
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137302e302f32342d3234203d3e203436303330.roa
File: 3138322e34382e3137302e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier: NjGWi/sX/azA4LSsxWgygXlT2qGazE96SDmeU5APEvg=
Subject key identifier: 4D:7B:A3:D9:D7:54:63:8A:2A:A4:E8:94:8E:D8:C7:63:4E:8E:FB:2B
Certificate issuer: /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial: 4E9C9C28C44A4C55611B2D87B3474AD358E48B25
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137302e302f32342d3234203d3e203436303330.roa
Signing time: Sun 03 May 2026 02:50:34 +0000
ROA not before: Sun 03 May 2026 02:45:34 +0000
ROA not after: Sun 02 May 2027 02:50:34 +0000
asID: 46030
IP address blocks: 182.48.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:9c:9c:28:c4:4a:4c:55:61:1b:2d:87:b3:47:4a:d3:58:e4:8b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
Validity
Not Before: May 3 02:45:34 2026 GMT
Not After : May 2 02:50:34 2027 GMT
Subject: CN=4D7BA3D9D754638A2AA4E8948ED8C7634E8EFB2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:d5:3d:a2:fe:c7:a9:e4:70:50:79:7c:53:
56:13:ea:af:87:2b:dc:c1:ed:6a:12:bd:59:a4:2d:
40:38:2d:1c:a1:dc:17:f8:8f:57:9e:60:40:e2:59:
95:79:c8:02:b0:c7:15:ef:16:5d:fb:7b:c0:da:a9:
d5:cd:ca:ca:a1:ae:61:09:8e:49:25:02:03:2b:8a:
08:a0:c6:64:13:96:3a:62:92:51:dd:34:5c:0d:75:
37:b5:4e:15:ac:69:fa:cd:69:a2:b4:c3:3c:1f:56:
ef:95:ad:2f:e3:86:96:c3:37:38:6b:0c:a6:20:ca:
64:dc:bb:1c:2e:b0:f9:c5:06:73:a0:5f:2c:81:3c:
cb:bf:dc:33:d4:2a:e4:78:75:3b:2f:56:17:4b:e2:
02:3a:57:79:a2:79:6f:df:e6:fc:58:4f:f4:34:1e:
9f:25:d3:9e:7a:3e:10:9c:9b:99:b3:27:ef:9b:86:
99:5c:5d:6f:0b:03:67:e7:7a:34:38:f2:ec:a5:a6:
7c:44:0f:f1:8a:34:4b:ca:e8:7a:5a:28:78:92:58:
f7:d1:d6:8f:1e:a5:7e:37:46:a4:e1:ba:c0:5c:d6:
7e:07:fd:fd:10:bc:ba:27:c1:8e:b1:c6:6b:3e:20:
16:13:01:97:e1:d5:45:2b:cb:34:28:fb:46:9f:6e:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7B:A3:D9:D7:54:63:8A:2A:A4:E8:94:8E:D8:C7:63:4E:8E:FB:2B
X509v3 Authority Key Identifier:
keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137302e302f32342d3234203d3e203436303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.48.170.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ac:c3:95:e6:2d:6b:c0:ec:51:a4:b5:ae:da:82:8c:06:d9:
5f:f5:fa:bf:c4:14:76:d3:da:a5:90:d5:92:67:0a:f1:d5:ae:
ad:6d:bd:fd:d3:24:79:90:c0:66:51:38:b9:74:8c:6f:1d:00:
84:0f:aa:14:f7:0e:94:7b:01:10:19:43:1d:15:ec:0c:6c:8d:
48:c7:d6:77:4d:2c:2d:c7:ee:79:30:28:ec:7e:22:52:e8:17:
2e:87:65:18:bc:ee:66:fc:22:cb:af:c8:f0:19:87:24:b2:2b:
0b:12:33:a6:a1:b9:3e:ed:c0:f6:2f:f6:7d:9c:0b:42:1b:45:
22:9c:10:0e:c3:ad:d9:09:b5:c8:69:93:7e:48:da:dc:d5:dd:
45:36:2f:ac:80:6e:36:c9:dc:d4:9e:57:87:89:ce:fd:5b:c5:
4a:3f:8d:a6:ec:c4:0c:49:7b:87:ef:df:f2:6b:59:1f:3e:c3:
0b:2c:09:d5:d6:36:9e:cd:bf:52:ed:7c:56:b0:93:fe:17:18:
a9:0d:3e:19:f8:49:49:5b:19:a7:bb:5a:64:18:c5:0d:4d:7d:
ae:81:4c:64:d5:36:7f:84:9e:ff:15:f6:ca:73:57:39:e8:e7:
76:7b:08:cb:af:14:fa:5c:bb:51:99:43:b7:f6:0a:ca:9e:39:
07:22:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:25 2026 by rpki-client