
$ rpki-client -vvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133342e302f32342d3234203d3e203435333036.roa
File: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier: kzOezK5pJW56638YkKVBJp7Z9zkDhQFuaxKkqL/Jq6c=
Subject key identifier: DF:6F:DD:16:C3:09:D2:81:59:86:6E:C4:30:8D:21:6A:DD:B8:96:B6
Certificate issuer: /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial: 0F600A6803E0CD4B21A8D30EB93BA7A95C921674
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133342e302f32342d3234203d3e203435333036.roa
Signing time: Sun 03 May 2026 02:21:34 +0000
ROA not before: Sun 03 May 2026 02:16:34 +0000
ROA not after: Sun 02 May 2027 02:21:34 +0000
asID: 45306
IP address blocks: 119.15.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:60:0a:68:03:e0:cd:4b:21:a8:d3:0e:b9:3b:a7:a9:5c:92:16:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Validity
Not Before: May 3 02:16:34 2026 GMT
Not After : May 2 02:21:34 2027 GMT
Subject: CN=DF6FDD16C309D28159866EC4308D216ADDB896B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:cd:df:4a:f0:b7:6a:07:b5:de:6b:05:b3:
ed:fe:53:6d:3a:94:40:a4:25:2e:f8:cb:62:e9:3a:
ea:61:98:f9:97:b3:cd:55:80:5b:17:5d:42:e5:03:
8e:a2:67:2a:e1:59:fb:e5:de:03:25:f2:8b:dd:7d:
9b:51:39:52:7e:a8:17:c8:32:d5:17:4f:7a:63:b2:
b3:e0:5c:03:ce:b3:eb:d2:32:e6:23:a5:e3:26:b6:
fb:40:a7:9d:a8:8b:5b:47:b2:7d:1b:d4:b1:ad:79:
df:ba:f6:52:b8:d2:35:a4:49:2b:ef:e9:65:b7:e6:
73:8f:ea:86:c7:c4:1e:0c:67:bd:f1:09:f0:e9:26:
7f:5c:21:e4:3b:dd:43:46:8e:10:97:09:83:56:91:
a9:7a:16:f6:54:6d:e8:52:5f:ce:31:ff:2d:1f:e4:
81:b7:36:e7:8e:a7:d2:c9:52:08:e7:03:5e:bd:e8:
09:e6:a6:44:9f:06:c6:87:28:6a:bf:64:fb:b5:f7:
11:8f:e3:a6:19:55:77:0a:ce:e0:2a:1c:46:42:08:
c6:86:88:61:bb:68:d5:db:5e:32:d0:d1:04:29:2f:
d8:b2:90:37:d1:68:99:bc:34:51:80:04:7a:f1:49:
1a:a5:ba:6e:75:19:ed:3a:b2:3b:1e:49:c1:58:ac:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6F:DD:16:C3:09:D2:81:59:86:6E:C4:30:8D:21:6A:DD:B8:96:B6
X509v3 Authority Key Identifier:
keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133342e302f32342d3234203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.15.134.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:56:d4:47:c5:ab:17:8b:59:d0:0a:29:e7:46:ad:96:a5:ba:
a3:d0:56:14:78:2a:17:ae:51:a5:90:a0:32:81:39:5f:21:ea:
ab:74:d7:60:0a:fe:3b:7c:b6:6b:19:a8:76:f1:9a:92:8f:64:
3d:26:44:86:02:8d:8f:a5:9e:fe:1d:60:65:17:ba:0a:ec:76:
49:6d:03:1b:89:f7:81:f0:f9:d9:c7:f1:83:52:94:26:24:1f:
db:c6:31:25:ea:6a:19:c7:30:58:24:ef:b7:90:91:9f:81:b0:
1b:29:a0:0d:78:ef:e5:f2:cb:0f:ba:91:52:79:04:07:7d:5c:
3c:fc:10:bc:29:f6:66:45:0c:d8:b3:b9:2b:a1:da:e9:12:74:
5d:a9:ce:ba:00:12:62:78:2c:7f:60:f0:8d:25:2d:3c:34:1f:
a3:ab:6c:8f:af:fb:96:83:f2:2f:ce:f0:63:9c:27:78:9c:c2:
5f:74:e6:4a:0d:78:6b:86:c8:fb:ab:f2:7c:ea:2f:e2:67:b3:
d3:b1:e5:8f:8b:c7:db:ca:14:f7:c7:73:6a:5a:d2:4a:88:ba:
7d:bf:be:32:fe:4f:64:22:0b:15:3e:8a:c1:fb:1f:96:87:21:
07:02:3a:75:30:a1:69:81:f9:25:ad:25:59:d6:e8:c3:fb:b0:
4a:1b:ff:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:40 2026 by rpki-client