
$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36342e302f32342d3234203d3e203233363739.roa
File: 3131302e3233322e36342e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: 3IN/PTtU+C0W77CMhoBipBTjoP09yMq6uzP39QujlYU=
Subject key identifier: 28:A2:28:3F:D0:CB:D0:6D:FD:24:C4:49:B5:A1:1A:8C:50:34:CD:96
Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial: 805040F178BB91FE2259A17B4A1B47722B2992
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36342e302f32342d3234203d3e203233363739.roa
Signing time: Sun 03 May 2026 02:19:01 +0000
ROA not before: Sun 03 May 2026 02:14:01 +0000
ROA not after: Sun 02 May 2027 02:19:01 +0000
asID: 23679
IP address blocks: 110.232.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
80:50:40:f1:78:bb:91:fe:22:59:a1:7b:4a:1b:47:72:2b:29:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Validity
Not Before: May 3 02:14:01 2026 GMT
Not After : May 2 02:19:01 2027 GMT
Subject: CN=28A2283FD0CBD06DFD24C449B5A11A8C5034CD96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:be:3e:c4:fb:c2:9f:28:60:1f:fb:c3:3e:
3b:6f:18:15:ee:f4:0b:c4:ac:8e:b9:47:af:a1:3e:
7d:3d:d1:b6:1a:63:ce:f8:95:a2:bf:21:ad:64:fe:
46:18:51:26:b3:c1:4e:1a:ed:d5:91:cf:e1:e8:ec:
d3:b7:1a:0c:69:f9:94:60:f9:3b:fa:ba:e4:0f:11:
02:78:0a:67:b6:f7:80:bd:7f:ba:23:cc:60:b4:8e:
cc:f0:0f:7d:e1:81:69:66:89:82:1a:0e:1d:a6:16:
ff:19:5c:70:75:f2:49:d3:df:b1:9c:63:c1:e7:d6:
c2:4c:fb:a7:d9:bc:7c:cd:ce:37:d4:20:63:8b:43:
58:30:71:53:e0:7c:7d:bd:9e:56:2f:fa:ff:64:36:
68:c3:ba:fb:07:54:61:2a:56:e1:3c:b0:db:30:8f:
ea:88:fd:2a:cc:29:fc:46:67:5f:ab:a4:e1:fe:93:
08:db:fa:8f:ef:bb:98:47:c3:4f:61:83:2c:e9:a1:
2b:df:dc:9a:11:77:e8:0b:5d:0e:3c:e6:44:3d:ea:
97:90:99:2f:ca:51:fe:53:f8:00:55:31:74:30:4e:
88:f9:38:31:0c:3a:50:33:1b:6f:68:ab:d3:60:1b:
3f:22:e8:2b:fc:b1:9e:73:5d:3b:ad:80:26:b7:94:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A2:28:3F:D0:CB:D0:6D:FD:24:C4:49:B5:A1:1A:8C:50:34:CD:96
X509v3 Authority Key Identifier:
keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36342e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:8b:18:51:2a:8f:dc:f0:e7:c2:2c:60:87:57:59:83:3f:09:
da:8a:8b:b2:8a:7f:c0:fb:2d:00:c4:d4:67:03:82:b9:08:39:
e3:4a:4d:5e:2b:87:5a:e7:9f:04:ea:44:8c:5e:f4:b1:b6:9b:
fc:87:41:28:6c:69:6f:eb:63:18:1d:76:c6:c6:a3:75:ce:fa:
d9:86:4a:6a:2e:cc:b7:89:5f:41:bc:ed:67:44:b0:54:cc:e8:
f4:d1:cc:c3:3a:e5:b5:2f:2c:19:68:73:88:05:11:ab:21:13:
aa:54:64:c9:b9:c7:6f:8b:03:08:8d:ad:6b:5b:40:71:08:e7:
13:b1:24:ed:70:72:e1:41:8f:29:9d:35:90:14:f7:ec:43:e7:
73:8e:6e:66:66:9d:d5:4d:d8:3b:e4:2a:69:73:b7:e7:e1:63:
43:bd:c3:20:f3:e9:8c:26:f9:36:aa:8b:e1:af:7d:d0:2d:40:
6a:45:8e:85:b5:07:fd:72:e2:2d:32:5f:6d:9e:4e:e9:ec:0f:
c7:c8:0f:68:a6:88:cb:0a:15:d0:2c:fa:82:84:9e:d9:0e:70:
f4:db:cd:6c:d0:01:c3:67:e9:13:b7:b0:2e:c0:36:f0:d2:de:
99:72:7c:75:cf:2d:09:c9:f5:ae:4c:36:98:ad:bf:4b:2e:00:
6f:e3:fd:97
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUAIBQQPF4u5H+Ilmhe0obR3IrKZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlC
RDg5MEE4NzAeFw0yNjA1MDMwMjE0MDFaFw0yNzA1MDIwMjE5MDFaMDMxMTAvBgNV
BAMTKDI4QTIyODNGRDBDQkQwNkRGRDI0QzQ0OUI1QTExQThDNTAzNENEOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/x74+xPvCnyhgH/vDPjtvGBXu
9AvErI65R6+hPn090bYaY874laK/Ia1k/kYYUSazwU4a7dWRz+Ho7NO3Ggxp+ZRg
+Tv6uuQPEQJ4Cme294C9f7ojzGC0jszwD33hgWlmiYIaDh2mFv8ZXHB18knT37Gc
Y8Hn1sJM+6fZvHzNzjfUIGOLQ1gwcVPgfH29nlYv+v9kNmjDuvsHVGEqVuE8sNsw
j+qI/SrMKfxGZ1+rpOH+kwjb+o/vu5hHw09hgyzpoSvf3JoRd+gLXQ485kQ96peQ
mS/KUf5T+ABVMXQwToj5ODEMOlAzG29oq9NgGz8i6Cv8sZ5zXTutgCa3lAYFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUKKIoP9DL0G39JMRJtaEajFA0zZYwHwYDVR0j
BBgwFoAU0J6pX/EMAWbClUyZeopJib2JCocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjAxNDMyY2MtM2JjOS00ODU4LWI1MDYtMjE4YWFiMGIwODljLzAvRDA5RUE5NUZG
MTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlCRDg5MEE4Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMDlFQTk1RkYxMEMwMTY2QzI5NTRDOTk3QThBNDk4OUJEODkw
QTg3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzNjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG7oQDANBgkqhkiG
9w0BAQsFAAOCAQEAPYsYUSqP3PDnwixgh1dZgz8J2oqLsop/wPstAMTUZwOCuQg5
40pNXiuHWuefBOpEjF70sbab/IdBKGxpb+tjGB12xsajdc762YZKai7Mt4lfQbzt
Z0SwVMzo9NHMwzrltS8sGWhziAURqyETqlRkybnHb4sDCI2ta1tAcQjnE7Ek7XBy
4UGPKZ01kBT37EPnc45uZmad1U3YO+QqaXO35+FjQ73DIPPpjCb5NqqL4a990C1A
akWOhbUH/XLiLTJfbZ5O6ewPx8gPaKaIywoV0Cz6goSe2Q5w9NvNbNABw2fpE7ew
LsA28NLemXJ8dc8tCcn1rkw2mK2/Sy4Ab+P9lw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:24:58 2026 by rpki-client