
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138392e302f32342d3234203d3e203436303330.roa
File: 3138322e34382e3138392e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier: JelzHvBp0OxgIxm8Nd0pErRqQIE2QVfU6EWcp42vk6c=
Subject key identifier: 2C:32:1F:31:08:C9:4A:39:AD:26:B7:8C:E6:02:5A:F8:F1:66:82:25
Certificate issuer: /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial: 558863F9C7D4124D2202A01AC97FF2ADD03ED84D
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138392e302f32342d3234203d3e203436303330.roa
Signing time: Sun 03 May 2026 02:50:43 +0000
ROA not before: Sun 03 May 2026 02:45:43 +0000
ROA not after: Sun 02 May 2027 02:50:43 +0000
asID: 46030
IP address blocks: 182.48.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:88:63:f9:c7:d4:12:4d:22:02:a0:1a:c9:7f:f2:ad:d0:3e:d8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
Validity
Not Before: May 3 02:45:43 2026 GMT
Not After : May 2 02:50:43 2027 GMT
Subject: CN=2C321F3108C94A39AD26B78CE6025AF8F1668225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:eb:9e:ea:8b:3d:c4:0e:bf:5f:5b:62:ee:
64:d3:60:91:9d:8d:1f:f1:bd:7b:a7:01:03:d1:ae:
60:0d:d4:f1:ce:b3:12:88:c5:0b:cc:e3:d9:c1:b6:
b5:64:25:2d:49:9b:f3:81:cd:bc:e2:6c:44:01:4f:
3b:b7:1e:bc:29:66:93:e0:35:e2:d1:50:a3:e2:e7:
e1:2f:2e:24:00:7a:97:0f:7c:2e:67:2e:d5:25:c3:
8a:1d:89:f7:ef:be:4c:7b:c5:7d:10:18:55:ba:9a:
95:a5:c7:90:ad:27:fe:2d:35:b8:76:8c:fb:2d:e9:
35:67:df:0e:57:f7:df:33:4f:7c:01:fc:fe:67:4f:
be:9b:4e:93:39:40:20:ba:76:55:26:1d:c7:31:8a:
ec:54:fc:13:64:fe:e7:7e:69:44:a6:d9:be:57:b1:
bc:64:de:14:ca:d3:20:12:63:dc:3f:25:55:92:7e:
79:7f:f1:44:c3:78:e7:aa:a8:82:82:9b:01:27:10:
29:e1:78:b7:89:57:4b:73:dd:86:f4:85:f7:93:2e:
4b:9d:cd:d8:17:cd:33:b7:ca:52:56:b4:7a:35:35:
b6:bf:b8:0c:46:fc:38:25:07:f9:eb:f2:78:ef:b4:
6b:9c:e2:41:c7:f8:90:73:51:38:93:5a:3d:2a:51:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:32:1F:31:08:C9:4A:39:AD:26:B7:8C:E6:02:5A:F8:F1:66:82:25
X509v3 Authority Key Identifier:
keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138392e302f32342d3234203d3e203436303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.48.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d2:e3:44:45:e6:1e:67:d9:2a:ab:90:48:36:6a:bc:a6:7c:
67:8e:95:2a:e9:81:b1:66:f3:18:4d:b4:95:ff:5e:76:2a:04:
d0:ed:49:b7:eb:3f:25:58:3a:43:ba:fd:38:fb:ed:35:4b:b3:
08:4b:16:99:fa:68:72:1c:4d:44:54:06:8b:f4:48:91:7c:19:
a7:ba:9b:ea:b0:f5:90:6c:0d:2d:ff:05:47:6a:3f:9a:84:1a:
99:3b:7d:83:1c:8e:25:4e:91:60:79:6f:67:b6:f8:99:3d:17:
e5:fd:53:42:c3:fc:f2:a1:0b:11:46:3c:6d:ab:e5:29:12:88:
6e:84:65:52:03:da:ea:8b:bc:ef:74:39:c3:4a:c6:26:49:01:
bd:12:9b:69:7a:6e:1a:b3:e3:04:20:fe:5f:c4:68:9b:49:45:
33:86:49:93:21:56:11:71:2f:f5:62:24:22:d1:70:a5:44:fc:
26:e5:03:fb:b4:26:92:b1:b1:dd:5d:95:bd:a5:e4:3e:99:8e:
96:2d:5f:d9:90:8b:ab:bc:47:93:b3:7b:d4:f4:32:d3:7b:e8:
17:8d:96:c7:85:63:31:bf:5b:11:8d:8f:90:8b:db:a0:76:3b:
a7:35:19:ef:e9:9e:e6:45:fb:4a:dd:25:2f:15:b1:be:c1:ed:
1f:93:e8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:04 2026 by rpki-client