
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38332e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e38332e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: +uJgz0sDMIfnw57gWdBM6vRMBwFWiywFgZF65UnT2SQ=
Subject key identifier: C1:7F:4A:AF:BE:1B:46:75:44:26:D2:88:91:4E:42:5F:75:29:7F:8C
Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial: 70BCCC52066F3431F137F7F56C835C27A96CDC81
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38332e302f32342d3234203d3e203137363731.roa
Signing time: Sun 03 May 2026 02:50:06 +0000
ROA not before: Sun 03 May 2026 02:45:06 +0000
ROA not after: Sun 02 May 2027 02:50:06 +0000
asID: 17671
IP address blocks: 114.199.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:bc:cc:52:06:6f:34:31:f1:37:f7:f5:6c:83:5c:27:a9:6c:dc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
Validity
Not Before: May 3 02:45:06 2026 GMT
Not After : May 2 02:50:06 2027 GMT
Subject: CN=C17F4AAFBE1B46754426D288914E425F75297F8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:d0:67:9c:5f:42:aa:0f:de:14:bb:48:28:
d4:67:d5:02:28:62:cd:fa:22:fb:90:07:d1:67:c8:
70:8a:6f:82:f9:4d:1d:bb:d4:aa:c4:e5:3e:bb:ff:
81:19:61:98:16:07:44:23:61:43:da:b8:78:81:67:
16:b3:67:11:34:fd:47:61:6c:b1:5d:6d:16:04:3e:
0f:98:40:06:f7:27:a5:69:6e:18:f9:64:a7:cc:27:
15:29:76:8c:87:7b:a0:37:cd:13:56:b1:af:55:a3:
28:d9:b9:88:5c:bd:e6:b6:74:2c:f9:d2:0b:68:13:
45:b8:b7:a5:b7:d0:4d:0c:d9:22:64:ce:e8:28:42:
bf:59:42:42:d3:7e:5b:10:78:d4:12:e9:a5:de:c2:
ef:ec:c4:84:d2:cf:85:27:f4:ad:35:98:eb:7b:01:
a8:6c:f3:fd:0d:ca:1f:72:fc:34:e1:61:15:0a:13:
2f:d1:fd:7a:55:3e:c9:91:bd:e3:b8:9d:12:e0:e0:
8f:d3:93:a6:27:f1:48:12:6b:35:ed:bd:a1:df:d4:
13:3e:ff:64:22:47:c1:f6:43:6b:17:d5:2a:ca:ee:
cf:03:9a:1a:1f:d9:63:7c:7e:e1:3a:d8:52:c2:93:
37:17:2c:4b:6c:ed:cb:da:72:3a:75:a9:00:61:39:
ef:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7F:4A:AF:BE:1B:46:75:44:26:D2:88:91:4E:42:5F:75:29:7F:8C
X509v3 Authority Key Identifier:
keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38332e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.83.0/24
Signature Algorithm: sha256WithRSAEncryption
03:9f:33:09:5f:99:ad:7b:6a:6d:64:8c:e1:74:8d:8d:c3:3a:
69:4e:95:46:c9:51:28:c9:39:a3:8f:f0:f0:5c:8d:f9:99:8c:
2c:8d:b7:74:9f:b9:3b:00:df:82:a1:71:13:67:0e:e5:8d:9e:
16:a2:b6:8e:68:ae:24:55:d1:c0:49:65:c3:bb:da:23:61:a0:
e7:cf:2a:13:ef:cf:23:eb:8d:b0:de:19:41:61:5e:bc:3b:c4:
0f:d9:95:40:7a:30:78:2a:69:08:ab:68:eb:24:82:cb:2b:23:
e3:9c:53:99:93:a9:13:b1:e5:b5:9b:38:42:12:2d:90:7e:42:
21:10:ae:16:8b:49:0b:20:29:e1:49:fc:22:43:3c:71:ce:1a:
14:70:b5:aa:c5:12:2a:f1:51:bb:01:b8:71:49:2e:54:ec:1b:
68:28:40:38:c0:c2:62:df:06:6c:ff:67:3d:ef:1b:7f:4f:ff:
55:da:3b:6d:e5:a0:fd:cf:db:ef:79:13:28:b7:ff:66:8b:93:
35:fe:b6:c0:1f:0b:b8:52:00:5f:2a:99:54:61:8a:d6:b6:ca:
72:52:76:45:34:a7:60:5e:3b:c3:19:b2:1c:e7:45:3f:77:92:
19:3c:20:d1:8a:fe:8b:a7:e5:7a:e0:5f:e0:83:c6:71:3f:12:
f8:d5:f9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:17 2026 by rpki-client