
$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39342e302f32342d3234203d3e20313532373830.roa
File: 3131302e3233322e39342e302f32342d3234203d3e20313532373830.roa (raw, json)
Hash identifier: lItal3/607xv2k+A+/tmqQr5shXtK1LGtLqtma3bLYg=
Subject key identifier: CD:C1:68:6E:CE:A3:46:91:7D:B1:E5:2B:CA:46:51:BE:A7:AD:34:48
Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial: 6B24557A7EC5CB0D6272452372B3C543B11A543A
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39342e302f32342d3234203d3e20313532373830.roa
Signing time: Sun 03 May 2026 02:18:56 +0000
ROA not before: Sun 03 May 2026 02:13:56 +0000
ROA not after: Sun 02 May 2027 02:18:56 +0000
asID: 152780
IP address blocks: 110.232.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:24:55:7a:7e:c5:cb:0d:62:72:45:23:72:b3:c5:43:b1:1a:54:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Validity
Not Before: May 3 02:13:56 2026 GMT
Not After : May 2 02:18:56 2027 GMT
Subject: CN=CDC1686ECEA346917DB1E52BCA4651BEA7AD3448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:8b:b6:52:96:13:8c:44:91:37:ce:13:54:
f5:3a:82:90:65:15:67:6c:0a:16:f9:db:71:46:0d:
cc:e6:3f:29:6d:1e:04:21:09:d4:82:24:d9:a0:a9:
d8:08:fa:fd:16:a3:01:d9:66:ac:36:b1:ba:3d:d8:
35:4c:44:9f:e6:d2:6e:af:88:83:c4:ab:f5:66:50:
32:64:77:3f:e6:55:c2:87:ba:61:00:9b:9a:97:b8:
28:34:87:8b:41:be:ce:8b:9d:ec:bb:a7:89:22:62:
4a:36:b2:c3:12:2a:23:47:91:08:cc:43:b9:99:f2:
a6:89:09:55:f6:a2:1b:49:60:b7:47:8a:e0:45:e0:
a6:1c:4c:83:f6:b1:96:e0:b0:53:49:99:63:a2:16:
07:f0:82:a1:75:26:33:68:af:47:40:e0:80:02:13:
7b:07:4d:b7:67:8f:38:78:22:7b:42:9d:d7:a0:e3:
0c:25:a2:a1:d4:21:d1:d0:08:fc:dd:08:57:ca:e0:
dd:bf:ab:fd:47:87:53:56:f7:04:69:b7:31:03:52:
be:db:f2:37:c2:0e:fc:42:e4:d1:ba:6b:e6:06:62:
9d:bd:e2:b4:a5:d3:5f:88:c1:ba:13:3b:45:09:38:
d1:c9:ae:c0:2c:69:4b:30:e8:10:e0:73:ae:ab:f6:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:68:6E:CE:A3:46:91:7D:B1:E5:2B:CA:46:51:BE:A7:AD:34:48
X509v3 Authority Key Identifier:
keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39342e302f32342d3234203d3e20313532373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.94.0/24
Signature Algorithm: sha256WithRSAEncryption
71:9f:02:d9:7a:30:23:55:12:f5:24:d8:d6:6b:b0:0e:48:7c:
df:1e:f8:db:d8:a0:10:54:a6:91:fa:3f:dc:3b:55:f2:41:ea:
b0:f6:93:dc:55:65:ce:55:4c:ed:05:e0:8b:dc:24:8b:fe:8f:
a2:eb:89:8f:91:07:fe:b4:89:ba:8f:9e:89:60:fd:38:f8:fd:
fc:93:88:d8:46:fb:37:38:10:6e:3c:c1:47:7c:72:fd:2a:02:
aa:87:24:0e:6f:26:c1:e8:95:3f:3a:c4:fc:51:90:f1:f2:d9:
4c:17:1e:4f:05:7f:a6:c7:e6:11:ae:df:71:2b:4b:94:a8:58:
36:1b:b0:55:2c:15:42:39:f4:7e:de:6c:02:68:d2:2e:7f:b4:
87:47:60:ad:3f:9c:95:60:50:41:b6:f0:9a:8e:a5:0b:58:00:
2d:01:da:6c:9f:9d:b9:f1:57:e4:2b:ea:27:8d:22:15:14:f2:
78:7b:25:af:2a:06:79:f7:33:1b:84:87:90:4b:67:29:3c:ae:
46:af:22:71:07:be:14:ab:fc:38:c3:37:e8:02:ec:14:f8:e7:
3f:2d:64:fc:a6:ae:fa:e3:9d:26:f3:e4:3d:35:0e:1c:ef:5b:
02:80:fa:df:9b:fe:72:65:29:de:92:54:89:a7:2e:9a:b2:ea:
5a:4e:6d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:38 2026 by rpki-client