
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f31392d3234203d3e203436303330.roa
File: 3138322e34382e3136302e302f31392d3234203d3e203436303330.roa (raw, json)
Hash identifier: o9EKVmFR1SvOj9uTbB2OlxRWlCxTxBe1nFco2QLJ8gE=
Subject key identifier: 39:73:37:C3:C2:5A:22:F7:A3:4A:5D:1D:93:EA:C2:4E:EE:18:44:13
Certificate issuer: /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial: 4BF7D9B4566C3D2D8AE34FB8DC8D1120F9C15929
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f31392d3234203d3e203436303330.roa
Signing time: Sun 03 May 2026 02:50:29 +0000
ROA not before: Sun 03 May 2026 02:45:29 +0000
ROA not after: Sun 02 May 2027 02:50:29 +0000
asID: 46030
IP address blocks: 182.48.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f7:d9:b4:56:6c:3d:2d:8a:e3:4f:b8:dc:8d:11:20:f9:c1:59:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
Validity
Not Before: May 3 02:45:29 2026 GMT
Not After : May 2 02:50:29 2027 GMT
Subject: CN=397337C3C25A22F7A34A5D1D93EAC24EEE184413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:1d:b9:bb:d1:e9:a4:b7:d2:e0:0b:33:dc:
a7:05:04:06:12:e1:38:da:86:6a:b3:f1:3c:2e:b6:
10:47:7e:7b:94:9e:ed:95:92:61:c9:2a:aa:c2:33:
21:81:5a:28:91:35:28:13:b9:c6:b3:35:35:13:aa:
4d:54:3f:c4:21:09:52:f9:b6:71:fe:2b:3e:0b:7f:
18:1e:2e:00:88:ee:e0:d9:9e:5b:0d:13:ce:67:67:
44:7b:4d:f8:16:3e:3e:3f:6b:3e:09:6d:43:73:cb:
34:5d:50:86:dd:80:4b:47:ab:54:da:53:13:aa:82:
c0:e0:1f:d5:bb:a1:f5:7e:72:14:3e:80:f9:7f:d1:
ae:04:16:d5:df:28:39:87:34:35:f7:e9:22:01:ac:
72:fd:a3:cc:8b:f6:09:70:a3:3e:69:28:f0:5f:59:
64:df:48:f5:ef:3b:e0:d4:f5:95:e0:96:74:5e:95:
94:5e:df:d5:83:f0:fd:60:a7:02:12:ad:cb:f7:0e:
d3:e1:2b:da:c3:c9:e8:71:c2:eb:4a:04:9b:71:f9:
ec:1a:5b:cf:cb:7b:80:97:d1:34:a2:15:56:11:7f:
25:d2:c4:5f:51:70:63:b9:1c:18:1f:08:4c:57:87:
41:7d:2f:ba:6a:27:2b:61:e6:8f:12:4e:be:5a:9f:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:73:37:C3:C2:5A:22:F7:A3:4A:5D:1D:93:EA:C2:4E:EE:18:44:13
X509v3 Authority Key Identifier:
keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f31392d3234203d3e203436303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.48.160.0/19
Signature Algorithm: sha256WithRSAEncryption
d9:b2:19:60:c0:71:c1:6b:a1:69:fb:ab:6c:9e:77:27:24:dc:
0a:fb:76:9f:5a:b1:49:ae:56:94:dc:e9:2f:29:8f:a2:f0:35:
7d:32:ae:07:96:a5:ea:e4:37:a6:a7:46:83:c4:62:25:37:2c:
b0:c0:c2:3c:f8:aa:fc:f9:6e:42:0e:3e:36:65:41:76:0c:33:
85:06:cd:b8:0e:ee:4a:4d:d0:1e:39:e7:25:b5:04:c2:d3:5c:
64:2a:de:ea:42:bb:fc:95:de:c7:88:db:e1:45:9a:27:2a:f5:
94:b0:76:70:7a:73:a8:ba:42:18:04:d0:a2:2d:23:a1:ab:27:
c2:43:00:a2:b2:72:54:49:8a:b3:c1:1a:7f:67:1a:23:85:31:
f5:ee:aa:36:e9:bc:24:09:52:4f:63:69:1b:17:ae:0a:de:fa:
3d:9c:87:08:12:c0:c1:3d:20:18:e9:0d:63:43:41:dd:4a:70:
23:8f:ec:d9:cb:e0:ce:0d:02:12:07:cc:4f:ca:f4:bb:ac:a4:
06:5f:57:97:b9:cc:62:ed:b1:f6:06:71:60:81:8c:ca:f6:ab:
b6:c7:2b:44:85:dd:50:66:32:7f:ac:74:dc:02:97:e1:4e:00:
e3:ee:d2:eb:3e:52:00:df:e8:94:4c:db:6c:57:8f:ac:20:42:
23:54:b0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:21 2026 by rpki-client