
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39302e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e39302e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: YsDW+kcKxsMSVNWs65bdJ8iB9UaXllVkoYt2X1Pollk=
Subject key identifier: 5A:8C:97:AD:B4:0E:7C:07:DB:BC:32:9B:EB:9A:8C:EB:B9:08:AC:52
Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial: 573D4885B23D578BD7E7D2B30389688FBDDEF127
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39302e302f32342d3234203d3e203137363731.roa
Signing time: Sun 03 May 2026 02:50:20 +0000
ROA not before: Sun 03 May 2026 02:45:20 +0000
ROA not after: Sun 02 May 2027 02:50:20 +0000
asID: 17671
IP address blocks: 114.199.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3d:48:85:b2:3d:57:8b:d7:e7:d2:b3:03:89:68:8f:bd:de:f1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
Validity
Not Before: May 3 02:45:20 2026 GMT
Not After : May 2 02:50:20 2027 GMT
Subject: CN=5A8C97ADB40E7C07DBBC329BEB9A8CEBB908AC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:fa:87:74:a6:c5:d5:06:30:46:a5:3e:e8:
98:d5:1e:5e:c9:28:2c:5c:76:95:33:57:9f:15:9d:
c0:62:0a:b6:4a:ac:6d:90:6c:0b:e4:4f:7d:6f:08:
cf:cc:11:a9:72:fe:81:01:a3:3d:90:b0:d1:6b:9e:
db:5a:96:0f:5d:61:54:d3:bf:11:6c:93:77:59:b2:
d4:5e:16:3e:1b:11:d2:4f:51:37:0b:0f:b2:53:ab:
2b:66:c0:0f:b2:a9:a9:3d:8a:5e:2b:6d:71:97:f5:
bc:ac:33:0c:a0:89:bc:53:86:1e:90:ba:f3:64:12:
c9:4b:09:e4:63:cb:fb:60:d1:d7:7a:ff:34:58:96:
1b:a9:1a:47:46:1b:1c:5a:33:ef:43:b1:84:72:4f:
43:c3:f2:97:3a:c8:ec:57:e5:7b:5a:ac:b0:12:37:
5d:a0:7a:57:ca:7c:5d:56:83:bd:fb:1a:91:e7:4c:
e1:38:3b:d2:98:8a:12:ef:7e:3f:f2:b8:c3:08:d8:
b7:8a:0f:3b:a6:be:7f:d3:80:0e:b0:49:2f:47:21:
46:01:5f:31:bd:c8:74:50:86:0d:b8:a1:5a:f4:f1:
a1:ed:72:c9:e8:28:1f:a3:e5:b0:b6:95:a8:7e:a1:
06:85:f4:6e:3b:ee:d6:50:d0:03:21:3f:87:fd:11:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8C:97:AD:B4:0E:7C:07:DB:BC:32:9B:EB:9A:8C:EB:B9:08:AC:52
X509v3 Authority Key Identifier:
keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39302e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.90.0/24
Signature Algorithm: sha256WithRSAEncryption
60:65:f8:f4:89:da:c9:ec:80:1f:91:15:cc:ef:83:da:7d:40:
3b:4b:2c:f4:86:19:77:b9:75:75:ec:cc:4c:94:3c:5e:2f:bb:
47:5c:9d:0c:47:69:47:49:d1:fe:b1:f6:d2:12:ab:b7:c9:88:
c8:ad:d2:0f:11:31:87:21:d0:52:5a:cf:2a:31:46:52:1b:75:
95:73:8b:00:89:1d:7a:1a:7b:f7:46:75:ef:0c:9c:8e:62:02:
08:34:e6:7b:f4:2b:99:31:6b:51:59:93:4d:3a:3f:c5:08:51:
a9:68:a9:40:27:79:2d:7d:9d:1f:7c:37:ca:40:21:33:30:c6:
ea:83:c8:6b:4a:9c:27:b8:65:5f:3a:a9:e1:bc:e0:7f:f4:72:
45:43:3e:06:7d:28:eb:21:f8:39:2e:60:9d:06:1e:52:c0:87:
05:cf:ca:7d:34:d2:12:fd:53:f0:3b:cd:cb:02:74:b2:61:30:
4a:58:d1:cf:f2:60:d3:93:17:84:b2:53:6d:7e:9e:36:cc:7f:
20:a0:ba:7b:79:ef:de:aa:b4:ce:d7:c5:a2:24:bb:66:63:98:
53:60:76:88:9c:08:9a:73:dc:37:42:5e:ec:70:47:4a:29:ff:
48:85:d3:c4:72:e5:e8:b2:2d:23:af:9e:02:27:07:49:a9:f6:
21:86:92:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:18 2026 by rpki-client