
$ rpki-client -vvf rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3132312e3130302e302e302f32312d3234203d3e203338313538.roa
File: 3132312e3130302e302e302f32312d3234203d3e203338313538.roa (raw, json)
Hash identifier: Qwji8J+xT8rbGfCGnHVbD+4pMVAV52/CoMPr7ORCLJM=
Subject key identifier: B9:EF:A3:1E:A0:69:85:6B:CD:00:CC:CC:E9:B3:64:4D:9E:73:34:FE
Certificate issuer: /CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
Certificate serial: 45132B147C7C7A2C1B5A703E25FD0DB7320A7422
Authority key identifier: E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3132312e3130302e302e302f32312d3234203d3e203338313538.roa
Signing time: Sun 03 May 2026 02:30:37 +0000
ROA not before: Sun 03 May 2026 02:25:37 +0000
ROA not after: Sun 02 May 2027 02:30:37 +0000
asID: 38158
IP address blocks: 121.100.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl
rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:13:2b:14:7c:7c:7a:2c:1b:5a:70:3e:25:fd:0d:b7:32:0a:74:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
Validity
Not Before: May 3 02:25:37 2026 GMT
Not After : May 2 02:30:37 2027 GMT
Subject: CN=B9EFA31EA069856BCD00CCCCE9B3644D9E7334FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:e9:f4:f1:fa:73:0a:12:e1:5e:44:53:db:
24:88:e2:da:20:9f:c5:81:95:95:83:36:7a:15:60:
77:f9:03:fc:b7:26:ac:06:d2:64:0d:9e:55:02:d8:
86:f3:e0:6a:07:f2:a0:ca:f9:5a:40:f6:22:5a:16:
d8:04:ce:3f:24:18:16:a3:3c:5d:54:5a:fd:d0:f7:
95:01:6f:80:4b:a6:d5:b4:23:79:7c:43:78:eb:b4:
69:b6:f3:19:fe:12:56:f1:2f:68:7c:72:5b:9f:3b:
8b:cb:ca:71:f8:1b:81:03:36:ff:e5:73:92:c9:4e:
7b:f5:6b:d3:c7:c6:ed:fd:60:aa:8e:0e:19:5b:8a:
f4:0b:bd:57:d4:db:c6:44:19:92:a3:c1:6e:42:87:
c0:77:b2:03:4f:e6:dd:05:f3:41:68:10:88:3f:1e:
d7:16:76:b3:19:bb:4e:9c:cc:c5:e7:d7:e2:b2:6f:
2d:29:2b:dd:a8:b3:4d:d7:ab:83:63:62:8b:ae:f7:
7e:00:94:e5:c4:c5:90:ca:51:f5:76:38:3b:85:a5:
a8:0c:14:6c:bd:99:f9:77:17:ce:f5:5a:e6:65:da:
a9:6e:8b:e8:f6:07:61:6b:ef:10:61:e4:fd:ea:df:
c9:32:13:dc:e2:a9:cb:82:09:7b:6c:a7:6e:20:6f:
d9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EF:A3:1E:A0:69:85:6B:CD:00:CC:CC:E9:B3:64:4D:9E:73:34:FE
X509v3 Authority Key Identifier:
keyid:E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3132312e3130302e302e302f32312d3234203d3e203338313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.100.0.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:55:ac:82:5c:8f:ec:44:ad:f1:62:87:8e:30:6b:a2:72:18:
f5:a4:c9:e7:23:60:82:6b:4c:b2:d8:84:20:77:fa:83:8a:f6:
7c:81:72:0b:63:25:43:3e:bc:88:9b:6e:5d:2d:d5:30:1b:1b:
66:46:15:44:1c:ed:3f:fa:6c:d5:70:33:f4:29:3d:06:be:87:
5a:6b:f8:cf:5a:85:ca:f4:a6:33:59:de:6d:51:bc:06:5c:f2:
4e:97:6e:05:8a:63:44:53:86:25:03:ff:91:f1:65:09:31:a5:
62:69:32:7e:c3:f1:b2:17:dc:78:1f:ec:40:b4:64:ce:93:9c:
58:4a:44:a7:84:fd:b5:37:23:f8:93:f5:88:3f:a5:6e:59:79:
f0:db:6d:2b:5c:2f:15:cf:4b:a2:49:f4:fd:2e:19:b9:7b:2c:
6e:e1:58:aa:3a:88:58:fd:e7:96:ac:7a:1b:4e:d4:e4:d7:79:
37:4b:d0:a5:ee:1e:ba:69:3b:8e:ba:bb:a7:f2:67:02:63:03:
12:74:b4:46:90:03:b9:36:e5:74:3d:a9:2e:94:f8:78:90:2f:
67:d8:46:36:a1:58:87:fa:5f:0b:7d:9f:07:d9:33:ae:63:fd:
9a:a5:2e:5a:70:f8:46:08:fd:bf:87:e5:25:6c:8b:1a:74:22:
85:9c:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:06 2026 by rpki-client