
$ rpki-client -vvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133332e302f32342d3234203d3e203435333036.roa
File: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier: 45AAQ0VUPgUlngwmQc08RYng8iNJmTJSeNFh2/3cLi0=
Subject key identifier: 67:23:06:04:7D:E5:55:59:18:B5:C8:D9:AC:79:C1:AE:8B:E5:2F:C5
Certificate issuer: /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial: 503F9334C813F6C93A8C8453178864AD1294FE1B
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133332e302f32342d3234203d3e203435333036.roa
Signing time: Sun 03 May 2026 02:21:36 +0000
ROA not before: Sun 03 May 2026 02:16:36 +0000
ROA not after: Sun 02 May 2027 02:21:36 +0000
asID: 45306
IP address blocks: 119.15.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:3f:93:34:c8:13:f6:c9:3a:8c:84:53:17:88:64:ad:12:94:fe:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Validity
Not Before: May 3 02:16:36 2026 GMT
Not After : May 2 02:21:36 2027 GMT
Subject: CN=672306047DE5555918B5C8D9AC79C1AE8BE52FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:58:84:91:5d:c5:2d:56:08:28:63:cd:46:
bc:98:76:06:62:e1:65:e6:82:42:dd:2f:09:5c:51:
93:fe:be:96:3a:b1:9c:83:dd:ff:2a:e1:67:6c:9c:
de:71:3a:3b:e8:ae:85:b6:d6:a3:00:bc:f3:98:a2:
43:5d:d9:ca:e7:b0:7c:0c:d4:0d:c7:82:2a:bc:23:
f9:e8:c1:5e:8d:bf:44:49:5b:15:9a:d2:79:10:af:
fb:6f:a8:d3:47:2c:5e:a5:de:07:d4:75:9c:a3:27:
15:8c:30:d2:49:f3:21:20:55:a2:57:ed:0a:53:00:
ef:50:72:cb:43:df:8b:bb:93:da:1c:1b:5d:07:69:
a2:0d:13:fd:fb:11:30:85:ec:c8:24:0b:66:ee:ce:
f1:54:b6:bf:32:98:e7:ae:d4:f1:ac:23:72:26:2d:
11:9c:6f:6a:f1:e3:9d:3a:f4:c6:c1:17:09:96:c9:
f6:7c:83:e9:6b:ac:6c:b1:29:52:b4:1e:be:67:6e:
27:97:e0:0b:2d:6c:67:42:96:68:69:74:68:6d:33:
7c:c1:5b:c9:6f:d3:d1:17:eb:dc:d9:4f:b6:4a:d3:
e3:4c:3b:cf:b1:4e:77:bb:0a:d7:fd:b2:fe:cc:1c:
20:b2:1f:b0:3a:6f:aa:cd:5b:94:0c:6d:b1:65:c7:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:06:04:7D:E5:55:59:18:B5:C8:D9:AC:79:C1:AE:8B:E5:2F:C5
X509v3 Authority Key Identifier:
keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133332e302f32342d3234203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.15.133.0/24
Signature Algorithm: sha256WithRSAEncryption
17:09:8c:10:26:b5:e2:70:61:7c:72:86:eb:c1:17:c0:c8:ad:
7e:09:32:ed:3c:a0:06:ea:5a:03:5f:1e:76:c3:08:c6:31:0d:
05:f5:42:5d:ba:7c:d3:79:b4:0e:85:60:8e:94:90:63:3a:06:
4d:22:88:f0:24:1c:98:0f:02:d3:7e:32:35:55:64:b0:7d:8b:
7e:5c:9b:0e:a7:2d:d5:4d:1f:4e:bc:e5:cb:9f:e9:3a:e3:00:
65:87:4e:c0:61:6a:a9:ab:5d:6a:e1:98:79:66:1b:30:21:eb:
3a:c7:43:a0:00:1c:44:91:98:54:2f:03:70:54:fe:14:78:ce:
9a:2d:0d:f0:f7:b8:70:e9:34:7a:0b:8c:09:ea:9c:a1:21:9c:
8c:08:de:01:3b:cf:9d:c9:7d:08:5e:71:a0:de:99:0b:56:b3:
e1:20:fe:d3:f4:89:e2:b1:7e:3b:4c:2e:e4:6f:08:c8:53:42:
ec:07:37:32:23:72:f1:b7:19:e8:bc:b5:f9:01:d5:6b:0d:a1:
09:56:0c:c4:0e:30:92:19:30:0a:45:6a:23:7e:94:71:05:2e:
45:1e:f8:a7:6c:61:ef:99:63:35:0f:91:bd:b5:38:73:1f:5c:
cb:dc:1c:27:4c:7a:32:9e:54:4c:b5:69:95:4e:a4:5f:a0:59:
ac:54:d4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:01 2026 by rpki-client