeFw0yNjA1MDMwMjEyMzFaFw0yNzA1MDIwMjE3MzFaMDMxMTAvBgNV
BAMTKDRDNUJBMzA2RjE3QTMxRUM4MkExRkNDNUFENUFDOEVERTQ1M0U4MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2czRx3oBJRe40TuePtANWv4Lo
deqpetQCa6IuVFtTbQqcs72uDSWy+DeG573aAcoWFXp3Zhq48FWP7/Y/dbTCnWWO
jktNzcUIp3VE4PsWqUS4GVNemgxiL6ZxxNgyl6tz5HhlJOS7/klyDEmAH9kPZkxT
4sQH96NyrDwoU1M98EvRjw9m1ifabLw0dB3PGGMt0d9h8zd/FQFouVAChqE6shQU
b4hUbMYgmjsEMpXbDWOKwoMq8MRp2aY/QXezn4JNg03yNbitOHx0R2DPlg7E3N/H
xVIoVC2LMXzkfPnJdwTz5RR5a2hO+DSThtJytBe9/fL8ZA2wgbDBxKwSCcLTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUTFujBvF6MeyCofzFrVrI7eRT6AcwHwYDVR0j
BBgwFoAUvwcgdLgBr+EpInD7ej4JCiduuJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWNkN2QyOWItZGQxYy00MWRkLWJlZWYtNTY0Mjg2NGU4NmFlLzAvQkYwNzIwNzRC
ODAxQUZFMTI5MjI3MEZCN0EzRTA5MEEyNzZFQjg5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CRjA3MjA3NEI4MDFBRkUxMjkyMjcwRkI3QTNFMDkwQTI3NkVC
ODkzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFjZDdkMjliLWRkMWMtNDFkZC1i
ZWVmLTU2NDI4NjRlODZhZS8wLzMyMzEzMDJlMzczOTJlMzEzNDMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0k+NMA0GCSqG
SIb3DQEBCwUAA4IBAQCSDXMrTCweH0AVg9H4cGEQjxHmoqZD0ICtWibpwv/fvK/7
V1wWtRXYPfbHyZoihk735XxAMLWL3bHQwZ28rZa8+8SfGH8HtTKSWZ0qm2LgTFfm
36k4YEum1rcWaYtiz0f1DT3HMcb21tzCWbnyABilCnGqP0PKj+HmCfvzhxXCcMz6
J2YIp8+ImFxRO+zO+S+qelbjKx+tn6OXSQ7I+inyRrHYputOpU3h9AfWRni0RI9t
Ui1XifGk4K9zrs7djUje6FLsAqH0tPBrcDzA6eAs8fy8e2ZOz0UZmNaRFF6HpAgk
+jdY9qpqwN+R+vAX5przj+92sXahDYQJxGjPJdpt
-----END CERTIFICATE-----
Generated at Wed May 13 02:36:37 2026 by rpki-client