
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa
File: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier: iYrGJJ9iIv+cRwIblIq+9q3Q7tv/1rCHNku1x0uMX3o=
Subject key identifier: 43:43:34:E8:90:FA:F2:07:E8:19:1D:CB:72:FF:CF:82:56:15:DC:40
Certificate issuer: /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Certificate serial: 136C9842D4126AFD8525DB9F9703E452165245A9
Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa
Signing time: Sun 03 May 2026 02:18:35 +0000
ROA not before: Sun 03 May 2026 02:13:35 +0000
ROA not after: Sun 02 May 2027 02:18:35 +0000
asID: 46026
IP address blocks: 175.111.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6c:98:42:d4:12:6a:fd:85:25:db:9f:97:03:e4:52:16:52:45:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Validity
Not Before: May 3 02:13:35 2026 GMT
Not After : May 2 02:18:35 2027 GMT
Subject: CN=434334E890FAF207E8191DCB72FFCF825615DC40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:c6:b0:57:c8:fa:25:25:e0:5e:5f:0f:82:
08:47:aa:36:4d:f3:ae:b1:c1:d0:c3:0b:d6:f3:8d:
f1:e8:ad:41:84:01:a4:2e:b5:0b:b3:9e:d4:20:a5:
9c:6b:aa:33:95:fd:9a:94:66:ea:de:a2:c7:82:51:
9b:da:92:8d:dc:c1:c9:2a:e8:9d:23:fc:0e:dd:15:
8f:cf:4c:3e:03:75:78:cc:7f:b2:4d:e7:e5:a0:a6:
d9:2d:77:38:c2:53:44:a8:15:8b:3c:6a:b8:16:9b:
1b:a8:07:ae:06:39:4c:22:db:7d:21:41:9b:e0:ba:
8d:b4:f2:ba:2c:84:45:d2:56:84:45:e6:f5:e7:af:
91:f1:72:a3:a6:a8:f0:d7:e7:fb:48:3a:96:06:43:
9f:ac:76:c0:9e:0e:57:63:02:69:67:19:d3:f4:5f:
f7:ee:e0:31:d2:0e:aa:58:92:55:6c:c0:22:88:45:
81:dc:15:93:9b:c3:34:73:d7:dd:fd:87:67:7d:eb:
c7:11:e0:46:e0:dd:f0:16:52:d1:7d:12:02:65:bc:
a6:14:39:99:71:c0:48:08:e5:c2:2e:9e:15:33:15:
c5:da:9b:5a:14:51:c4:f4:e7:cf:bc:a2:09:19:93:
26:c5:46:1c:fd:74:6d:43:c4:7a:df:af:b7:be:36:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:43:34:E8:90:FA:F2:07:E8:19:1D:CB:72:FF:CF:82:56:15:DC:40
X509v3 Authority Key Identifier:
keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.111.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8b:3b:5b:0c:b2:1f:01:0a:26:65:b9:56:ff:ef:bc:6c:cd:
c4:38:c3:47:31:39:89:35:8f:12:fc:8c:57:b3:e3:8e:3c:e2:
50:69:c9:a4:f6:2b:a7:70:50:7a:46:5a:c9:cb:e6:ef:a1:1b:
b7:58:46:5b:50:16:90:e1:15:55:e6:d4:23:28:0f:9c:a5:ed:
88:16:2a:88:3b:66:1b:d0:33:a2:d0:dd:f7:7c:81:23:68:3d:
0f:5d:04:3f:b2:61:9f:6b:72:fe:90:7e:41:3d:22:af:48:a0:
72:cb:dc:28:ff:48:0f:a9:d4:58:23:84:bc:b2:36:e4:ac:50:
9a:67:d2:cd:97:14:96:c0:a4:63:57:d3:5d:2f:98:54:f8:89:
19:55:66:8c:f8:44:97:90:75:fd:4b:5a:86:9e:48:a5:2c:0e:
60:b3:2d:6e:51:be:64:ea:1e:b4:aa:0f:9a:fe:5e:d9:bb:19:
af:d9:54:e8:d0:26:4e:1a:63:e5:6a:b9:bb:4b:af:24:20:a3:
64:b5:b6:c1:04:3d:41:46:c0:66:c6:55:96:cd:f8:5c:8b:75:
a0:4d:5c:e9:93:47:84:c0:40:41:e5:89:52:0b:4c:f0:b9:b8:
a1:5e:56:22:89:fd:95:7a:ba:d8:21:ba:75:07:cb:73:53:cc:
08:d4:ce:ad
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUE2yYQtQSav2FJduflwPkUhZSRakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYy
RTNCMDc5QzAeFw0yNjA1MDMwMjEzMzVaFw0yNzA1MDIwMjE4MzVaMDMxMTAvBgNV
BAMTKDQzNDMzNEU4OTBGQUYyMDdFODE5MURDQjcyRkZDRjgyNTYxNURDNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDcawV8j6JSXgXl8PgghHqjZN
866xwdDDC9bzjfHorUGEAaQutQuzntQgpZxrqjOV/ZqUZureoseCUZvako3cwckq
6J0j/A7dFY/PTD4DdXjMf7JN5+WgptktdzjCU0SoFYs8argWmxuoB64GOUwi230h
QZvguo208roshEXSVoRF5vXnr5HxcqOmqPDX5/tIOpYGQ5+sdsCeDldjAmlnGdP0
X/fu4DHSDqpYklVswCKIRYHcFZObwzRz1939h2d968cR4Ebg3fAWUtF9EgJlvKYU
OZlxwEgI5cIunhUzFcXam1oUUcT058+8ogkZkybFRhz9dG1DxHrfr7e+NgxnAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUQ0M06JD68gfoGR3Lcv/PglYV3EAwHwYDVR0j
BBgwFoAUpmi82omtA11Ja2TPJyRaXy47B5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWZmNGViY2QtMjljZi00ZWVjLWE5MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4
OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYyRTNCMDc5Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNjY4QkNEQTg5QUQwMzVENDk2QjY0Q0YyNzI0NUE1RjJFM0Iw
NzlDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h
OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzczNTJlMzEzMTMxMmUzMTMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr293MA0GCSqG
SIb3DQEBCwUAA4IBAQChiztbDLIfAQomZblW/++8bM3EOMNHMTmJNY8S/IxXs+OO
POJQacmk9iuncFB6RlrJy+bvoRu3WEZbUBaQ4RVV5tQjKA+cpe2IFiqIO2Yb0DOi
0N33fIEjaD0PXQQ/smGfa3L+kH5BPSKvSKByy9wo/0gPqdRYI4S8sjbkrFCaZ9LN
lxSWwKRjV9NdL5hU+IkZVWaM+ESXkHX9S1qGnkilLA5gsy1uUb5k6h60qg+a/l7Z
uxmv2VTo0CZOGmPlarm7S68kIKNktbbBBD1BRsBmxlWWzfhci3WgTVzpk0eEwEBB
5YlSC0zwubihXlYiif2VerrYIbp1B8tzU8wI1M6t
-----END CERTIFICATE-----
Generated at Wed May 13 00:31:06 2026 by rpki-client