
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132352e302f32342d3234203d3e203338353135.roa
File: 3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier: o2BW4KEu9QhR/ZgqGMngSixWkrbWulUWHKOK41U7NC0=
Subject key identifier: CD:96:AE:34:2E:9F:45:DF:18:FA:74:72:B3:DA:CE:4C:AE:A7:4F:68
Certificate issuer: /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial: 46D0D512323AAFD35DFC04E29C3E02D83EFE36AB
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132352e302f32342d3234203d3e203338353135.roa
Signing time: Sun 03 May 2026 02:41:03 +0000
ROA not before: Sun 03 May 2026 02:36:03 +0000
ROA not after: Sun 02 May 2027 02:41:03 +0000
asID: 38515
IP address blocks: 117.74.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d0:d5:12:32:3a:af:d3:5d:fc:04:e2:9c:3e:02:d8:3e:fe:36:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
Validity
Not Before: May 3 02:36:03 2026 GMT
Not After : May 2 02:41:03 2027 GMT
Subject: CN=CD96AE342E9F45DF18FA7472B3DACE4CAEA74F68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:aa:00:99:df:2d:72:a0:ad:e5:9e:b5:c7:
fd:c8:bf:11:f7:2e:47:bb:95:7b:52:90:26:bf:64:
61:1f:a5:19:05:04:30:41:d7:88:51:4e:05:0f:80:
78:df:cf:04:23:94:95:0e:be:b8:fc:ca:c6:f9:af:
1e:f0:6e:ca:ca:ce:5d:95:29:c2:af:59:15:4c:a4:
21:ea:54:e5:49:60:1a:d4:a3:c1:c8:5c:05:d1:38:
9f:72:73:51:98:42:3a:33:6f:a4:ce:86:a3:8c:f6:
fa:b9:1a:92:7d:98:68:9d:cd:62:1e:e7:46:1d:6e:
16:a7:62:d1:8b:8c:16:0a:c8:66:f5:a7:a3:1c:37:
8c:61:b7:36:4e:08:c9:3c:9f:04:cf:3d:30:9e:d9:
f0:45:f0:6c:97:49:ed:26:8f:0f:70:b6:c5:35:6b:
5f:1c:b9:ab:06:34:2b:47:96:28:20:e5:d4:eb:54:
33:87:69:ea:95:d9:8a:09:89:38:93:66:6d:65:1c:
83:65:99:79:be:8c:b7:74:fe:90:3c:a4:0f:ce:22:
f1:dc:21:56:61:7c:2b:e2:ff:55:43:ce:ca:16:92:
4b:d1:21:f4:b9:ce:11:95:66:4c:49:87:b4:94:3f:
65:2b:e6:f0:51:9d:f1:23:ff:4b:e0:20:18:59:41:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:96:AE:34:2E:9F:45:DF:18:FA:74:72:B3:DA:CE:4C:AE:A7:4F:68
X509v3 Authority Key Identifier:
keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132352e302f32342d3234203d3e203338353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.74.125.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ae:40:b8:71:77:d0:f5:ac:11:a5:42:d3:2d:9d:16:af:ff:
fd:87:f8:07:b9:0e:d3:e0:2d:9a:26:32:4f:71:3f:8d:aa:ca:
39:87:01:63:e9:3c:99:16:44:6d:c5:e1:43:e4:2d:07:62:0c:
a1:8e:73:b7:d1:5a:e2:a5:b6:40:39:43:da:a4:5a:33:91:e2:
68:7d:02:36:76:ee:83:6e:a5:42:e3:e6:df:3b:1c:04:22:db:
d9:52:ac:fc:a9:9c:3b:d5:22:e5:b5:1a:a8:b7:6e:f0:7e:91:
b9:db:6c:b7:a7:23:44:9a:dc:9a:26:4d:89:d9:1d:4c:5c:4c:
e0:d7:97:38:92:b9:cd:2b:73:68:f4:6d:27:76:2b:76:20:50:
c0:02:15:35:c9:7a:48:87:8d:3a:26:85:25:52:7d:ee:ca:64:
70:00:c8:f4:54:4a:1d:10:bf:35:db:d2:c7:d4:c3:ea:86:5e:
57:6d:83:37:98:dd:81:ac:61:f1:16:15:11:23:50:71:8c:36:
98:f0:1d:84:8c:ea:68:b6:ba:c9:90:11:d7:67:83:cb:aa:c6:
09:3d:a1:b2:2d:78:09:68:dc:f5:3d:f6:cd:8f:cc:6f:dc:5a:
60:19:f0:50:a2:f9:f7:05:29:6a:9b:a3:c0:5c:55:3c:45:c8:
28:0c:8f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:43 2026 by rpki-client