
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136372e302f32342d3234203d3e203538333839.roa
File: 3131362e36382e3136372e302f32342d3234203d3e203538333839.roa (raw, json)
Hash identifier: hZtIyD/nIesbsGZTm1H2Mwit4ye5kF/zZPJZGPW6bxc=
Subject key identifier: 28:58:F2:95:30:0C:AB:01:D7:E7:73:DE:41:D9:41:1E:94:5B:71:5B
Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial: 029699A9999B443ADF2B1EC25535B18C37A8CA61
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136372e302f32342d3234203d3e203538333839.roa
Signing time: Sun 03 May 2026 02:36:33 +0000
ROA not before: Sun 03 May 2026 02:31:33 +0000
ROA not after: Sun 02 May 2027 02:36:33 +0000
asID: 58389
IP address blocks: 116.68.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:96:99:a9:99:9b:44:3a:df:2b:1e:c2:55:35:b1:8c:37:a8:ca:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Validity
Not Before: May 3 02:31:33 2026 GMT
Not After : May 2 02:36:33 2027 GMT
Subject: CN=2858F295300CAB01D7E773DE41D9411E945B715B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:f2:6a:57:c3:73:4a:99:f9:68:a0:50:59:
6d:8e:95:18:2d:04:85:d5:06:19:d5:3e:9c:8e:61:
6e:d4:53:95:d5:06:96:79:1b:5d:29:e3:67:ee:8e:
11:ea:be:50:b0:a7:5b:c3:54:b1:47:b5:37:f2:ae:
12:32:ed:55:de:8a:46:20:f4:66:c4:f8:f0:dc:af:
6c:2f:f2:d9:49:e8:1c:55:60:24:95:5c:85:73:c9:
56:8e:7d:fe:e6:d4:c4:4f:e7:42:48:f0:00:21:7e:
63:45:a2:57:cc:e0:46:c5:b9:93:c0:e0:81:4a:7f:
d3:f5:64:84:67:d9:11:64:76:a0:99:c2:d6:41:fa:
16:fa:57:9f:6a:c0:d1:0f:15:43:6a:ba:a1:56:6f:
f6:26:a0:bf:fb:08:2a:0d:d2:d6:7f:4b:4a:48:d6:
6f:c7:dd:43:f8:e4:31:44:15:df:5e:b2:46:41:14:
67:0c:1c:66:69:cb:c9:70:4f:e9:8d:26:ec:af:bf:
9d:1b:1c:7c:1b:97:b4:7a:ba:60:7e:af:f8:a4:3a:
de:c9:aa:61:22:ef:f5:5d:9e:a6:54:4e:18:85:13:
c3:f5:a2:d4:ce:4d:78:f7:38:59:8c:7b:fa:e3:2c:
03:b8:0b:42:11:8e:0a:7c:5d:1a:0f:d0:1e:70:3f:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:58:F2:95:30:0C:AB:01:D7:E7:73:DE:41:D9:41:1E:94:5B:71:5B
X509v3 Authority Key Identifier:
keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136372e302f32342d3234203d3e203538333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.68.167.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e6:aa:6c:d2:a6:ea:ab:35:27:98:5d:9b:ab:d9:e7:bb:69:
36:ea:eb:3a:25:dd:47:cf:33:44:8a:c6:09:36:a7:e3:23:2f:
93:45:d3:b6:e7:71:cf:72:a8:3b:75:b4:4c:6e:28:75:f3:b3:
df:d4:59:d8:5a:53:84:14:b4:3f:fa:71:c9:f8:01:64:91:09:
d6:b5:5a:b1:67:eb:f1:cc:d9:2d:a7:95:87:62:11:73:a9:af:
d6:67:ea:aa:09:dc:80:bb:71:09:50:c1:2e:ec:c6:1e:a0:c8:
78:b7:34:3f:83:15:d6:7c:3e:c5:79:5c:6c:06:2b:b9:e3:6c:
d8:6c:ef:41:1b:d1:8c:26:d9:3a:f7:36:55:bd:01:40:44:f3:
40:7d:ab:c8:de:17:d0:62:6f:b9:66:72:90:3a:35:f0:d9:65:
e5:e1:a5:1c:2c:de:5d:ea:40:a4:85:b5:91:1f:a1:5b:16:e8:
49:70:16:46:0d:e6:94:63:ea:3e:af:14:fe:05:d0:b5:70:1b:
e8:e1:23:40:30:13:ee:13:64:58:cb:8d:d3:28:4c:2c:10:03:
73:b6:2c:95:4c:d3:91:2a:53:4a:c4:e4:6c:70:7f:c8:49:c7:
77:77:17:91:e7:d4:f1:6a:62:ee:97:78:ef:c7:e9:9f:b3:05:
f6:53:fb:0c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUApaZqZmbRDrfKx7CVTWxjDeoymEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBEQjJDNDRFMjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIw
OTAxREI1MjAeFw0yNjA1MDMwMjMxMzNaFw0yNzA1MDIwMjM2MzNaMDMxMTAvBgNV
BAMTKDI4NThGMjk1MzAwQ0FCMDFEN0U3NzNERTQxRDk0MTFFOTQ1QjcxNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4vJqV8NzSpn5aKBQWW2OlRgt
BIXVBhnVPpyOYW7UU5XVBpZ5G10p42fujhHqvlCwp1vDVLFHtTfyrhIy7VXeikYg
9GbE+PDcr2wv8tlJ6BxVYCSVXIVzyVaOff7m1MRP50JI8AAhfmNFolfM4EbFuZPA
4IFKf9P1ZIRn2RFkdqCZwtZB+hb6V59qwNEPFUNquqFWb/YmoL/7CCoN0tZ/S0pI
1m/H3UP45DFEFd9eskZBFGcMHGZpy8lwT+mNJuyvv50bHHwbl7R6umB+r/ikOt7J
qmEi7/VdnqZUThiFE8P1otTOTXj3OFmMe/rjLAO4C0IRjgp8XRoP0B5wP3dTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUKFjylTAMqwHX53PeQdlBHpRbcVswHwYDVR0j
BBgwFoAUENssROJsoqFG73ONOfU8uwkB21IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWQyMjdkYmUtNGExYy00MGIwLTk0YTYtNzkzYmRiZGEzNzc3LzAvMTBEQjJDNDRF
MjZDQTJBMTQ2RUY3MzhEMzlGNTNDQkIwOTAxREI1Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMERCMkM0NEUyNkNBMkExNDZFRjczOEQzOUY1M0NCQjA5MDFE
QjUyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05
NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzEzNjJlMzYzODJlMzEzNjM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHREpzANBgkqhkiG
9w0BAQsFAAOCAQEAaeaqbNKm6qs1J5hdm6vZ57tpNurrOiXdR88zRIrGCTan4yMv
k0XTtudxz3KoO3W0TG4odfOz39RZ2FpThBS0P/pxyfgBZJEJ1rVasWfr8czZLaeV
h2IRc6mv1mfqqgncgLtxCVDBLuzGHqDIeLc0P4MV1nw+xXlcbAYrueNs2GzvQRvR
jCbZOvc2Vb0BQETzQH2ryN4X0GJvuWZykDo18Nll5eGlHCzeXepApIW1kR+hWxbo
SXAWRg3mlGPqPq8U/gXQtXAb6OEjQDAT7hNkWMuN0yhMLBADc7YslUzTkSpTSsTk
bHB/yEnHd3cXkefU8Wpi7pd478fpn7MF9lP7DA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:10 2026 by rpki-client