
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa
File: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (raw, json)
Hash identifier: Ckq81tABd9P/ltS1UN2BW7llZjF9ry0atyKHbIk0sEg=
Subject key identifier: 99:D1:5C:94:C0:0E:69:80:1C:83:F0:85:91:23:A4:CD:E8:09:17:92
Certificate issuer: /CN=494BBF61A7ADCFAD78873BA2370358D4C942405D
Certificate serial: 231B85779CB577AB1FA649766458E2FAA52B48CF
Authority key identifier: 49:4B:BF:61:A7:AD:CF:AD:78:87:3B:A2:37:03:58:D4:C9:42:40:5D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa
Signing time: Sun 03 May 2026 02:45:59 +0000
ROA not before: Sun 03 May 2026 02:40:59 +0000
ROA not after: Sun 02 May 2027 02:45:59 +0000
asID: 152055
IP address blocks: 210.79.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.crl
rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:1b:85:77:9c:b5:77:ab:1f:a6:49:76:64:58:e2:fa:a5:2b:48:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494BBF61A7ADCFAD78873BA2370358D4C942405D
Validity
Not Before: May 3 02:40:59 2026 GMT
Not After : May 2 02:45:59 2027 GMT
Subject: CN=99D15C94C00E69801C83F0859123A4CDE8091792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:27:3a:59:b8:87:4b:16:f7:a5:d3:17:af:
f2:cc:5f:bf:c9:7a:4b:5e:eb:bd:d1:20:01:f7:c6:
c0:b6:02:bf:82:16:f0:e5:34:8c:3f:2e:3a:f5:07:
f2:2e:6d:e9:cd:fd:33:43:38:82:e2:eb:08:4c:a2:
a3:d8:ee:fc:b1:03:99:a5:18:3f:0f:3a:ba:ec:e5:
b4:40:1f:2c:62:49:eb:b7:f8:96:0b:8d:5d:0c:8a:
05:ba:01:68:50:9e:e6:14:3d:83:3d:22:b5:e1:95:
54:a5:3b:94:56:ec:c5:d0:e7:52:10:44:44:46:59:
38:6e:4d:b7:a1:b1:27:8a:0c:31:97:4a:3f:38:d4:
7c:10:63:19:c6:23:62:ba:2c:b0:e7:28:29:fa:d9:
31:db:c2:4c:21:7b:4b:df:77:0d:41:02:ee:06:d0:
be:b7:ee:19:e7:05:41:09:ef:9b:d8:e7:9f:cc:33:
3c:8e:52:80:a9:ac:fe:cd:66:2c:07:75:65:45:9e:
4a:70:04:d5:b5:84:c7:ec:9b:0b:82:1e:f2:36:e5:
e8:f3:2e:3b:40:93:60:c4:25:cd:39:96:89:03:15:
b2:18:ae:2d:ce:75:a5:13:c5:4b:83:77:08:00:75:
ae:43:fa:a7:47:3d:1b:bc:97:3d:fc:85:c0:1f:13:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D1:5C:94:C0:0E:69:80:1C:83:F0:85:91:23:A4:CD:E8:09:17:92
X509v3 Authority Key Identifier:
keyid:49:4B:BF:61:A7:AD:CF:AD:78:87:3B:A2:37:03:58:D4:C9:42:40:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.79.138.0/23
Signature Algorithm: sha256WithRSAEncryption
24:65:b9:ce:a7:2a:4e:ba:a4:9b:9b:52:5f:57:99:2d:4a:0e:
24:66:9f:46:ca:77:65:bd:bb:01:e0:4c:45:d9:98:85:91:06:
db:cb:3e:ad:59:84:6f:49:d3:6f:dd:b9:b3:a7:2f:a5:0c:c3:
46:8e:f8:34:6d:1d:21:c1:d9:9d:fd:bb:7d:64:6f:9b:0a:b4:
cc:18:e1:44:dd:6a:7a:4a:e2:db:26:53:22:61:b0:1e:95:70:
0b:01:fe:35:d7:f5:27:4a:e9:98:ba:34:33:15:07:09:d5:b1:
9b:ed:ac:9f:56:98:94:81:6e:a0:e4:d0:d3:2e:70:05:40:26:
e2:2e:36:ea:dd:d7:df:42:da:3c:9d:74:b3:96:15:31:55:37:
c5:54:5c:60:98:01:d4:18:49:b1:54:e4:2c:c1:be:0a:7c:dd:
6a:2e:e0:9c:ac:6a:84:7c:82:87:60:86:e9:65:23:b7:5b:2c:
f4:87:81:11:3e:8e:71:a5:82:4d:65:d0:14:5a:c6:b7:41:b9:
84:46:8e:d3:0c:04:f6:df:48:0c:a2:05:88:43:d6:be:d0:ec:
06:b4:39:7f:7f:d6:52:2c:ff:d7:1e:d9:92:5d:17:df:35:4e:
5f:82:0b:36:74:5e:54:21:28:41:df:0d:be:1e:6e:20:f0:19:
5a:f1:e2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:07 2026 by rpki-client