
$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa
File: 3131302e3233322e36372e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: eKj3kbFYXhJljgLPCnpJRcO8r4cNrjZmjTTLoYD1FM8=
Subject key identifier: 2C:0F:98:5C:AC:A6:79:EF:69:89:12:52:BE:E1:2A:90:47:7A:4F:BF
Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial: 33D556BFD856EEC9C6B8154221DCC2E748BE5DB2
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa
Signing time: Sun 03 May 2026 02:18:53 +0000
ROA not before: Sun 03 May 2026 02:13:53 +0000
ROA not after: Sun 02 May 2027 02:18:53 +0000
asID: 23679
IP address blocks: 110.232.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d5:56:bf:d8:56:ee:c9:c6:b8:15:42:21:dc:c2:e7:48:be:5d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Validity
Not Before: May 3 02:13:53 2026 GMT
Not After : May 2 02:18:53 2027 GMT
Subject: CN=2C0F985CACA679EF69891252BEE12A90477A4FBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:17:46:d6:42:ee:ff:18:db:7f:f3:db:15:
3c:d7:51:77:b4:2f:58:bd:d2:c4:ea:3a:9f:c5:e1:
36:e7:75:5b:8f:ea:2e:b4:6b:97:0d:34:eb:03:46:
bd:b6:0a:ac:f7:db:49:c1:95:52:45:06:7d:a5:78:
55:e3:f3:27:79:ec:c5:64:31:a5:a2:25:92:a2:ad:
5e:ef:ef:e6:91:25:ad:f7:16:03:8c:8f:b5:a4:a4:
ad:d0:4e:f9:3d:07:95:81:73:28:d8:aa:28:3d:dc:
a0:4e:1a:bf:c6:00:76:30:d7:6d:12:40:18:86:c0:
41:d2:68:68:c2:ca:4c:eb:f1:c1:7d:86:ac:a9:18:
6c:a3:17:0e:90:6a:94:7a:2f:11:16:9d:38:30:73:
84:bc:2d:73:1a:95:e3:fa:fa:f8:bd:c1:ea:32:78:
ec:dd:1f:20:68:7c:a7:0e:92:df:50:12:bc:9e:27:
a6:95:fe:42:f2:e4:64:88:c7:2e:12:12:a4:77:cc:
25:6a:98:b8:66:a1:96:7a:6a:e3:c7:0d:04:89:b8:
a4:8d:25:49:26:44:bc:ea:60:69:7f:47:99:c8:fc:
83:98:cf:33:8a:7e:f3:60:50:42:5c:6a:1f:92:49:
0b:95:dc:fa:41:26:3e:50:eb:5c:f0:59:08:86:66:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0F:98:5C:AC:A6:79:EF:69:89:12:52:BE:E1:2A:90:47:7A:4F:BF
X509v3 Authority Key Identifier:
keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.67.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1c:f9:c3:11:ab:e7:3e:2e:92:cc:95:11:62:d3:23:b7:93:
40:7f:cc:7f:06:e4:c2:8b:1b:00:ad:cc:f2:24:c6:d2:a4:7c:
86:30:2e:41:84:c2:01:e0:57:68:a9:b1:83:a9:52:f7:ac:33:
37:ae:49:79:7b:43:c7:c2:56:3a:5f:0a:c8:58:65:17:03:2c:
95:fe:13:47:c2:48:21:aa:4f:95:e9:61:45:82:ac:d1:82:58:
e3:79:a5:65:74:e1:6f:6e:73:21:33:94:6b:30:ec:68:11:d4:
88:9d:86:69:e5:0c:7c:6b:f7:13:61:03:30:ce:04:7f:dd:d8:
3b:c1:d8:ab:8e:f3:b1:0b:0e:ec:36:79:b2:8b:13:6c:dd:18:
0e:0b:49:a7:b6:c7:78:37:1f:9d:29:17:d4:1b:ec:4e:48:d1:
c5:4e:b7:9d:d2:9c:c0:3a:0f:f2:ef:92:6c:c2:12:a5:7d:94:
92:68:f4:d0:88:67:f9:d5:74:94:04:70:7e:5c:b2:66:c3:e7:
f3:32:6d:70:2d:cb:a7:1c:9e:dc:e2:74:9e:c1:99:f2:10:2e:
7d:e5:04:f5:56:cb:70:b8:a1:f2:f9:cb:9e:c2:4f:d0:6b:dd:
98:b2:96:a0:d1:4f:d8:4e:7f:50:7a:c1:cd:af:21:59:bd:87:
72:7e:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:00 2026 by rpki-client