
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34352e302f32342d3234203d3e203338353234.roa
File: 3131392e322e34352e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier: yQDveOELN3yZw+Fes3OqGg+UdH+S7wzClogTm0QtAzY=
Subject key identifier: F8:1B:03:6D:0A:04:EE:92:2F:13:A3:FE:21:0A:6B:D7:B4:BE:28:54
Certificate issuer: /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
Certificate serial: 6B1751A1929B700718ADFF62ABF791046C421F15
Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34352e302f32342d3234203d3e203338353234.roa
Signing time: Sun 03 May 2026 02:46:22 +0000
ROA not before: Sun 03 May 2026 02:41:22 +0000
ROA not after: Sun 02 May 2027 02:46:22 +0000
asID: 38524
IP address blocks: 119.2.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl
rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:17:51:a1:92:9b:70:07:18:ad:ff:62:ab:f7:91:04:6c:42:1f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
Validity
Not Before: May 3 02:41:22 2026 GMT
Not After : May 2 02:46:22 2027 GMT
Subject: CN=F81B036D0A04EE922F13A3FE210A6BD7B4BE2854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:90:e7:2b:50:2c:5e:f2:d9:12:65:20:6d:
99:ec:53:54:b3:81:49:bb:a0:40:e0:ae:59:f2:df:
49:8b:a8:27:16:6f:1a:c4:e4:7a:2e:c5:c8:d4:5f:
cc:d0:2e:04:46:1d:bd:73:74:aa:43:63:24:b0:ae:
49:2d:36:24:ea:bb:0e:d3:9c:18:24:df:cd:7d:7b:
ce:f8:fe:e6:3a:c8:21:17:9b:a1:81:e6:90:b8:09:
2d:59:a8:8c:a5:d5:fb:8f:6f:57:00:7c:ec:40:97:
51:42:de:5d:b5:ac:34:ac:0d:91:6b:3a:9e:8a:36:
94:6c:76:fc:67:3c:f9:9b:ee:62:ec:b7:82:64:4a:
a7:f4:67:57:1d:b7:4b:db:2e:e2:ac:32:16:ce:6c:
96:0e:d6:c4:b7:2b:97:20:81:e1:58:89:df:59:45:
37:74:38:3b:ce:65:ff:ed:50:5d:f3:b8:9d:25:54:
a0:47:ae:98:64:c5:c3:bc:f6:53:01:a4:2e:ae:a8:
86:dd:90:ca:c4:8f:b5:10:a7:60:e1:e6:7e:b6:2b:
ee:cf:ea:e3:8c:fc:75:9f:3f:ec:56:7e:69:d6:c9:
fa:a2:e8:61:be:3d:87:51:88:b1:b6:a9:a7:f0:6e:
ef:7f:25:f9:7d:3a:ff:f3:7c:ff:68:78:0c:2d:6e:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1B:03:6D:0A:04:EE:92:2F:13:A3:FE:21:0A:6B:D7:B4:BE:28:54
X509v3 Authority Key Identifier:
keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34352e302f32342d3234203d3e203338353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.2.45.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5e:18:47:1c:e1:f3:eb:75:d1:6b:57:6b:7c:60:cd:f2:6e:
18:6b:04:bb:d8:cb:3d:a4:a8:a6:54:a0:e3:3b:33:00:82:16:
8f:d7:ae:11:eb:b1:57:72:7f:06:99:b4:99:f9:95:10:21:2a:
ed:64:75:76:56:77:d2:20:b9:32:e0:8a:21:f2:27:71:5e:f7:
d0:45:49:c4:3f:75:2c:6c:bc:0e:69:4b:d1:c3:24:49:88:f1:
f6:c5:16:36:2b:c3:61:74:b4:3d:fc:e1:86:c8:b4:5b:5c:c1:
ec:94:e4:9d:19:59:f5:08:56:7a:dd:67:ab:6a:19:4e:ee:12:
e9:eb:26:13:05:9f:c7:13:b6:85:38:b8:c8:f8:88:c1:4a:c8:
0d:83:bc:69:39:16:ef:8e:76:60:de:4c:c7:23:e2:b9:95:d4:
2f:4c:a4:58:02:1c:ff:fc:8e:bd:06:01:09:99:bd:2a:2b:75:
c2:b8:d2:51:4d:58:99:42:db:83:c2:c8:76:41:c9:91:b0:a0:
21:6e:70:1a:00:dc:73:c8:9c:6c:cf:02:45:2b:96:59:de:cd:
d7:f8:0f:59:8e:3e:f1:bb:cb:73:d6:e1:d9:d9:7e:07:dc:ed:
90:6d:3e:e4:a5:b1:a7:e8:68:4a:df:88:35:36:4a:82:7e:91:
b0:f2:7a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:06 2026 by rpki-client