
$ rpki-client -vvf rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232362e302f32342d3234203d3e203338373634.roa
File: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (raw, json)
Hash identifier: ckYh7W2IVtz0AntnQ+PueP5/KAoXf5rAosyZM59PhNk=
Subject key identifier: DC:69:EB:6F:F8:1E:61:69:AE:4A:98:4F:DF:19:C3:5E:B6:8F:20:1E
Certificate issuer: /CN=90A149FB759A6A176FE4D47F5082FA60C9767022
Certificate serial: 6DAF7B67D569BA18D9BB78E213D4EE690B72EC61
Authority key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232362e302f32342d3234203d3e203338373634.roa
Signing time: Sun 03 May 2026 02:19:41 +0000
ROA not before: Sun 03 May 2026 02:14:41 +0000
ROA not after: Sun 02 May 2027 02:19:41 +0000
asID: 38764
IP address blocks: 120.29.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl
rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:af:7b:67:d5:69:ba:18:d9:bb:78:e2:13:d4:ee:69:0b:72:ec:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90A149FB759A6A176FE4D47F5082FA60C9767022
Validity
Not Before: May 3 02:14:41 2026 GMT
Not After : May 2 02:19:41 2027 GMT
Subject: CN=DC69EB6FF81E6169AE4A984FDF19C35EB68F201E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:2a:e1:f5:6f:63:b4:bc:a1:63:49:11:0b:
2c:fd:fd:88:54:43:82:21:ee:cd:5c:1e:7a:b6:97:
0d:e8:ff:ad:3c:82:e0:fa:75:35:c5:a7:94:ed:60:
c3:d6:d1:93:1d:54:f8:5e:5d:77:83:f1:d2:cd:bc:
f0:86:78:1a:44:87:c2:bf:ee:c3:ca:1e:71:ac:a0:
d7:a2:4c:c8:9e:5f:38:39:48:29:79:d4:6f:61:a7:
2b:39:ba:36:42:b3:93:35:24:a0:5b:0e:f7:f6:8a:
8c:ef:29:c9:17:0c:a7:70:7c:14:fa:93:10:b7:07:
e8:6a:92:1d:ae:33:cb:da:8f:bf:a5:40:41:5f:1d:
30:b8:59:57:59:e1:2c:12:f1:f1:7f:3c:b2:bf:de:
aa:03:67:c3:2c:7c:18:ee:ed:96:5c:f2:1b:80:39:
10:f1:31:22:4a:2e:d5:9a:1c:60:49:4c:5f:8e:b2:
b4:0f:83:aa:2e:5a:55:71:e3:05:0e:e8:ab:75:c5:
fa:a2:8b:77:92:fd:33:f6:8d:e8:e1:3c:fe:ba:05:
98:3f:c9:be:06:72:fb:eb:be:dc:f8:f5:d1:92:7a:
83:82:5e:36:a7:66:c6:ef:e6:fc:f7:2c:80:43:d1:
9c:d4:99:30:9b:25:1b:13:ef:95:0e:ba:73:7c:d6:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:69:EB:6F:F8:1E:61:69:AE:4A:98:4F:DF:19:C3:5E:B6:8F:20:1E
X509v3 Authority Key Identifier:
keyid:90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232362e302f32342d3234203d3e203338373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.29.226.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d5:60:98:87:c9:7d:b6:88:ee:fd:49:e1:42:6d:b0:22:27:
49:dd:96:13:ad:ae:c4:ad:23:a6:17:f7:2b:73:c9:13:b6:76:
88:03:c0:f9:5e:a5:57:db:57:fe:99:bf:0b:31:90:21:8c:f0:
46:e1:c0:c9:5a:0d:58:db:50:5e:14:79:2d:bb:6d:0e:9f:91:
a2:f9:8a:9b:9d:bf:04:c4:bc:aa:65:ae:2e:4c:8e:8e:cf:c6:
8d:70:a0:be:ff:11:f7:b3:98:54:c9:48:a5:8e:79:ac:61:5a:
c6:35:f5:1e:b7:f8:67:4f:5b:a0:b9:bf:51:0c:25:ae:b4:91:
aa:10:94:df:ef:86:db:ad:5b:b3:c9:38:e8:04:39:33:9a:cf:
02:3e:3c:43:b6:c1:d6:40:1e:28:7c:4f:dd:67:cc:f6:9a:53:
11:29:57:e3:f8:d0:02:fa:f2:9e:f4:7c:b9:3c:2d:d2:e0:db:
d1:a6:a0:3c:e5:44:ba:bb:a0:04:52:9c:fe:45:3e:5f:b0:36:
6b:9d:19:b2:a0:64:e7:15:87:a8:f7:e3:5a:3f:bf:57:d9:92:
5b:d2:d6:1e:d1:1b:86:48:7d:fd:1d:e9:33:43:f1:7e:8a:4c:
93:be:26:f1:cc:b4:14:fb:cf:75:c0:64:9d:5e:a7:65:e5:d9:
ca:63:11:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:20 2026 by rpki-client