
$ rpki-client -vvf rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e392e302f32342d3234203d3e20313532303430.roa
File: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (raw, json)
Hash identifier: 9NjGQraMtFt8WFleFmys2JeiEGfDbejk4iig/XaEVZ4=
Subject key identifier: 61:78:6F:B2:2E:92:42:B7:95:1F:29:73:D9:B2:0D:4B:40:57:4F:7E
Certificate issuer: /CN=00095019ECFE138568A45C973E2550DDCDFE24F9
Certificate serial: 20ACBFAD32A4F8C50BA79CBAE0DA25B58B3CE649
Authority key identifier: 00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e392e302f32342d3234203d3e20313532303430.roa
Signing time: Sun 03 May 2026 02:34:20 +0000
ROA not before: Sun 03 May 2026 02:29:20 +0000
ROA not after: Sun 02 May 2027 02:34:20 +0000
asID: 152040
IP address blocks: 180.94.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl
rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ac:bf:ad:32:a4:f8:c5:0b:a7:9c:ba:e0:da:25:b5:8b:3c:e6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00095019ECFE138568A45C973E2550DDCDFE24F9
Validity
Not Before: May 3 02:29:20 2026 GMT
Not After : May 2 02:34:20 2027 GMT
Subject: CN=61786FB22E9242B7951F2973D9B20D4B40574F7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:18:c6:c8:0a:63:7a:94:c5:69:44:b8:59:
55:4c:d7:7f:e8:33:ed:4e:22:19:d7:80:71:c2:32:
aa:71:23:12:b6:f5:c4:d6:35:f1:26:2a:1e:7c:2c:
67:84:7b:8f:7f:de:ea:99:07:be:89:b9:e2:a6:2d:
ad:3a:99:25:39:32:bf:c8:1b:b3:1b:04:3b:5f:14:
0d:ef:ae:12:bc:3a:e1:12:59:77:b0:81:54:bc:30:
8a:bc:05:e4:45:d1:4a:58:93:1d:b4:2a:a2:71:39:
f2:5e:bc:f8:c0:df:f9:ae:11:38:f5:06:b0:71:28:
85:48:0e:93:f4:f4:91:b8:2a:8e:71:53:9b:0b:f0:
65:4b:a8:fb:10:f9:a2:6a:76:42:95:00:dd:c1:8f:
1f:1d:37:f6:b5:c7:7b:ff:a9:3f:17:65:14:40:d9:
70:71:0a:9a:2c:73:19:a6:b1:23:f5:d8:4b:c8:24:
03:11:f3:18:c4:aa:8c:83:6f:31:65:c8:c6:38:29:
7a:42:d9:71:15:12:19:2a:f9:89:86:5c:02:8a:32:
f2:a0:55:14:00:f0:8c:32:3d:6a:80:3e:ec:e1:dd:
70:41:68:bb:e4:e4:c8:7e:4c:53:b3:cd:e2:53:22:
3d:07:63:ec:9f:a1:c8:66:d2:71:a5:5b:92:30:88:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:78:6F:B2:2E:92:42:B7:95:1F:29:73:D9:B2:0D:4B:40:57:4F:7E
X509v3 Authority Key Identifier:
keyid:00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e392e302f32342d3234203d3e20313532303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.94.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:87:28:fd:62:6f:91:5e:0e:d5:3e:06:0e:a8:cd:f1:e8:77:
48:da:42:44:1f:73:1e:f4:2d:de:a3:dc:5d:d2:3f:67:4d:e9:
3d:8d:d9:64:91:94:46:6a:2b:d6:9b:1f:e9:92:79:32:e5:0c:
48:ab:a8:a9:7e:39:47:1c:df:b8:0f:ec:46:37:7a:a3:7e:02:
08:5e:64:62:85:f3:c9:16:2c:8b:d2:e1:44:35:fd:94:e4:03:
8a:eb:16:2c:0b:85:4e:a5:87:66:f2:24:77:d0:f4:38:fc:f6:
2b:99:fb:32:d1:24:be:c0:94:31:c1:bb:c5:6e:08:a8:ff:03:
82:db:66:a3:93:be:1b:dc:7a:5b:75:16:51:d1:6d:0e:57:b3:
1a:1c:59:8e:6c:33:36:5e:2e:f1:7d:40:94:05:18:94:94:7c:
b9:6d:59:d9:1e:ca:44:4d:a2:b0:da:94:34:98:24:9c:f4:d5:
2c:95:7d:1b:90:62:3c:eb:f5:61:e6:ce:91:12:59:ed:49:b7:
21:e9:ba:51:83:23:ec:34:3b:3d:e3:28:e7:66:af:36:69:df:
5e:85:7c:b2:ba:6f:ed:c8:85:18:af:3e:81:8f:b6:fb:14:86:
e2:b3:04:23:5b:ed:5e:67:e1:ca:e5:e3:2a:cb:11:0e:2e:bb:
90:8f:bf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:32 2026 by rpki-client