
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32312d3234203d3e203436303330.roa
File: 3131362e3231322e37322e302f32312d3234203d3e203436303330.roa (raw, json)
Hash identifier: 58v6IS1MSPKg2yYeVDyyuTvIzqpTnW0JbX79eRAkar4=
Subject key identifier: A9:22:FF:F7:0D:82:E1:D2:FE:18:43:AD:41:32:9B:83:42:85:ED:1B
Certificate issuer: /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial: 65281A72267E43CFF808A3D25C7CF75261A8AC8F
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32312d3234203d3e203436303330.roa
Signing time: Sun 03 May 2026 02:50:42 +0000
ROA not before: Sun 03 May 2026 02:45:42 +0000
ROA not after: Sun 02 May 2027 02:50:42 +0000
asID: 46030
IP address blocks: 116.212.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:28:1a:72:26:7e:43:cf:f8:08:a3:d2:5c:7c:f7:52:61:a8:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
Validity
Not Before: May 3 02:45:42 2026 GMT
Not After : May 2 02:50:42 2027 GMT
Subject: CN=A922FFF70D82E1D2FE1843AD41329B834285ED1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:f7:d0:fe:70:14:1a:41:49:74:d3:08:c3:
59:43:67:74:12:d2:0b:99:21:2b:63:af:e2:32:f1:
2b:59:f3:0f:60:9e:45:e4:df:5e:cf:a8:0d:8d:2e:
be:ae:47:d9:64:4f:e4:7a:66:2a:a2:af:5b:e3:3e:
27:2a:c5:f1:0d:9a:d7:6f:22:f2:b3:6e:c4:ff:c8:
e6:36:1d:95:a2:67:76:f1:10:36:e7:68:7f:ea:9a:
30:ee:fd:d8:1f:f0:9f:63:24:06:49:b5:9e:05:cf:
a6:44:a0:91:ac:d8:4a:63:0d:4a:a3:0c:fd:79:a0:
41:08:c4:ed:48:28:72:cf:2c:c4:1a:34:b6:d7:7b:
24:70:90:07:7a:0c:06:44:33:c6:a3:eb:33:d7:cc:
6b:55:9b:05:9e:f4:e1:f7:6e:da:5a:46:ff:5a:9f:
37:20:12:ae:6a:b5:13:28:c0:f9:4a:3f:e3:7e:c2:
18:9b:87:ee:92:39:7a:d5:af:f8:9d:f6:db:22:77:
23:24:3a:19:5d:3e:7b:09:eb:98:61:7e:6c:b1:d5:
18:c7:ef:74:7f:5b:f4:b8:f4:35:be:37:dc:0e:4e:
e2:77:72:f9:d1:a3:7d:94:dc:5c:88:93:5a:8b:04:
2f:7f:12:cb:84:fe:ba:88:89:5a:d3:c1:7a:98:6c:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:22:FF:F7:0D:82:E1:D2:FE:18:43:AD:41:32:9B:83:42:85:ED:1B
X509v3 Authority Key Identifier:
keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32312d3234203d3e203436303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.212.72.0/21
Signature Algorithm: sha256WithRSAEncryption
37:ff:d1:78:c2:cc:b3:c5:5a:27:a6:ee:b8:34:9b:fd:6b:49:
2e:0e:f7:ef:43:40:8b:05:1d:24:4f:a2:a0:84:45:89:f9:2c:
65:4c:bc:e4:87:d8:62:e5:2a:9f:56:ee:22:08:00:b0:f0:28:
91:ff:7a:3f:d3:a7:09:07:56:ba:2a:87:f3:b9:97:66:08:ce:
02:8a:dd:d9:9c:0d:46:f8:48:91:d7:e8:77:75:de:5c:7c:98:
95:58:78:14:9f:a2:68:f6:8e:37:23:9f:80:db:34:5e:91:6b:
3f:66:1b:cf:ab:c7:31:0b:2c:50:40:d6:dd:38:3a:de:0b:1c:
f1:da:78:a8:65:83:b0:8c:98:55:d1:7b:8f:c0:fb:9c:d5:86:
e5:72:7a:41:09:b4:cf:39:de:19:99:8a:99:06:77:3f:be:ec:
b2:92:6e:12:6b:09:4a:d0:3a:27:ae:fd:9b:56:ad:58:d7:04:
85:50:30:21:cf:8d:ef:c6:25:df:f4:28:5d:e8:2c:8d:05:e9:
90:2e:a3:f2:c8:77:a2:01:94:74:35:7b:97:3e:75:f3:6a:04:
80:c7:b6:b7:11:25:c6:d4:87:89:de:7d:c5:03:42:03:b9:df:
f9:dd:93:dc:9b:ca:1c:05:97:d3:c4:dc:6b:31:9f:06:a2:b2:
d1:a4:6c:dc
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZSgaciZ+Q8/4CKPSXHz3UmGorI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2Q0QxODMyRTA5NUZEODY0MzI2RDkzNDBDMzM2MENF
MkUwNEQ4ODAeFw0yNjA1MDMwMjQ1NDJaFw0yNzA1MDIwMjUwNDJaMDMxMTAvBgNV
BAMTKEE5MjJGRkY3MEQ4MkUxRDJGRTE4NDNBRDQxMzI5QjgzNDI4NUVEMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQaPfQ/nAUGkFJdNMIw1lDZ3QS
0guZIStjr+Iy8StZ8w9gnkXk317PqA2NLr6uR9lkT+R6Ziqir1vjPicqxfENmtdv
IvKzbsT/yOY2HZWiZ3bxEDbnaH/qmjDu/dgf8J9jJAZJtZ4Fz6ZEoJGs2EpjDUqj
DP15oEEIxO1IKHLPLMQaNLbXeyRwkAd6DAZEM8aj6zPXzGtVmwWe9OH3btpaRv9a
nzcgEq5qtRMowPlKP+N+whibh+6SOXrVr/id9tsidyMkOhldPnsJ65hhfmyx1RjH
73R/W/S49DW+N9wOTuJ3cvnRo32U3FyIk1qLBC9/EsuE/rqIiVrTwXqYbMDXAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUqSL/9w2C4dL+GEOtQTKbg0KF7RswHwYDVR0j
BBgwFoAUkGzRgy4JX9hkMm2TQMM2DOLgTYgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGQxZDU5NmMtMDllMy00NjIxLWE2M2ItMjBhNTEzY2Q0OGI5LzAvOTA2Q0QxODMy
RTA5NUZEODY0MzI2RDkzNDBDMzM2MENFMkUwNEQ4OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MDZDRDE4MzJFMDk1RkQ4NjQzMjZEOTM0MEMzMzYwQ0UyRTA0
RDg4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzEzNjJlMzIzMTMyMmUzNzMyMmUzMDJmMzIz
MTJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3TUSDANBgkqhkiG
9w0BAQsFAAOCAQEAN//ReMLMs8VaJ6buuDSb/WtJLg7370NAiwUdJE+ioIRFifks
ZUy85IfYYuUqn1buIggAsPAokf96P9OnCQdWuiqH87mXZgjOAord2ZwNRvhIkdfo
d3XeXHyYlVh4FJ+iaPaONyOfgNs0XpFrP2Ybz6vHMQssUEDW3Tg63gsc8dp4qGWD
sIyYVdF7j8D7nNWG5XJ6QQm0zzneGZmKmQZ3P77sspJuEmsJStA6J679m1atWNcE
hVAwIc+N78Yl3/QoXegsjQXpkC6j8sh3ogGUdDV7lz5182oEgMe2txElxtSHid59
xQNCA7nf+d2T3JvKHAWX08TcazGfBqKy0aRs3A==
-----END CERTIFICATE-----
Generated at Wed May 13 04:48:23 2026 by rpki-client