
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138352e302f32342d3234203d3e203436303330.roa
File: 3138322e34382e3138352e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier: B/kblNkQ3ms1SzQMO/SpWc7KjkRSnbXvWp8KTyp1kwA=
Subject key identifier: B3:24:4A:86:A8:E7:5A:91:26:83:C3:4B:DB:B5:8F:A0:97:6B:FF:A4
Certificate issuer: /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial: 4ECE5EE4DE1CA8DB98EB656E028165F976D1CD0A
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138352e302f32342d3234203d3e203436303330.roa
Signing time: Sun 03 May 2026 02:50:32 +0000
ROA not before: Sun 03 May 2026 02:45:32 +0000
ROA not after: Sun 02 May 2027 02:50:32 +0000
asID: 46030
IP address blocks: 182.48.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ce:5e:e4:de:1c:a8:db:98:eb:65:6e:02:81:65:f9:76:d1:cd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
Validity
Not Before: May 3 02:45:32 2026 GMT
Not After : May 2 02:50:32 2027 GMT
Subject: CN=B3244A86A8E75A912683C34BDBB58FA0976BFFA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:c0:a6:a0:99:d6:35:d4:3a:79:a1:72:80:
81:2f:6f:3a:3e:3f:33:38:ad:64:3c:ee:0c:29:47:
ab:7f:c1:04:26:14:ce:50:b4:ce:1b:08:57:d8:93:
87:52:b6:eb:9f:e5:40:e6:3d:ae:b8:94:8d:23:85:
9c:d8:41:b6:13:5f:75:92:b0:a0:d5:81:43:fe:f4:
9d:8e:61:ab:b5:24:82:9d:6f:be:ce:16:77:d1:67:
6b:82:d6:ee:69:6a:48:34:a4:0b:42:54:d1:89:67:
94:2f:c6:44:30:1d:4f:59:8d:df:c9:bd:8e:9f:6e:
bf:ff:46:28:c6:af:96:d6:b3:c8:00:41:9c:17:52:
70:a8:c7:63:47:09:ec:6b:54:10:40:6b:6a:f3:41:
3b:39:06:f3:a2:70:27:d3:e3:74:58:0a:08:6d:b0:
c7:39:0e:21:ef:d1:77:9e:36:26:27:d7:cd:24:1a:
dc:b9:42:8c:64:3d:da:57:5a:fd:85:97:f1:7b:ac:
89:3b:0e:38:4a:ab:6d:c0:79:db:39:95:a4:ae:2d:
34:e4:c1:5b:1b:1f:9b:d3:34:e5:6b:b4:ea:eb:fa:
d1:0f:56:84:a2:89:98:f8:51:68:e0:16:98:d2:8f:
97:1e:24:73:7a:e9:72:4c:7e:92:5e:ec:01:d7:58:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:4A:86:A8:E7:5A:91:26:83:C3:4B:DB:B5:8F:A0:97:6B:FF:A4
X509v3 Authority Key Identifier:
keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138352e302f32342d3234203d3e203436303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.48.185.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:93:f4:64:df:71:82:77:20:64:9c:c3:d1:da:37:4f:2b:b1:
7c:fd:d0:30:b0:e7:b5:a8:a5:4f:00:26:bf:28:70:16:1f:11:
f1:8e:19:c2:e7:26:0e:33:db:62:03:bb:09:fc:90:26:f5:51:
48:e1:f3:67:99:27:1b:38:96:87:2b:db:30:f5:4b:ba:fb:46:
d3:90:4c:04:f3:b1:f6:59:a8:dc:31:85:f3:7f:cc:16:d7:e1:
c0:d7:db:06:59:3e:72:5a:c7:90:c0:9f:76:d6:30:cb:65:ef:
74:4f:93:5d:85:4d:8a:1f:55:6e:d0:c1:62:9f:c9:f1:38:53:
04:99:f6:c9:2f:3e:ea:52:02:9b:7b:8c:2f:6c:f5:25:b9:03:
f2:83:9c:2b:86:6a:d4:76:c3:69:75:01:9b:9e:27:45:5b:4e:
85:6b:fe:43:e7:25:44:a4:95:42:6e:cd:3d:e0:45:10:4a:57:
00:b5:e0:2c:11:f5:7e:f9:51:cf:6c:39:3b:fa:f8:7c:d6:76:
a3:0f:78:21:42:c8:54:a4:23:86:08:ba:78:91:d1:ef:43:56:
b3:c2:95:85:dc:ae:cd:98:33:42:cd:c4:f3:e9:37:55:e3:b6:
67:d2:b5:37:d2:af:30:2a:9b:00:4f:f9:4f:4b:f6:c7:12:1c:
43:e1:71:35
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTs5e5N4cqNuY62VuAoFl+XbRzQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2Q0QxODMyRTA5NUZEODY0MzI2RDkzNDBDMzM2MENF
MkUwNEQ4ODAeFw0yNjA1MDMwMjQ1MzJaFw0yNzA1MDIwMjUwMzJaMDMxMTAvBgNV
BAMTKEIzMjQ0QTg2QThFNzVBOTEyNjgzQzM0QkRCQjU4RkEwOTc2QkZGQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg2cCmoJnWNdQ6eaFygIEvbzo+
PzM4rWQ87gwpR6t/wQQmFM5QtM4bCFfYk4dStuuf5UDmPa64lI0jhZzYQbYTX3WS
sKDVgUP+9J2OYau1JIKdb77OFnfRZ2uC1u5pakg0pAtCVNGJZ5QvxkQwHU9Zjd/J
vY6fbr//RijGr5bWs8gAQZwXUnCox2NHCexrVBBAa2rzQTs5BvOicCfT43RYCght
sMc5DiHv0XeeNiYn180kGty5QoxkPdpXWv2Fl/F7rIk7DjhKq23Aeds5laSuLTTk
wVsbH5vTNOVrtOrr+tEPVoSiiZj4UWjgFpjSj5ceJHN66XJMfpJe7AHXWMQFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUsyRKhqjnWpEmg8NL27WPoJdr/6QwHwYDVR0j
BBgwFoAUkGzRgy4JX9hkMm2TQMM2DOLgTYgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGQxZDU5NmMtMDllMy00NjIxLWE2M2ItMjBhNTEzY2Q0OGI5LzAvOTA2Q0QxODMy
RTA5NUZEODY0MzI2RDkzNDBDMzM2MENFMkUwNEQ4OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MDZDRDE4MzJFMDk1RkQ4NjQzMjZEOTM0MEMzMzYwQ0UyRTA0
RDg4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzODM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYwuTANBgkqhkiG
9w0BAQsFAAOCAQEA3ZP0ZN9xgncgZJzD0do3TyuxfP3QMLDntailTwAmvyhwFh8R
8Y4ZwucmDjPbYgO7CfyQJvVRSOHzZ5knGziWhyvbMPVLuvtG05BMBPOx9lmo3DGF
83/MFtfhwNfbBlk+clrHkMCfdtYwy2XvdE+TXYVNih9VbtDBYp/J8ThTBJn2yS8+
6lICm3uML2z1JbkD8oOcK4Zq1HbDaXUBm54nRVtOhWv+Q+clRKSVQm7NPeBFEEpX
ALXgLBH1fvlRz2w5O/r4fNZ2ow94IULIVKQjhgi6eJHR70NWs8KVhdyuzZgzQs3E
8+k3VeO2Z9K1N9KvMCqbAE/5T0v2xxIcQ+FxNQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:33 2026 by rpki-client