
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32342d3234203d3e203338353135.roa
File: 3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier: tykJF6DboR5k4q21U5Qq+5eJiiEi7rWGoBUT5R2EI3I=
Subject key identifier: 41:83:E7:50:5C:C5:DB:FD:EB:A8:A4:90:68:E2:D3:9E:BD:BE:92:7D
Certificate issuer: /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial: 4A5AF9DC5B5699F1C4BCECFCA2AC6771ADA5B6EC
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32342d3234203d3e203338353135.roa
Signing time: Sun 03 May 2026 02:41:01 +0000
ROA not before: Sun 03 May 2026 02:36:01 +0000
ROA not after: Sun 02 May 2027 02:41:01 +0000
asID: 38515
IP address blocks: 117.74.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:5a:f9:dc:5b:56:99:f1:c4:bc:ec:fc:a2:ac:67:71:ad:a5:b6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
Validity
Not Before: May 3 02:36:01 2026 GMT
Not After : May 2 02:41:01 2027 GMT
Subject: CN=4183E7505CC5DBFDEBA8A49068E2D39EBDBE927D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:d8:9a:75:37:ad:a5:08:99:5f:b9:7b:fd:
d2:1a:be:c4:df:59:5c:3d:48:71:bd:e4:ee:60:7c:
6b:d2:2c:60:d2:9e:a6:f9:a4:4a:b2:cf:b4:16:4f:
71:fa:46:8b:13:f6:5e:9c:48:70:4f:a1:fd:e7:f8:
ac:d7:5e:b0:9d:d9:5f:48:d1:4d:8f:44:4f:97:fd:
28:6a:f2:08:f8:7d:66:32:bb:33:ba:9a:1d:6b:ff:
0a:9c:4c:4c:5f:f3:87:7d:f7:41:e2:ab:13:b0:ed:
d2:c0:4c:a8:f0:99:a2:1b:a8:23:99:80:94:3b:b4:
b1:63:ce:96:6b:ac:1b:dc:b3:a9:a4:00:9d:9f:2d:
70:1c:89:60:a3:fe:f6:a4:9c:d3:22:03:7c:25:99:
fe:a0:60:05:af:89:20:5a:e2:0b:7b:a4:c6:4a:a9:
6c:88:62:6d:37:81:2c:3f:50:46:12:d3:22:bb:fc:
e6:3a:e6:05:9b:1d:1b:17:8c:f3:22:38:d4:f7:37:
d5:e0:3c:45:79:24:da:4a:f2:c4:af:47:b6:a6:d7:
24:57:d3:2f:2e:fb:da:fe:42:98:00:bb:63:0c:69:
41:d8:f0:1e:a5:bc:b2:45:30:77:2d:bf:27:87:80:
26:c5:4a:8a:49:3c:ad:8d:56:bf:ee:41:1c:da:76:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:83:E7:50:5C:C5:DB:FD:EB:A8:A4:90:68:E2:D3:9E:BD:BE:92:7D
X509v3 Authority Key Identifier:
keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32342d3234203d3e203338353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.74.120.0/24
Signature Algorithm: sha256WithRSAEncryption
30:04:9e:39:43:a5:5d:7f:21:31:7c:45:c9:be:45:fc:26:b9:
13:bd:55:40:cd:77:86:bb:59:ab:d3:ad:b2:2b:b4:ab:30:1c:
08:35:a5:62:7b:bd:f9:df:67:e2:39:13:13:e7:4f:34:27:92:
bc:d2:91:3f:06:80:af:22:0b:ed:e9:1c:fb:27:20:b8:24:2d:
9f:cd:17:0b:e0:7e:b1:9a:1c:4e:1d:0a:ea:9b:db:5a:51:33:
ce:22:fe:10:e8:c5:7c:41:53:2b:d5:ab:b9:5f:ae:67:92:bf:
a5:06:ae:84:08:f3:1b:12:6c:0b:da:bf:35:a5:44:12:b2:34:
24:fa:f9:f1:48:0a:e2:d7:88:94:cd:df:75:3a:d3:10:05:d5:
10:52:16:5f:ea:e9:ae:63:06:d7:e7:ba:5a:fb:f6:8d:6b:7c:
d8:a6:cd:f6:34:0b:5b:a6:8a:16:1c:18:49:1c:7f:14:7f:ac:
3e:10:1e:78:73:2d:69:f4:c7:41:11:1a:6d:0d:82:cf:af:a7:
41:cd:b3:90:b3:8b:9b:d0:3b:65:54:26:30:24:86:59:78:0b:
85:c7:c0:57:ef:8c:8a:da:8a:0b:9d:f5:22:d5:76:4a:64:2b:
2b:aa:b2:2c:11:f3:71:26:59:51:06:12:a2:92:26:b5:86:7c:
bb:f7:ac:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:57 2026 by rpki-client