
$ rpki-client -vvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa
File: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (raw, json)
Hash identifier: DkvTwpRqRkCZlooRpiKY2+Wy5hBTCQFkxeE1RiY6Adw=
Subject key identifier: 3F:21:31:B3:E3:FB:96:95:E2:08:55:A8:5F:FF:36:69:46:87:08:16
Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Certificate serial: 016214C08AF98C757D58E4A0CC1B3BB2EEE62769
Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa
Signing time: Sun 03 May 2026 02:47:37 +0000
ROA not before: Sun 03 May 2026 02:42:37 +0000
ROA not after: Sun 02 May 2027 02:47:37 +0000
asID: 142393
IP address blocks: 150.107.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:62:14:c0:8a:f9:8c:75:7d:58:e4:a0:cc:1b:3b:b2:ee:e6:27:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Validity
Not Before: May 3 02:42:37 2026 GMT
Not After : May 2 02:47:37 2027 GMT
Subject: CN=3F2131B3E3FB9695E20855A85FFF366946870816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:2d:45:f2:ca:2e:e9:94:aa:fd:8f:73:86:
d8:c4:ab:e2:ad:16:89:cc:3e:9d:d3:cc:c9:d6:7d:
5b:f2:aa:9d:9b:cc:f2:86:9f:55:9d:bf:be:d2:c1:
2f:d9:1f:56:fc:e5:b8:17:af:e7:02:e8:24:26:b6:
76:6e:72:60:d9:1c:2d:24:f3:71:45:be:7b:50:c0:
42:76:21:c7:1b:49:53:93:bb:19:77:63:f0:b1:a9:
31:9e:ba:28:b7:3e:ee:ba:c9:d5:f3:37:7e:e6:40:
ec:27:bc:96:d9:75:2c:36:2c:24:b3:89:1a:34:36:
2b:f8:d8:02:e0:21:c7:c9:f7:a3:68:56:71:b2:02:
52:e9:1f:4b:ab:fa:9d:1c:3f:6d:1c:4a:03:24:7e:
99:ce:dd:0c:15:ee:18:2a:4e:b7:67:77:ae:35:26:
ff:0f:4b:1d:c9:40:61:eb:75:61:8b:0f:89:61:c2:
fb:d4:df:de:fb:02:7f:a4:46:a3:fd:21:a0:a5:a9:
7b:f4:cd:e3:c6:42:2d:44:cc:73:b9:e2:ce:3c:ac:
d8:7e:bf:22:d9:73:72:b0:a9:8a:0a:d2:c4:8d:35:
51:87:80:05:2e:ad:d9:00:a5:6b:fe:f9:0b:56:9e:
39:5e:76:7c:a6:f6:8f:ae:bf:49:37:df:8a:7a:83:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:21:31:B3:E3:FB:96:95:E2:08:55:A8:5F:FF:36:69:46:87:08:16
X509v3 Authority Key Identifier:
keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.104.0/23
Signature Algorithm: sha256WithRSAEncryption
59:3f:f5:93:ed:8a:a3:43:c3:01:ad:8e:fe:ad:24:99:72:78:
e1:c0:b7:82:ef:37:8f:7e:1d:2e:59:58:5b:af:3f:a5:75:77:
51:36:dc:3e:e5:0e:fc:c6:27:8a:b7:7c:1a:f1:5a:84:30:c4:
27:d3:db:91:c3:1b:93:69:d4:25:68:27:93:58:f8:c1:f4:87:
92:0c:e2:e4:bb:6b:c7:fe:50:11:2c:5e:7f:e1:35:f4:d1:d2:
c3:4d:9d:3c:95:ff:98:11:37:5f:95:f3:e3:16:68:01:41:43:
b1:b7:af:fa:83:d8:a5:f5:45:16:1a:a8:cc:be:0b:4e:7d:cf:
d4:87:74:07:49:3e:c9:60:45:c5:ea:5f:23:f6:28:92:a6:47:
87:12:70:f3:00:6b:70:d2:65:33:a4:cf:7d:dc:0b:fe:b9:01:
e6:d4:8a:e5:1b:f9:b0:9c:b4:69:2c:71:db:d6:fd:3f:1c:cf:
48:3f:1f:e0:3f:a0:31:51:79:88:67:44:ac:1d:80:95:a9:83:
9b:54:57:a3:3c:82:ef:70:ff:95:28:37:b4:f8:eb:c2:a6:75:
2e:00:a4:22:2d:49:b9:8b:42:25:df:c2:60:e7:2f:d7:18:d9:
39:a8:10:bd:9b:aa:de:a0:f3:9b:69:16:ab:e8:39:76:c9:87:
00:c6:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:50 2026 by rpki-client