
$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa
File: 3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa (raw, json)
Hash identifier: MqabvryIEqm+pIyRWCJA4c98mPNFRAWifzaPhHkXQP8=
Subject key identifier: 4D:5F:36:78:E2:6F:10:8A:35:96:65:F2:2D:5F:68:CF:7B:23:45:2B
Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial: 54CF58DDABCC57578E2A8A3684B32D6FDFE9D106
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa
Signing time: Sun 03 May 2026 02:18:44 +0000
ROA not before: Sun 03 May 2026 02:13:44 +0000
ROA not after: Sun 02 May 2027 02:18:44 +0000
asID: 138841
IP address blocks: 110.232.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:cf:58:dd:ab:cc:57:57:8e:2a:8a:36:84:b3:2d:6f:df:e9:d1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Validity
Not Before: May 3 02:13:44 2026 GMT
Not After : May 2 02:18:44 2027 GMT
Subject: CN=4D5F3678E26F108A359665F22D5F68CF7B23452B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:71:fb:fa:e5:12:46:cb:e3:5b:2d:b4:dc:
42:85:16:83:5e:48:ae:8b:a6:b1:26:b0:aa:fb:64:
51:5f:13:84:36:1c:74:6c:2a:3e:a7:35:3e:68:88:
7d:11:3c:88:7b:6c:50:77:81:cc:1d:25:12:3a:d7:
76:62:df:b8:f9:2e:0e:5d:8b:b3:d3:d3:a9:50:c3:
0c:2b:02:06:b0:3f:14:8a:2d:f1:03:d3:a6:e1:fc:
b8:3f:ee:66:a7:68:60:43:28:a0:7e:91:89:68:cf:
0d:02:6e:7b:4a:50:f8:04:63:f9:8f:7b:48:5f:46:
ed:0c:ba:51:c8:37:4a:13:32:c3:e2:ef:f2:2e:d8:
a3:10:d8:98:0d:91:be:ef:32:44:dd:71:1d:30:e6:
43:83:bc:ae:1a:91:cf:01:f8:55:d7:9e:f0:7e:d1:
1e:6b:d6:73:bb:6e:e5:8b:25:b0:da:8d:41:ac:51:
e3:24:29:7f:c2:52:ae:ce:75:fb:24:09:b3:ee:1d:
44:60:8a:a6:cc:4d:04:1f:5f:64:ed:66:e3:20:c3:
be:4a:1c:62:2f:bf:d2:4d:79:d3:f1:99:8b:aa:c7:
26:1d:1e:cf:2f:14:a6:60:37:3a:83:b0:ce:8f:5e:
b1:42:75:41:e5:2f:11:c1:96:f2:62:05:fc:40:0e:
6c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5F:36:78:E2:6F:10:8A:35:96:65:F2:2D:5F:68:CF:7B:23:45:2B
X509v3 Authority Key Identifier:
keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.88.0/23
Signature Algorithm: sha256WithRSAEncryption
53:3c:aa:38:c8:de:49:d1:1d:5d:ef:3a:a9:ad:00:ca:38:5a:
07:74:99:65:c3:e8:4e:e7:08:0d:bb:09:b5:db:79:ca:f8:49:
7f:ad:a7:e7:31:eb:54:f9:c7:77:43:3a:bd:80:b5:f0:e3:b4:
04:cc:58:92:d6:01:50:72:8f:e7:51:f6:15:f3:b9:ad:6d:5b:
9e:1f:ac:14:4f:02:fe:b7:6c:4c:71:49:c8:83:13:1c:e5:3f:
44:de:98:d9:7d:49:6f:45:7e:35:a9:73:5c:06:96:28:16:aa:
54:8d:6a:d3:4d:2f:cc:d4:38:46:2f:75:ee:ee:e5:2e:3f:52:
29:3d:27:d5:2e:1b:79:20:d0:31:37:4d:f6:f9:da:bd:7a:05:
90:f1:f1:18:63:06:81:e6:7b:58:1f:95:1a:4a:32:ae:5d:2b:
61:ca:a4:01:45:cf:ef:9d:c5:f7:91:d7:f3:af:ca:31:a9:03:
e3:32:1e:a1:4d:95:3a:c7:e6:2c:65:76:c0:80:53:f9:21:83:
c5:99:95:94:77:37:e7:21:f6:d2:0d:d0:d3:b7:2f:fe:70:a1:
96:34:3e:e6:da:49:2b:62:0b:b4:a8:f6:d5:51:7a:0d:22:70:
7a:3a:2c:c5:de:a8:f4:f0:bf:70:33:82:80:6b:ef:70:13:da:
df:7e:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:10 2026 by rpki-client