
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34372e302f32342d3234203d3e203338353234.roa
File: 3131392e322e34372e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier: /uCR0ldyLWtQwldeWX1wR8IL8mdOypv1FRb1qPBB8ZQ=
Subject key identifier: B4:E9:A9:80:D0:36:5A:CF:F5:B9:50:21:F8:04:52:50:2E:B5:C9:89
Certificate issuer: /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
Certificate serial: 76E5A1ABF08262B9E4371976C16E78C85CA63689
Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34372e302f32342d3234203d3e203338353234.roa
Signing time: Sun 03 May 2026 02:46:27 +0000
ROA not before: Sun 03 May 2026 02:41:27 +0000
ROA not after: Sun 02 May 2027 02:46:27 +0000
asID: 38524
IP address blocks: 119.2.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl
rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e5:a1:ab:f0:82:62:b9:e4:37:19:76:c1:6e:78:c8:5c:a6:36:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
Validity
Not Before: May 3 02:41:27 2026 GMT
Not After : May 2 02:46:27 2027 GMT
Subject: CN=B4E9A980D0365ACFF5B95021F80452502EB5C989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:32:11:90:43:1e:9a:e5:07:01:bd:cb:5e:
54:b3:dc:36:12:ea:a6:e3:c6:6c:30:12:d4:17:11:
29:c5:b5:84:81:f2:72:70:24:ba:cb:37:da:51:aa:
2d:d3:b8:fc:13:20:e3:1f:23:6c:eb:17:19:d8:2c:
f3:84:f6:a9:0c:40:2b:08:36:0c:9a:cf:74:5e:0c:
2b:1a:f0:75:95:55:13:37:fe:c1:27:e9:80:57:bb:
67:fd:29:ec:2a:65:98:6c:b3:b2:1d:c7:30:0c:26:
f6:c0:98:ec:63:98:46:46:33:44:b8:d1:80:09:3c:
ce:38:4b:d4:bd:1a:d1:ba:a7:2c:ea:74:30:43:95:
19:d5:f2:6c:90:db:ad:d6:21:ac:f0:3d:cf:4b:76:
39:8a:62:ce:e4:75:b4:85:10:b6:b0:b8:a3:64:49:
4b:cd:53:ee:37:b9:e9:d3:f4:1e:25:da:c9:dc:7c:
56:2c:92:db:de:db:f2:a9:ab:2e:4b:e8:ab:0f:a8:
5a:a8:91:00:fe:4c:78:27:dc:0a:27:be:ce:27:57:
cc:77:31:b9:50:5b:a7:3a:33:b4:24:f2:5f:ae:d4:
ce:13:6c:82:93:54:90:eb:2e:cb:10:d6:ce:28:ce:
c9:ee:a6:a0:1a:89:f5:a7:9e:12:40:31:06:b4:7c:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E9:A9:80:D0:36:5A:CF:F5:B9:50:21:F8:04:52:50:2E:B5:C9:89
X509v3 Authority Key Identifier:
keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34372e302f32342d3234203d3e203338353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.2.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:3e:77:d5:c3:3d:60:f3:f8:34:da:40:a3:62:17:b8:74:65:
3c:d1:85:cc:e2:28:a7:06:8d:84:18:e2:42:51:9e:bf:76:7d:
33:17:05:4c:32:5c:7d:e6:b2:75:7d:d2:77:4a:44:33:94:3e:
c5:e9:e4:bc:60:a4:05:bf:a3:75:37:74:ad:c1:e9:67:b6:27:
44:f0:6b:85:b0:d4:18:0d:8f:17:e0:9d:9c:3f:ed:3e:7d:95:
c5:e4:3e:1e:c2:e0:f5:0c:b1:45:a5:c7:33:02:2d:dc:7d:bd:
f6:5f:6d:14:72:39:92:27:3d:fb:09:56:35:aa:0a:68:a1:42:
ed:47:85:4b:14:da:37:a9:60:e4:0e:1b:da:1a:12:c2:87:d1:
59:33:bc:65:c8:8a:8c:39:bd:ef:76:38:7f:24:be:9d:e5:aa:
69:e0:af:d1:e0:24:46:06:24:7e:ff:47:d9:83:2a:03:91:83:
1d:68:b6:07:c9:fe:1c:bf:7f:6a:71:c4:94:aa:14:cd:3b:5e:
af:40:49:a8:70:e8:55:11:76:41:61:f8:11:8c:f8:34:35:1a:
ac:48:05:f3:37:9a:01:89:c1:48:e7:1c:20:5f:0e:84:23:da:
9a:6b:3a:00:36:12:fc:29:b3:e5:58:aa:55:ca:99:6c:c7:b6:
b3:0b:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:20 2026 by rpki-client