
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32342d3234203d3e203436303330.roa
File: 3131362e3231322e37322e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier: 1gQP1KipyggAd+ZWxNv0xkFTvLsvr+/k6WShmO+e4Iw=
Subject key identifier: B2:83:53:28:58:79:E8:1B:87:C6:6D:40:3B:31:D2:86:DC:D1:C2:5E
Certificate issuer: /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial: 2A42D1E744D888723DF41B475C423A584B96D6F5
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32342d3234203d3e203436303330.roa
Signing time: Sun 03 May 2026 02:50:41 +0000
ROA not before: Sun 03 May 2026 02:45:41 +0000
ROA not after: Sun 02 May 2027 02:50:41 +0000
asID: 46030
IP address blocks: 116.212.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:42:d1:e7:44:d8:88:72:3d:f4:1b:47:5c:42:3a:58:4b:96:d6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
Validity
Not Before: May 3 02:45:41 2026 GMT
Not After : May 2 02:50:41 2027 GMT
Subject: CN=B28353285879E81B87C66D403B31D286DCD1C25E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:c0:3e:11:2c:f7:c2:10:69:4d:d3:9c:66:
ba:c9:1c:b7:c7:58:43:50:66:f4:83:56:e7:88:b5:
a8:96:0f:6b:26:7a:ea:38:6e:af:d0:b2:52:84:45:
6f:20:83:c7:e4:c5:39:36:3a:53:b8:cc:14:5b:5c:
57:27:40:92:3d:5a:29:89:fc:43:ba:53:ce:fc:60:
ad:80:a2:c6:44:6e:5b:7a:7d:91:86:af:62:0a:df:
fd:11:e7:a4:a4:f8:ad:16:6b:26:ff:de:e0:93:f6:
92:b1:64:76:e4:88:7e:38:3f:dc:f4:68:84:09:93:
45:5b:88:24:07:a3:b5:d2:27:c7:09:51:11:0c:cf:
70:7f:5a:83:37:8e:6b:f8:82:10:7e:16:dc:88:31:
60:04:53:78:26:ae:9b:2c:58:c1:94:e7:bf:3d:63:
54:9b:91:19:67:52:96:6d:69:23:6e:80:fa:69:bb:
ed:ae:93:a5:05:b6:74:53:1c:e5:bd:d0:6c:0e:36:
58:71:3c:2a:c0:5d:cc:9a:b6:02:31:37:d5:1e:f6:
3a:fe:c1:75:19:6c:df:c1:cf:05:78:ab:70:ef:52:
01:94:0c:fa:df:9b:c3:43:b5:e8:65:a0:1b:89:fe:
5c:11:7a:c0:c1:25:4a:5f:6c:d1:09:11:14:d5:e8:
0f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:83:53:28:58:79:E8:1B:87:C6:6D:40:3B:31:D2:86:DC:D1:C2:5E
X509v3 Authority Key Identifier:
keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32342d3234203d3e203436303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.212.72.0/24
Signature Algorithm: sha256WithRSAEncryption
74:36:19:ab:7e:70:7c:2b:06:9e:4e:b6:7f:d3:d8:0f:aa:76:
eb:13:a8:ef:33:d7:7e:41:61:3c:98:c0:db:0e:ec:16:fd:f6:
cf:0f:10:5d:79:89:de:3c:aa:ca:4f:ef:65:e7:c4:b4:7a:cf:
f2:38:d1:b9:bc:7b:1b:51:e9:7a:6b:62:8d:cf:2e:6f:66:3d:
af:97:e1:8d:04:0b:5c:03:68:93:f2:e0:e9:7b:64:8e:ad:81:
16:a5:fa:d7:7d:7f:d1:34:cf:25:00:00:cf:d4:e3:96:2f:c4:
5a:c4:3a:fd:5a:ab:0b:97:69:b0:56:8a:38:9a:5a:18:48:80:
00:8e:3c:57:eb:35:b2:7b:97:76:db:64:bb:5a:92:4f:5c:11:
8e:3b:c7:69:4e:38:7a:64:6a:bd:ac:c6:df:97:97:f6:9b:b2:
dd:08:b3:29:f3:59:02:64:59:c5:c9:c8:c7:81:8d:4f:75:45:
90:65:73:97:4e:c0:3c:1d:e9:aa:d0:f7:ba:ca:37:d1:20:41:
32:48:28:d8:5b:04:ca:69:95:2c:79:1d:20:a3:d5:8d:ae:ad:
23:ae:05:27:ab:43:96:fc:24:78:69:5c:8e:6a:0e:61:ba:65:
47:e6:ea:5c:a8:37:76:e3:da:10:a7:ff:d5:3a:e3:78:b4:81:
48:fa:d1:89
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKkLR50TYiHI99BtHXEI6WEuW1vUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2Q0QxODMyRTA5NUZEODY0MzI2RDkzNDBDMzM2MENF
MkUwNEQ4ODAeFw0yNjA1MDMwMjQ1NDFaFw0yNzA1MDIwMjUwNDFaMDMxMTAvBgNV
BAMTKEIyODM1MzI4NTg3OUU4MUI4N0M2NkQ0MDNCMzFEMjg2RENEMUMyNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWisA+ESz3whBpTdOcZrrJHLfH
WENQZvSDVueItaiWD2smeuo4bq/QslKERW8gg8fkxTk2OlO4zBRbXFcnQJI9WimJ
/EO6U878YK2AosZEblt6fZGGr2IK3/0R56Sk+K0Wayb/3uCT9pKxZHbkiH44P9z0
aIQJk0VbiCQHo7XSJ8cJUREMz3B/WoM3jmv4ghB+FtyIMWAEU3gmrpssWMGU5789
Y1SbkRlnUpZtaSNugPppu+2uk6UFtnRTHOW90GwONlhxPCrAXcyatgIxN9Ue9jr+
wXUZbN/BzwV4q3DvUgGUDPrfm8NDtehloBuJ/lwResDBJUpfbNEJERTV6A9pAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUsoNTKFh56BuHxm1AOzHShtzRwl4wHwYDVR0j
BBgwFoAUkGzRgy4JX9hkMm2TQMM2DOLgTYgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGQxZDU5NmMtMDllMy00NjIxLWE2M2ItMjBhNTEzY2Q0OGI5LzAvOTA2Q0QxODMy
RTA5NUZEODY0MzI2RDkzNDBDMzM2MENFMkUwNEQ4OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MDZDRDE4MzJFMDk1RkQ4NjQzMjZEOTM0MEMzMzYwQ0UyRTA0
RDg4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzEzNjJlMzIzMTMyMmUzNzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHTUSDANBgkqhkiG
9w0BAQsFAAOCAQEAdDYZq35wfCsGnk62f9PYD6p26xOo7zPXfkFhPJjA2w7sFv32
zw8QXXmJ3jyqyk/vZefEtHrP8jjRubx7G1Hpemtijc8ub2Y9r5fhjQQLXANok/Lg
6Xtkjq2BFqX6131/0TTPJQAAz9Tjli/EWsQ6/VqrC5dpsFaKOJpaGEiAAI48V+s1
snuXdttku1qST1wRjjvHaU44emRqvazG35eX9puy3QizKfNZAmRZxcnIx4GNT3VF
kGVzl07APB3pqtD3uso30SBBMkgo2FsEymmVLHkdIKPVja6tI64FJ6tDlvwkeGlc
jmoOYbplR+bqXKg3duPaEKf/1TrjeLSBSPrRiQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:50:46 2026 by rpki-client