
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39312e302f32342d3234203d3e203137363731.roa
File: 3131342e3139392e39312e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: E53FwjMOo1NhSf8a1Hz3u3tTU05r19MaWmYGjAqJiws=
Subject key identifier: 84:AB:12:3B:39:5D:75:EE:E1:7D:C8:D3:C7:E9:0B:0A:C5:85:45:60
Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial: 790D3C0B552AE5A24B1AF4148CAF6584A0D49B93
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39312e302f32342d3234203d3e203137363731.roa
Signing time: Sun 03 May 2026 02:50:06 +0000
ROA not before: Sun 03 May 2026 02:45:06 +0000
ROA not after: Sun 02 May 2027 02:50:06 +0000
asID: 17671
IP address blocks: 114.199.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0d:3c:0b:55:2a:e5:a2:4b:1a:f4:14:8c:af:65:84:a0:d4:9b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
Validity
Not Before: May 3 02:45:06 2026 GMT
Not After : May 2 02:50:06 2027 GMT
Subject: CN=84AB123B395D75EEE17DC8D3C7E90B0AC5854560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:b8:57:30:da:7f:54:13:54:1d:cb:0f:cb:
9d:5f:42:30:45:6e:ce:c4:ee:7f:bf:50:39:9e:04:
37:55:fe:86:e4:53:cf:e9:14:81:16:6a:11:5a:82:
71:92:30:5a:1c:1f:2f:73:88:ab:74:ea:15:3d:01:
3d:30:ac:f8:9f:66:c1:00:fc:51:bd:c6:53:46:6c:
2c:1c:eb:c6:48:83:a5:9d:c4:ca:e6:f6:25:f8:6e:
3b:97:1d:a7:1b:ce:d3:8c:47:82:e3:bc:ab:83:4b:
75:a1:26:83:76:be:40:ec:a4:97:28:d2:ed:d5:4e:
77:ac:04:97:a1:3b:f1:3a:70:b9:f1:07:2b:21:cc:
2d:a3:1d:c0:b7:1a:cd:01:f2:4e:c1:d6:f2:e1:91:
6f:7f:de:7c:80:d1:80:55:5f:91:11:c7:3d:cf:a4:
dd:1e:f2:ea:1e:36:85:ba:82:6e:2e:93:1c:91:5f:
d3:70:ad:45:9b:62:32:38:80:7d:ad:51:a7:11:cb:
8c:60:1f:fc:3e:3a:c5:dc:16:ef:23:06:eb:e1:fa:
54:f8:18:46:c3:8b:18:f9:64:09:42:4d:82:db:25:
46:31:12:b3:b6:83:8b:9b:dc:81:ec:74:4f:e6:f2:
04:63:9a:bd:ec:96:66:ec:74:31:1f:4e:33:b3:41:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AB:12:3B:39:5D:75:EE:E1:7D:C8:D3:C7:E9:0B:0A:C5:85:45:60
X509v3 Authority Key Identifier:
keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39312e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.91.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:34:e9:f1:a7:aa:1a:06:81:7e:d6:f2:25:00:ec:77:b9:5d:
12:d6:95:91:96:16:f8:a9:c7:da:d5:cf:17:ea:6c:cf:11:4b:
59:c2:ee:6c:85:ec:14:be:8d:3a:de:6b:88:67:06:f9:af:63:
50:8b:a7:6e:9d:80:cd:04:80:fc:f7:a8:09:78:e7:5d:3a:aa:
35:c7:04:fa:20:b0:47:1a:e8:49:50:1e:d7:99:f6:5e:c6:66:
f9:83:da:a5:a9:4e:e5:6b:0c:5a:46:14:a6:0a:d5:e5:09:c5:
42:47:05:b1:33:db:14:54:3f:bf:f9:b3:23:9d:c5:31:64:ca:
da:d0:d8:2c:62:84:e8:e4:61:57:3d:7e:52:fc:cb:18:54:93:
45:38:16:b2:b5:4a:de:0a:cf:02:88:1d:93:9a:de:b7:20:9d:
9d:f6:ac:cd:da:4c:ba:9f:56:1a:12:49:3c:16:41:ce:3e:98:
8d:39:8f:1a:5e:33:df:d5:1b:53:e3:4f:a5:5c:76:5c:9d:da:
ca:ca:41:e8:34:1c:d8:9b:4a:58:f2:c5:0f:20:bc:19:e8:ae:
5b:ac:f1:92:a8:0a:b4:25:49:49:dd:94:ac:5e:bb:ab:33:28:
4d:c2:c8:0f:bd:99:bd:44:b5:d7:1c:d4:0b:08:0c:d8:03:dd:
36:ce:71:82
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUeQ08C1Uq5aJLGvQUjK9lhKDUm5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF
OEU0NDY0NDAeFw0yNjA1MDMwMjQ1MDZaFw0yNzA1MDIwMjUwMDZaMDMxMTAvBgNV
BAMTKDg0QUIxMjNCMzk1RDc1RUVFMTdEQzhEM0M3RTkwQjBBQzU4NTQ1NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpbhXMNp/VBNUHcsPy51fQjBF
bs7E7n+/UDmeBDdV/obkU8/pFIEWahFagnGSMFocHy9ziKt06hU9AT0wrPifZsEA
/FG9xlNGbCwc68ZIg6WdxMrm9iX4bjuXHacbztOMR4LjvKuDS3WhJoN2vkDspJco
0u3VTnesBJehO/E6cLnxByshzC2jHcC3Gs0B8k7B1vLhkW9/3nyA0YBVX5ERxz3P
pN0e8uoeNoW6gm4ukxyRX9NwrUWbYjI4gH2tUacRy4xgH/w+OsXcFu8jBuvh+lT4
GEbDixj5ZAlCTYLbJUYxErO2g4ub3IHsdE/m8gRjmr3slmbsdDEfTjOzQe/RAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUhKsSOzldde7hfcjTx+kLCsWFRWAwHwYDVR0j
BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1
RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0
NjQ0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h
YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzOTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHWzANBgkqhkiG
9w0BAQsFAAOCAQEAjTTp8aeqGgaBftbyJQDsd7ldEtaVkZYW+KnH2tXPF+pszxFL
WcLubIXsFL6NOt5riGcG+a9jUIunbp2AzQSA/PeoCXjnXTqqNccE+iCwRxroSVAe
15n2XsZm+YPapalO5WsMWkYUpgrV5QnFQkcFsTPbFFQ/v/mzI53FMWTK2tDYLGKE
6ORhVz1+UvzLGFSTRTgWsrVK3grPAogdk5retyCdnfaszdpMup9WGhJJPBZBzj6Y
jTmPGl4z39UbU+NPpVx2XJ3ayspB6DQc2JtKWPLFDyC8GeiuW6zxkqgKtCVJSd2U
rF67qzMoTcLID72ZvUS11xzUCwgM2APdNs5xgg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:51:18 2026 by rpki-client