
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137312e302f32342d3234203d3e203436303330.roa
File: 3138322e34382e3137312e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier: nIA/3S+EQWlw4ZuLmZhS5zgcudA5d4PuWSKtEk22u0A=
Subject key identifier: 7B:37:C1:65:2F:81:E9:B2:35:A2:73:7F:3C:57:64:1A:5A:4E:6C:18
Certificate issuer: /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial: 545D9BF4FB2AD2AAD70F10D238569CDC71C81253
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137312e302f32342d3234203d3e203436303330.roa
Signing time: Sun 03 May 2026 02:50:34 +0000
ROA not before: Sun 03 May 2026 02:45:34 +0000
ROA not after: Sun 02 May 2027 02:50:34 +0000
asID: 46030
IP address blocks: 182.48.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5d:9b:f4:fb:2a:d2:aa:d7:0f:10:d2:38:56:9c:dc:71:c8:12:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
Validity
Not Before: May 3 02:45:34 2026 GMT
Not After : May 2 02:50:34 2027 GMT
Subject: CN=7B37C1652F81E9B235A2737F3C57641A5A4E6C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:39:ae:7a:32:19:c7:29:5d:54:dd:32:ac:
7e:f4:9c:3c:cc:81:0b:47:b7:b6:24:b6:19:d2:b6:
0d:c2:4a:f2:36:93:a2:d5:dd:15:c4:51:37:92:f6:
b7:b8:b6:58:d4:35:f3:56:98:94:83:64:d2:43:e2:
88:96:7b:17:90:65:c7:9d:cc:57:df:f9:da:6b:f2:
e6:ec:95:b5:1d:2e:6a:6c:cf:ae:3a:e7:a6:d3:e2:
b0:f1:0b:cf:66:49:f2:01:fc:6f:be:3e:4e:e6:6d:
22:f2:3d:53:40:68:b5:fe:2f:bf:6d:da:11:04:9f:
42:87:a8:b1:4c:5f:69:0b:f9:fe:d2:36:c7:0a:d3:
67:fd:0d:92:4d:21:96:31:fb:41:70:28:cd:bc:e9:
f4:1e:02:76:20:62:ac:bd:20:2c:54:b4:88:32:89:
22:f1:81:ba:67:ba:43:bc:90:97:15:d1:84:26:31:
78:4c:12:ce:85:cb:04:24:45:af:b0:82:7a:8c:12:
cc:7f:9b:51:8b:ca:08:c0:1b:e8:8f:05:30:de:0f:
4e:18:91:0a:1d:c9:ed:bd:bb:bd:99:22:3a:93:8a:
ed:1d:be:86:40:e1:61:8e:ed:04:bc:25:43:81:76:
06:83:ab:39:1b:1f:a0:90:6a:4b:df:20:06:fe:e3:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:37:C1:65:2F:81:E9:B2:35:A2:73:7F:3C:57:64:1A:5A:4E:6C:18
X509v3 Authority Key Identifier:
keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137312e302f32342d3234203d3e203436303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.48.171.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b3:fe:13:98:bb:f9:9d:03:6b:8e:86:34:c4:70:a3:22:40:
54:d9:8b:85:e2:45:2b:ce:76:a3:e0:27:3c:cb:23:e7:02:f1:
69:dc:af:4b:19:eb:71:aa:27:1b:0c:0c:76:db:7a:8d:84:5d:
70:2c:25:72:8f:5d:e9:aa:e4:a6:2c:44:29:68:b4:70:5e:01:
1c:7b:f1:a5:ff:9e:d0:a9:e5:f0:fd:77:75:94:28:3e:86:82:
6b:de:b7:45:eb:8b:f1:8e:b2:4d:80:c3:b6:6f:fa:91:db:95:
95:6d:e1:2b:89:6e:5d:bc:a8:5a:99:c1:f3:84:f3:2a:15:c1:
96:22:7d:a4:5d:f4:90:d3:e0:ad:55:a7:6f:73:6d:10:28:58:
9c:f3:70:a9:56:e2:29:0c:f8:8a:06:8e:b9:dd:cb:8b:e9:0b:
aa:f7:83:74:a2:4c:b5:10:26:d3:55:3c:0f:8e:45:a3:1f:b2:
61:ad:06:05:30:33:34:1f:f5:5c:26:b7:f9:02:76:6d:4e:48:
d7:8b:ca:d1:e2:ef:37:1e:d0:d9:ff:28:ef:b2:2f:2a:c0:70:
fb:71:16:42:11:b2:a2:ba:02:f1:77:6a:47:95:c5:30:26:bf:
ab:b4:e7:08:f6:02:eb:af:cc:6d:dd:7b:bc:58:9c:0a:3e:f8:
78:a9:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:51 2026 by rpki-client