
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa
File: 3131362e302e302e302f32312d3234203d3e203539313339.roa (raw, json)
Hash identifier: sLtYSAekx4+fWo5lqk7vJ2/nnu8bKXpxqT5BWuDEsBY=
Subject key identifier: 27:0C:1F:2F:0B:7E:47:78:9F:EF:50:32:5B:C6:B6:EE:6A:08:91:45
Certificate issuer: /CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75
Certificate serial: 0E56110677B5E2F2C1B4AF8C7772CEFE6BD06166
Authority key identifier: 91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa
Signing time: Sun 03 May 2026 02:46:11 +0000
ROA not before: Sun 03 May 2026 02:41:11 +0000
ROA not after: Sun 02 May 2027 02:46:11 +0000
asID: 59139
IP address blocks: 116.0.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl
rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:56:11:06:77:b5:e2:f2:c1:b4:af:8c:77:72:ce:fe:6b:d0:61:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75
Validity
Not Before: May 3 02:41:11 2026 GMT
Not After : May 2 02:46:11 2027 GMT
Subject: CN=270C1F2F0B7E47789FEF50325BC6B6EE6A089145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:74:92:51:f7:97:e0:f1:63:ce:00:4a:0b:
60:22:87:86:dc:87:34:de:dd:e3:44:e3:67:53:eb:
c2:d1:ee:9b:cd:65:ec:61:6e:61:84:b6:f5:78:ab:
3f:01:37:46:11:f1:89:75:82:00:1d:2e:b1:b1:fc:
e8:5c:b3:91:7f:be:a2:fb:37:eb:a1:b0:f6:9b:90:
79:9f:6a:fc:f8:3e:bf:d7:69:e3:b4:e6:3d:32:40:
79:5f:fc:c1:7f:7f:ca:e2:de:2e:40:7a:86:28:27:
7a:a3:43:79:13:9b:4a:4a:f5:bb:0a:8e:9e:40:5a:
93:69:c6:69:d3:95:36:01:63:43:44:0d:7e:47:b3:
db:28:c9:f2:fe:65:f3:85:05:b6:00:1d:60:c8:ea:
e5:d1:73:06:bf:7c:6c:df:05:54:68:9a:59:3b:78:
22:d8:31:70:67:9a:62:71:7f:c2:0f:06:fd:71:f9:
20:fd:f8:a1:9d:f7:da:ab:0d:a2:4d:1b:76:01:b3:
20:43:91:98:05:8b:0c:3d:5c:26:50:e6:ee:1e:3c:
7d:a0:1f:aa:5d:ac:87:de:52:d9:f1:84:cd:6f:86:
66:46:b3:be:a0:b2:70:c8:58:ec:0b:65:94:a9:c7:
f2:f9:5f:86:75:b0:d3:40:03:e7:01:9a:42:cf:ec:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0C:1F:2F:0B:7E:47:78:9F:EF:50:32:5B:C6:B6:EE:6A:08:91:45
X509v3 Authority Key Identifier:
keyid:91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.0.0.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:6e:36:b1:04:12:a3:2a:46:4d:29:22:f1:89:67:93:f9:be:
03:5f:83:32:91:7e:99:8d:74:24:d1:ff:5e:99:96:1c:e4:40:
dd:5f:cd:1f:c0:2d:38:83:84:3a:74:30:5a:8d:9b:af:1b:e8:
c8:a3:0b:1f:f2:8c:81:13:55:de:46:4f:40:bc:99:68:0c:75:
8b:99:26:47:88:6f:98:07:80:75:d9:fc:e6:25:80:76:ac:01:
de:df:3f:ac:c1:cb:40:22:a9:4c:fb:a4:ba:31:27:91:6e:3a:
87:b2:ec:a7:ac:aa:90:5d:75:31:7b:59:c0:61:e8:f0:4c:8d:
a0:23:77:50:16:b3:58:18:e3:60:82:42:85:43:0c:56:57:99:
f8:a4:ed:65:c5:12:11:29:be:73:db:a5:13:8d:50:93:26:5b:
a3:2c:b9:a1:99:7a:09:25:6e:e9:ae:8a:d8:16:b5:26:c1:47:
af:9c:97:28:dd:63:f0:e1:5b:d3:17:f8:f8:9e:37:21:38:90:
15:74:d8:89:52:f5:da:1d:95:d5:d5:1b:4b:dc:09:6d:c6:f9:
94:f7:72:f1:12:63:ff:2e:a8:c3:21:7b:09:5c:85:97:fe:43:
10:56:4a:b8:6b:b7:55:7d:6e:f0:c0:92:09:c9:f1:32:24:17:
a4:30:04:71
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUDlYRBne14vLBtK+Md3LO/mvQYWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE3NkNCNkJCRTUzOTA4QUIyMUFFRkZDNEY4RjE1MUQ5
QTc0N0U3NTAeFw0yNjA1MDMwMjQxMTFaFw0yNzA1MDIwMjQ2MTFaMDMxMTAvBgNV
BAMTKDI3MEMxRjJGMEI3RTQ3Nzg5RkVGNTAzMjVCQzZCNkVFNkEwODkxNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nHSSUfeX4PFjzgBKC2Aih4bc
hzTe3eNE42dT68LR7pvNZexhbmGEtvV4qz8BN0YR8Yl1ggAdLrGx/Ohcs5F/vqL7
N+uhsPabkHmfavz4Pr/XaeO05j0yQHlf/MF/f8ri3i5AeoYoJ3qjQ3kTm0pK9bsK
jp5AWpNpxmnTlTYBY0NEDX5Hs9soyfL+ZfOFBbYAHWDI6uXRcwa/fGzfBVRomlk7
eCLYMXBnmmJxf8IPBv1x+SD9+KGd99qrDaJNG3YBsyBDkZgFiww9XCZQ5u4ePH2g
H6pdrIfeUtnxhM1vhmZGs76gsnDIWOwLZZSpx/L5X4Z1sNNAA+cBmkLP7LZlAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUJwwfLwt+R3if71AyW8a27moIkUUwHwYDVR0j
BBgwFoAUkXbLa75TkIqyGu/8T48VHZp0fnUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2U4Y2Q5N2UtNTZmNS00Y2E1LWE4NWMtNTVhMzIzZjA2MDhjLzAvOTE3NkNCNkJC
RTUzOTA4QUIyMUFFRkZDNEY4RjE1MUQ5QTc0N0U3NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MTc2Q0I2QkJFNTM5MDhBQjIxQUVGRkM0RjhGMTUxRDlBNzQ3
RTc1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkGCCsGAQUFBzALhn1yc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4
NWMtNTVhMzIzZjA2MDhjLzAvMzEzMTM2MmUzMDJlMzAyZTMwMmYzMjMxMmQzMjM0
MjAzZDNlMjAzNTM5MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDdAAAMA0GCSqGSIb3DQEBCwUA
A4IBAQBKbjaxBBKjKkZNKSLxiWeT+b4DX4MykX6ZjXQk0f9emZYc5EDdX80fwC04
g4Q6dDBajZuvG+jIowsf8oyBE1XeRk9AvJloDHWLmSZHiG+YB4B12fzmJYB2rAHe
3z+swctAIqlM+6S6MSeRbjqHsuynrKqQXXUxe1nAYejwTI2gI3dQFrNYGONggkKF
QwxWV5n4pO1lxRIRKb5z26UTjVCTJlujLLmhmXoJJW7prorYFrUmwUevnJco3WPw
4VvTF/j4njchOJAVdNiJUvXaHZXV1RtL3AltxvmU93LxEmP/LqjDIXsJXIWX/kMQ
Vkq4a7dVfW7wwJIJyfEyJBekMARx
-----END CERTIFICATE-----
Generated at Wed May 13 02:41:11 2026 by rpki-client