
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38392e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e38392e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: 7F/TyJDelWvIg7QxAxdY7zItfb0d3FzToFheC/fN5Zw=
Subject key identifier: 57:AF:6A:E6:6B:55:C2:80:59:1A:00:42:B6:49:44:C3:2A:78:2C:61
Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial: 7CAFCDFF5BC44BBA0B9BEACF8B59086565778DFE
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38392e302f32342d3234203d3e203137363731.roa
Signing time: Sun 03 May 2026 02:50:07 +0000
ROA not before: Sun 03 May 2026 02:45:07 +0000
ROA not after: Sun 02 May 2027 02:50:07 +0000
asID: 17671
IP address blocks: 114.199.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:af:cd:ff:5b:c4:4b:ba:0b:9b:ea:cf:8b:59:08:65:65:77:8d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
Validity
Not Before: May 3 02:45:07 2026 GMT
Not After : May 2 02:50:07 2027 GMT
Subject: CN=57AF6AE66B55C280591A0042B64944C32A782C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:5f:49:4c:9f:55:34:1e:ca:cf:bb:6c:8b:0e:
26:e3:62:17:d5:e8:40:75:dd:0f:91:a7:9d:9b:94:
dd:44:69:27:d5:5b:08:08:44:54:a9:11:56:4a:c1:
0f:d7:7b:1e:ca:a2:49:d1:99:e0:17:17:5a:9f:a4:
e2:31:af:51:81:45:75:0b:83:5a:18:61:6b:c7:f3:
41:06:cc:56:69:ed:10:96:eb:81:3c:f2:7d:56:47:
d2:b1:8c:64:36:bb:75:02:4a:69:66:24:3f:5b:bd:
37:16:bd:e8:56:21:f8:e7:fd:e7:ff:4c:f9:58:fc:
1f:03:f8:a1:99:19:5e:48:b1:92:de:53:6f:1c:73:
7a:1d:ac:03:17:6e:c9:10:8a:be:ea:4e:fd:d2:66:
9f:9c:39:38:f1:b4:16:22:a4:74:c1:1b:cc:5f:c8:
c6:0e:ea:a7:60:52:1e:d1:80:79:db:f9:57:1c:07:
c6:4a:09:c0:0d:ab:0f:31:ef:39:d4:bd:d7:7b:34:
03:fe:61:73:4d:0a:df:93:5c:ef:58:3b:b9:07:00:
13:38:69:45:1e:51:0a:ea:44:85:97:08:5a:04:47:
fb:83:a7:14:03:52:e1:f3:55:91:5a:57:b4:31:67:
87:61:b7:1c:23:e9:81:08:92:b5:2c:79:6b:55:ba:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AF:6A:E6:6B:55:C2:80:59:1A:00:42:B6:49:44:C3:2A:78:2C:61
X509v3 Authority Key Identifier:
keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38392e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.89.0/24
Signature Algorithm: sha256WithRSAEncryption
15:90:d8:db:61:08:dc:98:ce:ed:7f:fb:c7:e1:b4:c4:5c:4a:
b7:df:8c:93:37:56:78:aa:b0:16:6c:21:84:48:39:00:2f:df:
54:0d:c1:49:77:1c:e9:ac:64:89:9e:ed:c4:82:1f:17:e9:37:
39:73:7c:73:21:7d:a6:4d:70:1c:13:4e:70:13:de:38:82:15:
86:8a:c7:85:41:af:9f:6e:de:8e:75:45:ae:c4:35:8c:11:22:
be:65:4b:23:82:31:ca:db:96:de:88:d6:75:fc:e8:70:e1:cd:
8b:b7:37:93:fb:17:78:7b:93:15:07:cf:b8:66:f3:74:5f:e0:
74:c9:27:28:ce:93:36:c3:98:f0:14:e0:f6:0d:89:73:f4:68:
73:e0:ed:d0:13:10:9c:54:7c:7d:15:7e:1e:47:b4:c8:99:74:
27:1f:a2:99:d6:82:97:e2:e4:b3:d4:0c:a9:41:34:2e:46:55:
65:e1:c1:e3:b0:fd:6a:5c:57:b8:7f:82:54:89:be:c9:05:3a:
91:2f:93:d4:f7:8e:42:af:67:f5:87:23:9d:8f:ef:5c:dc:e8:
57:0a:b2:4e:f3:58:e3:9c:a9:ad:ed:b7:6f:34:3d:6e:36:a2:
2a:22:fd:db:3e:c9:d2:88:55:42:c6:3b:2e:d4:a3:3e:4f:a9:
d0:0f:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:17 2026 by rpki-client