
$ rpki-client -vvf rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa
File: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (raw, json)
Hash identifier: ILzJvkloOZdmChaklTC1z8yHQQ79CFcrInsypXVfRQY=
Subject key identifier: 9F:CE:9D:E5:08:39:42:28:72:FC:79:85:45:1D:7E:DB:7B:8B:A9:68
Certificate issuer: /CN=06083035B4010CEC337EE26F5EA15A04DD209219
Certificate serial: 041A91016ED05B8D4281A773F31327FBD98A38A1
Authority key identifier: 06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa
Signing time: Sun 03 May 2026 02:39:18 +0000
ROA not before: Sun 03 May 2026 02:34:18 +0000
ROA not after: Sun 02 May 2027 02:39:18 +0000
asID: 45294
IP address blocks: 113.212.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl
rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:1a:91:01:6e:d0:5b:8d:42:81:a7:73:f3:13:27:fb:d9:8a:38:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06083035B4010CEC337EE26F5EA15A04DD209219
Validity
Not Before: May 3 02:34:18 2026 GMT
Not After : May 2 02:39:18 2027 GMT
Subject: CN=9FCE9DE50839422872FC7985451D7EDB7B8BA968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:28:e6:0d:54:e7:55:bd:16:47:49:e5:26:
66:5a:2d:a3:49:57:3c:da:8a:03:e2:e3:a5:36:5a:
5e:f5:9c:ed:b0:1c:d7:b3:a0:ce:5b:c6:e1:43:28:
4f:5b:14:36:26:5b:92:2a:c6:59:d7:a9:f9:bc:fc:
40:0d:12:c2:ee:3a:1c:f8:cd:a2:c3:0f:9f:c4:4a:
e7:b5:f6:dd:e9:ce:66:2c:42:74:42:ee:22:36:18:
b9:f9:40:e3:31:39:69:14:dd:c1:c6:93:47:92:e8:
39:ec:74:ee:80:6f:04:9a:d7:77:04:fb:e4:a7:94:
e0:32:30:93:d8:d1:80:bf:7a:6d:00:c7:32:e6:94:
f1:e3:36:39:38:36:de:b6:28:b1:76:dc:52:1f:92:
68:e1:74:f5:e6:09:7b:50:06:61:0a:b4:c2:3a:5e:
83:32:6b:d0:6a:a3:a9:1d:60:ca:c0:03:6f:cf:60:
4f:a9:20:19:38:f2:ff:f4:a0:4e:4f:48:30:53:3b:
96:5e:b5:6b:8a:7c:5f:a5:ef:44:44:c0:3b:c3:8c:
bb:ba:d4:7e:8e:36:e2:2c:ff:7d:7d:76:40:37:2b:
04:bb:12:95:c0:40:18:b3:ab:fd:fe:f3:82:16:5c:
13:70:9e:df:5e:64:04:7f:43:7d:3b:da:14:35:f7:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CE:9D:E5:08:39:42:28:72:FC:79:85:45:1D:7E:DB:7B:8B:A9:68
X509v3 Authority Key Identifier:
keyid:06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.212.112.0/20
Signature Algorithm: sha256WithRSAEncryption
14:f0:a1:4c:1f:69:8e:f5:aa:3c:f6:7a:22:8f:89:bc:65:84:
b9:13:23:e3:25:fe:f8:62:82:da:32:82:69:9e:0e:db:b7:fa:
2a:bf:e9:0f:81:9e:b2:fc:17:75:ac:bd:22:1b:2d:58:bd:f0:
f2:b0:6b:c7:90:9c:d7:cc:46:18:1d:b3:ba:01:74:85:cb:85:
c3:66:5e:d1:0e:3c:6c:f5:34:5a:0d:25:a3:e5:b1:d1:08:6a:
fc:3e:88:a5:7a:59:e8:96:a7:0d:63:78:a0:ac:c7:17:af:1c:
ad:b2:d4:d9:5a:1d:39:df:12:50:cb:34:fe:ef:ca:9c:c7:8c:
fe:70:72:c3:e8:d6:20:35:81:01:25:a8:5f:27:86:97:c2:9c:
3f:ec:10:b7:35:ec:80:59:f3:af:bd:52:48:53:55:59:b8:c9:
70:7c:01:6c:aa:7f:8c:0e:4b:43:05:70:02:25:06:ca:25:d4:
c0:f4:9d:b6:8d:59:8e:79:98:94:b9:c0:f1:fa:39:00:6f:65:
30:9d:bf:8a:f6:3f:b4:f1:ff:9a:7b:41:ae:a3:07:52:06:27:
36:fd:b8:61:63:6c:76:99:c0:60:09:88:31:2d:22:58:db:e0:
fa:89:62:64:96:1b:37:9c:1f:28:f2:35:2d:24:99:56:9b:2f:
45:e8:09:42
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBBqRAW7QW41Cgadz8xMn+9mKOKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYwODMwMzVCNDAxMENFQzMzN0VFMjZGNUVBMTVBMDRE
RDIwOTIxOTAeFw0yNjA1MDMwMjM0MThaFw0yNzA1MDIwMjM5MThaMDMxMTAvBgNV
BAMTKDlGQ0U5REU1MDgzOTQyMjg3MkZDNzk4NTQ1MUQ3RURCN0I4QkE5NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3ijmDVTnVb0WR0nlJmZaLaNJ
VzzaigPi46U2Wl71nO2wHNezoM5bxuFDKE9bFDYmW5IqxlnXqfm8/EANEsLuOhz4
zaLDD5/ESue19t3pzmYsQnRC7iI2GLn5QOMxOWkU3cHGk0eS6DnsdO6AbwSa13cE
++SnlOAyMJPY0YC/em0AxzLmlPHjNjk4Nt62KLF23FIfkmjhdPXmCXtQBmEKtMI6
XoMya9Bqo6kdYMrAA2/PYE+pIBk48v/0oE5PSDBTO5ZetWuKfF+l70REwDvDjLu6
1H6ONuIs/319dkA3KwS7EpXAQBizq/3+84IWXBNwnt9eZAR/Q3072hQ19xIRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUn86d5Qg5Qihy/HmFRR1+23uLqWgwHwYDVR0j
BBgwFoAUBggwNbQBDOwzfuJvXqFaBN0gkhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjQ4MzMwNzQtMzMwZS00YWFhLThjMDAtMDQwODkwYTcxYTExLzAvMDYwODMwMzVC
NDAxMENFQzMzN0VFMjZGNUVBMTVBMDRERDIwOTIxOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNjA4MzAzNUI0MDEwQ0VDMzM3RUUyNkY1RUExNUEwNEREMjA5
MjE5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY0ODMzMDc0LTMzMGUtNGFhYS04
YzAwLTA0MDg5MGE3MWExMS8wLzMxMzEzMzJlMzIzMTMyMmUzMTMxMzIyZTMwMmYz
MjMwMmQzMjM0MjAzZDNlMjAzNDM1MzIzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEcdRwMA0GCSqG
SIb3DQEBCwUAA4IBAQAU8KFMH2mO9ao89noij4m8ZYS5EyPjJf74YoLaMoJpng7b
t/oqv+kPgZ6y/Bd1rL0iGy1YvfDysGvHkJzXzEYYHbO6AXSFy4XDZl7RDjxs9TRa
DSWj5bHRCGr8PoilelnolqcNY3igrMcXrxytstTZWh053xJQyzT+78qcx4z+cHLD
6NYgNYEBJahfJ4aXwpw/7BC3NeyAWfOvvVJIU1VZuMlwfAFsqn+MDktDBXACJQbK
JdTA9J22jVmOeZiUucDx+jkAb2Uwnb+K9j+08f+ae0GuowdSBic2/bhhY2x2mcBg
CYgxLSJY2+D6iWJklhs3nB8o8jUtJJlWmy9F6AlC
-----END CERTIFICATE-----
Generated at Wed May 13 09:54:44 2026 by rpki-client