
$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39332e302f32342d3234203d3e20313532373830.roa
File: 3131302e3233322e39332e302f32342d3234203d3e20313532373830.roa (raw, json)
Hash identifier: B8BfGCGdGHEzWw/SpDzAIhKIFigCj8hgRWo82pHIpmY=
Subject key identifier: 68:66:54:80:40:3B:12:3E:24:DF:74:B0:07:33:2F:00:59:CF:6C:09
Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial: 46C94BB9FAE551A69DFB2D06AE486B23A126567C
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39332e302f32342d3234203d3e20313532373830.roa
Signing time: Sun 03 May 2026 02:18:46 +0000
ROA not before: Sun 03 May 2026 02:13:46 +0000
ROA not after: Sun 02 May 2027 02:18:46 +0000
asID: 152780
IP address blocks: 110.232.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:c9:4b:b9:fa:e5:51:a6:9d:fb:2d:06:ae:48:6b:23:a1:26:56:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Validity
Not Before: May 3 02:13:46 2026 GMT
Not After : May 2 02:18:46 2027 GMT
Subject: CN=68665480403B123E24DF74B007332F0059CF6C09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:20:32:40:c4:5e:d9:15:f1:6f:7e:0e:fd:
38:72:51:99:5c:61:fa:67:b5:e8:53:16:81:d4:03:
d4:be:52:e8:49:f1:9b:1e:58:cb:29:e2:c3:ea:85:
ab:65:47:54:66:5f:50:c4:2b:45:97:c0:99:99:da:
d9:44:50:26:d2:17:1a:06:df:83:07:63:2d:4e:ee:
b6:ea:ee:92:23:b7:14:66:da:b9:0b:ce:af:6d:bf:
65:46:43:f5:44:c1:c6:20:04:5b:b0:41:0c:1d:58:
e3:68:70:7a:f0:e9:8a:4a:50:3d:74:b5:dd:70:a5:
12:92:57:d9:6c:1f:b2:05:af:f0:ab:4b:ea:43:28:
62:3a:74:95:f8:3f:ed:76:bd:04:8e:93:90:f7:44:
ee:86:be:6d:4e:e6:fc:03:b1:ef:7f:9c:d8:91:0e:
99:eb:00:f9:8e:56:dd:6d:cd:7e:c1:7b:e6:13:f5:
51:61:51:f3:a3:3c:1a:51:00:8b:bb:b7:c5:6d:b9:
f9:ba:67:4c:f8:0f:b8:70:29:dd:0b:62:8a:62:5b:
02:55:ed:19:5e:ca:3c:71:a9:0f:0c:ec:37:78:c1:
d8:e8:4d:fa:a4:cc:1a:f9:ca:ea:11:cf:f8:96:dd:
d0:d3:14:a0:19:d5:5e:60:a1:ab:76:33:8a:59:bb:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:66:54:80:40:3B:12:3E:24:DF:74:B0:07:33:2F:00:59:CF:6C:09
X509v3 Authority Key Identifier:
keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39332e302f32342d3234203d3e20313532373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.93.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6e:4f:93:58:e1:15:5b:e2:b4:3e:22:09:1d:76:41:50:84:
71:16:44:17:ca:83:93:eb:48:cd:9b:85:0a:99:cb:d1:3d:fb:
1b:90:44:ae:8a:61:52:6a:fe:3d:8f:f5:c7:2a:fe:78:78:6d:
0b:e1:45:0f:a7:11:7b:85:ba:50:f9:d8:0f:3f:42:38:e7:91:
34:b2:95:e7:b3:ae:e6:6b:eb:9b:3a:df:8e:49:dd:84:26:6f:
11:d3:cf:eb:49:c2:c6:f1:47:3c:0d:68:1c:4d:e3:87:dc:a1:
5d:32:86:76:9e:de:ba:a8:99:4c:5a:ca:78:d2:5d:89:02:5e:
bd:48:2a:22:e0:22:46:d8:09:76:87:8a:8b:a2:97:ec:74:d2:
31:5a:c0:99:74:9a:af:a8:b1:10:47:7c:50:ce:ac:49:3a:e9:
f2:52:b4:05:0f:d5:ae:14:8c:21:a6:6e:a5:00:e6:3f:d0:83:
c7:19:85:68:a7:fd:c8:f0:81:c0:a9:55:5d:98:7c:35:b6:f2:
26:50:4f:83:f8:93:f0:6d:94:e1:2b:0f:bd:95:44:a0:fc:4f:
ee:19:f4:2e:d1:1d:46:ad:a5:e5:ac:61:d6:12:7b:84:5b:04:
31:d4:83:79:88:64:66:43:02:7f:5e:69:cb:9c:0e:dc:c9:7c:
d2:20:e0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:42 2026 by rpki-client