
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137322e302f32342d3234203d3e203436303330.roa
File: 3138322e34382e3137322e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier: Yai10k7mfc36oSbam/+tt3MhIgvsdyGdsbNufFy+++s=
Subject key identifier: 35:D0:59:0F:91:FE:D1:A9:D6:84:B3:BA:F3:EC:64:2F:3F:38:3B:19
Certificate issuer: /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial: 559FE6F365B0B27BDCC50A8193BB9EDC863C12E0
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137322e302f32342d3234203d3e203436303330.roa
Signing time: Sun 03 May 2026 02:50:36 +0000
ROA not before: Sun 03 May 2026 02:45:36 +0000
ROA not after: Sun 02 May 2027 02:50:36 +0000
asID: 46030
IP address blocks: 182.48.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:9f:e6:f3:65:b0:b2:7b:dc:c5:0a:81:93:bb:9e:dc:86:3c:12:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
Validity
Not Before: May 3 02:45:36 2026 GMT
Not After : May 2 02:50:36 2027 GMT
Subject: CN=35D0590F91FED1A9D684B3BAF3EC642F3F383B19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:1c:f2:85:18:44:4e:ae:ec:69:b7:5c:f6:
4f:80:6c:2a:55:c1:e4:b9:14:26:6a:09:03:b8:4c:
9a:58:84:55:d9:50:bb:d3:a5:24:f9:55:e4:0a:fc:
bc:7f:55:bb:25:11:14:03:e5:b6:0d:58:ea:b9:f7:
eb:34:d1:6e:5f:e9:c9:75:d8:17:ad:58:64:8a:17:
48:4e:f7:e5:8a:f2:af:62:b9:f8:d8:36:12:a4:c2:
78:41:2f:2e:25:56:8b:1a:43:b7:3a:96:26:f6:85:
a0:35:f5:d6:64:d9:2d:2d:f0:dc:0c:84:ea:d1:71:
68:dc:57:9a:d1:75:3a:25:85:78:bd:de:f5:e2:35:
d7:36:7b:0d:c5:c7:aa:3e:5a:29:c8:d1:f3:5f:37:
8c:0c:0e:68:b8:c1:ad:be:97:f0:e1:59:7a:ba:fe:
4c:55:35:aa:84:51:df:89:d8:a2:49:09:9c:ce:f5:
03:3e:8f:03:48:d3:83:7e:d8:4e:74:a8:d5:3e:2a:
ec:0d:32:d6:53:23:2b:33:68:0b:0a:d2:75:c4:0b:
b6:e8:3c:7f:c4:bf:a6:a4:e3:ed:ee:1b:8d:86:31:
bc:6d:37:08:40:30:dd:92:81:9c:d0:8c:bc:ef:6d:
9e:6c:d1:c3:ee:1f:63:51:5b:e4:96:51:66:79:26:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D0:59:0F:91:FE:D1:A9:D6:84:B3:BA:F3:EC:64:2F:3F:38:3B:19
X509v3 Authority Key Identifier:
keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137322e302f32342d3234203d3e203436303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.48.172.0/24
Signature Algorithm: sha256WithRSAEncryption
51:db:ee:4e:bb:e1:aa:ae:8d:f8:95:c4:67:62:a5:b2:bc:b6:
c7:ac:80:81:b6:8b:ef:6c:c1:ee:3a:f3:3e:90:ea:e6:dc:36:
34:07:c4:56:bf:01:c3:ac:11:a7:42:b8:00:8d:da:4b:56:1d:
f6:89:13:ad:54:f7:55:f4:3e:1f:0f:e7:f0:93:9a:5b:77:06:
bc:7b:34:af:d6:c7:47:2d:af:f6:a4:2f:68:cf:b1:d7:41:3a:
4b:48:64:d3:b7:15:59:fc:44:c4:16:96:87:f7:8c:0e:7d:68:
24:2b:29:d4:4a:f6:6a:07:a7:ad:b2:8a:c8:db:ac:81:55:b5:
1d:77:45:1c:df:73:36:03:46:9e:b6:be:b7:ff:73:df:c8:4f:
1c:ca:ad:ad:c8:a9:23:cf:02:7e:19:34:1a:af:e3:40:c3:66:
d6:89:c5:06:e5:99:81:f2:18:45:94:db:1d:cb:2f:49:c5:43:
4c:18:1f:a3:92:ba:71:07:c1:b6:0b:b0:f1:47:97:05:7f:70:
02:59:58:49:63:c4:3c:1a:93:8f:0d:9f:df:01:f5:36:c4:48:
2a:ed:dd:f3:68:2c:3a:7c:df:0c:85:6e:d9:df:a8:4f:a5:82:
aa:8c:a1:55:84:73:d4:e2:00:24:bd:7e:ec:dd:b8:ea:27:56:
f1:91:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:52:28 2026 by rpki-client