
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136382e302f32342d3234203d3e203536323436.roa
File: 3131362e36382e3136382e302f32342d3234203d3e203536323436.roa (raw, json)
Hash identifier: zTlnMrx1zN0lBaPneKbl+YRSVAmGC2G5eWUuTzXlfCc=
Subject key identifier: D7:44:0A:AF:94:C2:53:B9:4E:05:CA:77:91:BA:E2:80:38:85:A2:65
Certificate issuer: /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial: 7EE300D87D18E54D0CB467B4FCA84139844F6A40
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136382e302f32342d3234203d3e203536323436.roa
Signing time: Sun 03 May 2026 02:36:36 +0000
ROA not before: Sun 03 May 2026 02:31:36 +0000
ROA not after: Sun 02 May 2027 02:36:36 +0000
asID: 56246
IP address blocks: 116.68.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e3:00:d8:7d:18:e5:4d:0c:b4:67:b4:fc:a8:41:39:84:4f:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Validity
Not Before: May 3 02:31:36 2026 GMT
Not After : May 2 02:36:36 2027 GMT
Subject: CN=D7440AAF94C253B94E05CA7791BAE2803885A265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:d6:6f:14:71:c5:36:4c:82:4a:b7:d4:d5:
97:a6:f2:f3:e6:c0:6d:98:b7:7b:e6:c9:52:f9:40:
06:ab:96:41:61:f4:4a:e6:1a:fc:fb:cb:44:f0:54:
ee:8d:82:56:73:91:27:4a:5b:83:1d:d7:fd:26:46:
ff:77:98:9e:1d:01:b1:1c:fb:7e:df:47:90:b2:36:
cb:b5:3c:85:e2:70:2e:42:92:2b:32:28:1c:3e:e0:
83:f4:53:c4:d6:c6:fb:c0:88:de:36:84:6e:ef:ce:
7d:07:fe:4e:e8:e5:58:24:2e:02:33:d2:42:8f:a5:
e9:05:fd:e6:a7:e0:ae:b9:ae:17:39:21:d1:9f:13:
b1:2c:ec:a1:2b:7f:05:31:45:89:6a:93:01:84:68:
35:f0:44:59:57:d0:a6:e9:e2:9e:3d:04:75:62:93:
28:9a:ce:17:69:9b:17:00:ab:99:ee:31:24:20:41:
51:36:13:b8:53:42:89:ca:fe:2a:d3:5c:8c:39:2d:
d5:d1:38:aa:15:23:1f:d6:ec:51:9a:df:02:3f:ac:
93:c2:7a:38:df:53:4d:e7:29:31:0a:05:6a:5f:94:
68:f6:5c:c8:ab:a0:fa:d9:69:15:1a:03:db:71:e7:
5a:fb:90:b1:8b:3c:51:8e:17:aa:e4:5f:ab:d5:0d:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:44:0A:AF:94:C2:53:B9:4E:05:CA:77:91:BA:E2:80:38:85:A2:65
X509v3 Authority Key Identifier:
keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136382e302f32342d3234203d3e203536323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.68.168.0/24
Signature Algorithm: sha256WithRSAEncryption
21:63:53:0d:50:5d:6a:07:03:1a:65:c3:cb:32:5f:90:0a:4a:
94:cc:5c:56:cd:a1:46:16:b5:d2:c7:e9:e9:66:0e:7b:f0:97:
b4:fd:80:16:68:01:7e:20:12:30:6f:48:ea:46:d1:53:1d:88:
a4:61:53:f3:a1:23:f3:8f:e7:8a:f1:65:9d:c8:77:39:b1:85:
02:19:a4:02:99:c0:b1:02:fa:8b:b0:99:53:27:66:be:ff:33:
9e:51:87:c8:b6:b5:47:87:c2:ef:a2:bf:85:65:45:bd:f3:6b:
8f:42:aa:9b:30:d6:6d:3e:37:29:0f:18:96:b0:a8:cb:21:04:
2c:16:7e:17:dd:bd:e8:b6:75:94:86:af:eb:57:d8:f2:07:79:
37:07:d6:b8:e8:93:a8:31:54:3f:24:75:35:ee:c8:8b:b5:b3:
e7:0c:8e:80:7b:40:a5:c6:77:05:fb:ac:29:91:e3:c4:83:b8:
03:84:37:32:48:11:5a:00:2a:fd:b2:6b:30:91:8d:c4:8b:0a:
72:6a:72:b3:26:79:93:43:57:91:00:0c:06:4b:0c:3c:03:c8:
e9:db:2a:5b:19:85:9d:c4:e3:52:af:07:42:a6:92:20:17:ab:
fa:26:85:eb:7c:32:d2:21:b1:9c:f5:0a:70:09:78:89:a6:b5:
0b:c4:82:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:21 2026 by rpki-client