
$ rpki-client -vvf rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e36382e302f32342d3234203d3e203536323334.roa
File: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (raw, json)
Hash identifier: iZLgBREB8douvHYZz9gauKXSkvDFXVOW+Mvm3xgORFU=
Subject key identifier: 5A:A6:34:54:23:F4:28:6F:D6:DD:8D:AD:13:97:32:70:7B:58:14:57
Certificate issuer: /CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA
Certificate serial: 2F1996B0AE621819CC27212FDA0A656442D4B902
Authority key identifier: 92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e36382e302f32342d3234203d3e203536323334.roa
Signing time: Sun 03 May 2026 02:29:19 +0000
ROA not before: Sun 03 May 2026 02:24:19 +0000
ROA not after: Sun 02 May 2027 02:29:19 +0000
asID: 56234
IP address blocks: 117.103.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl
rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:19:96:b0:ae:62:18:19:cc:27:21:2f:da:0a:65:64:42:d4:b9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA
Validity
Not Before: May 3 02:24:19 2026 GMT
Not After : May 2 02:29:19 2027 GMT
Subject: CN=5AA6345423F4286FD6DD8DAD139732707B581457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e0:5c:ab:dd:41:6e:de:3e:a6:70:ad:f5:f7:
d5:07:6e:ea:84:08:92:7c:37:10:34:09:69:a3:b6:
bc:86:e9:13:22:6a:ba:69:6e:63:e6:86:e1:2d:68:
c1:a9:b8:2b:92:ed:49:f1:ac:26:97:52:e1:d6:00:
19:59:5b:05:e6:4c:46:f0:01:eb:f4:1a:79:bc:40:
9c:57:6d:47:ff:0c:71:40:2b:02:58:d0:6e:b4:32:
49:00:71:2a:29:56:ec:fb:29:1e:64:18:ee:11:6d:
77:d9:5a:24:70:ff:4e:a1:9e:82:02:63:20:1c:da:
7a:fb:b6:e2:86:57:47:70:9d:d4:82:3c:5e:27:1d:
61:a4:02:cc:4f:bb:b1:e7:42:36:25:c9:f3:50:67:
aa:ef:8a:7f:fd:9e:ef:8c:81:79:8c:c7:8e:0b:fd:
ce:b3:75:d2:fd:a0:65:2e:8c:e4:6d:85:49:a8:f5:
7a:cd:7e:38:ca:4e:13:a4:2a:df:75:06:66:55:47:
0d:09:9c:48:4a:7a:74:3f:fe:4e:dd:e2:f7:37:13:
f6:6d:6b:fc:08:d2:77:57:7c:72:cc:c1:ac:db:52:
36:87:06:6c:fa:d7:2e:a6:1a:66:42:a4:b5:20:49:
62:34:3e:4f:6a:fc:c3:0f:81:e5:09:e0:e6:a4:16:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A6:34:54:23:F4:28:6F:D6:DD:8D:AD:13:97:32:70:7B:58:14:57
X509v3 Authority Key Identifier:
keyid:92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e36382e302f32342d3234203d3e203536323334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.103.68.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ca:12:3f:95:82:90:e2:24:3b:3e:d4:01:09:5c:c3:51:85:
cc:5e:bd:f1:73:70:e6:97:68:4a:04:44:49:f3:e3:2f:44:1e:
95:6f:79:45:c7:32:f9:b4:2f:88:0a:3c:7a:ce:f0:fd:22:00:
cf:3a:7b:f8:bf:3c:7f:d3:41:83:5c:56:d3:41:b4:23:f7:2c:
37:a3:8b:35:07:21:55:1d:60:32:fb:9d:fe:d2:b5:50:a9:e7:
b9:a8:65:9b:84:10:b8:44:64:32:64:a0:f6:e6:59:a6:12:12:
5a:b0:17:7d:c1:ae:c2:ee:3b:3c:c1:01:0c:9c:71:d1:7b:42:
51:fb:c8:57:3c:c1:2a:62:d1:c0:2e:49:a1:66:d1:c0:ed:ee:
c5:57:82:c9:7d:d3:64:a3:4c:70:03:28:f5:05:15:c4:5a:7c:
6f:ca:fd:ca:ff:98:d7:a5:3b:64:07:13:14:78:56:43:a4:f5:
c0:10:7b:e2:99:31:f3:ab:6e:87:ed:21:3f:ea:29:7d:6b:52:
a7:0f:fc:98:43:a5:6e:70:8e:c5:d8:6c:cd:4c:d0:be:87:06:
8d:d3:3e:ae:82:61:c8:fa:38:02:f3:0b:3d:34:cc:df:e0:7a:
cc:11:bc:73:16:84:08:3f:64:d5:26:1e:b5:3c:5c:34:0d:26:
0a:64:66:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:34 2026 by rpki-client