
$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38362e302f32332d3234203d3e203233363739.roa
File: 3131302e3233322e38362e302f32332d3234203d3e203233363739.roa (raw, json)
Hash identifier: P6mqRCOHnrSNGEgykO4qGjHwKpU66Sa9GlMa04q2dNo=
Subject key identifier: E7:5E:E1:4C:9A:4C:59:E7:B2:E9:59:9B:F7:FC:EE:B1:23:95:34:90
Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial: 69EE282BF375D726BB9D96F24353A6B333DBD7E6
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38362e302f32332d3234203d3e203233363739.roa
Signing time: Sun 03 May 2026 02:18:48 +0000
ROA not before: Sun 03 May 2026 02:13:48 +0000
ROA not after: Sun 02 May 2027 02:18:48 +0000
asID: 23679
IP address blocks: 110.232.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ee:28:2b:f3:75:d7:26:bb:9d:96:f2:43:53:a6:b3:33:db:d7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Validity
Not Before: May 3 02:13:48 2026 GMT
Not After : May 2 02:18:48 2027 GMT
Subject: CN=E75EE14C9A4C59E7B2E9599BF7FCEEB123953490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:28:58:7d:cd:df:c8:62:b4:57:82:16:f3:
ce:23:75:b8:b3:0e:83:5f:f9:b4:8a:19:a6:61:73:
a1:a6:37:b7:eb:f5:5d:0e:f5:22:0f:ff:0a:d1:1d:
f2:cb:30:68:ca:2b:ae:96:b4:11:d8:51:98:43:82:
b3:25:c7:f7:6d:67:f2:7d:8f:20:7a:5f:3c:d9:49:
d2:3f:dc:ff:13:09:86:0b:8c:bc:63:e1:41:dd:b6:
3d:b7:9a:1f:39:d7:39:ac:91:b4:54:bf:e9:24:68:
56:22:8e:26:5e:8d:d7:4c:d2:aa:91:33:91:ca:00:
5a:3f:61:b1:31:54:23:b2:01:5b:31:9b:e0:f9:43:
90:39:93:f2:c7:38:19:06:a1:5c:f5:44:a4:81:22:
1f:64:70:53:4b:d4:89:0b:45:1e:64:58:95:0d:be:
32:60:47:9c:fb:89:c0:0a:92:c1:02:72:1c:52:e5:
1d:ac:ff:59:fa:8c:16:73:5e:cd:8b:4b:bf:0c:da:
5e:5d:2c:22:5e:6d:b0:d6:19:62:a6:33:2a:6a:23:
a5:d3:0b:64:91:67:2d:27:de:6f:23:d7:a0:56:ff:
e1:de:64:50:a5:56:bc:b4:5e:c7:26:bc:1f:fc:8d:
45:3e:6d:c0:24:22:e2:88:64:61:5d:04:7b:b4:e2:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5E:E1:4C:9A:4C:59:E7:B2:E9:59:9B:F7:FC:EE:B1:23:95:34:90
X509v3 Authority Key Identifier:
keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38362e302f32332d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.86.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:4b:49:f2:d9:77:e1:ef:96:f9:df:42:5f:7d:0f:35:fb:c7:
db:08:79:30:09:d2:be:cd:ca:dc:9a:d3:98:24:97:9c:44:e5:
73:72:77:13:a5:d0:5e:9c:a8:52:7c:1e:63:91:7d:41:b8:53:
1e:48:e7:1e:ef:65:b6:21:e7:a1:b3:bf:aa:3e:34:a8:0a:9a:
3d:d8:7c:16:b1:e5:b3:a0:bc:bb:dc:48:33:19:b8:45:09:68:
1a:d5:86:18:66:3f:43:2c:ad:8d:6c:0a:58:3a:f0:2c:41:83:
01:40:97:e6:5c:48:72:33:f0:b1:98:b1:3a:df:48:a6:41:4f:
9b:d1:37:44:6a:31:94:2e:b4:63:38:32:9f:98:b9:43:11:70:
5d:45:7c:c7:1d:35:bc:a4:d7:e2:bf:d0:b7:55:4e:4b:96:6d:
03:4d:ce:df:17:4f:3a:bc:7e:8a:32:f0:d8:63:a0:22:78:20:
f8:f0:c5:20:d3:9b:ae:dd:79:40:74:03:04:eb:50:28:9b:9c:
b2:1a:b1:46:f9:49:31:ed:91:ca:05:03:48:a4:b6:07:a7:5c:
34:13:2b:ed:1c:33:72:42:66:d9:2d:b2:66:d6:f7:3d:81:ee:
b4:a3:f9:58:09:58:a8:91:f5:96:5f:d8:cd:26:fb:8f:0a:c8:
9e:9f:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:17 2026 by rpki-client