
$ rpki-client -vvf rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3131312e36382e3131322e302f32302d3234203d3e203435323837.roa
File: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (raw, json)
Hash identifier: HunPJtEqs/fqqsfQUOtU9B9wzUHewY8exb3L7KPploo=
Subject key identifier: E5:C0:CA:76:1B:AF:2C:8D:C5:06:84:6D:EF:A0:40:38:6B:E7:55:AB
Certificate issuer: /CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63
Certificate serial: 073A54C4E079029884F922AB814408768FCD2ED0
Authority key identifier: 19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3131312e36382e3131322e302f32302d3234203d3e203435323837.roa
Signing time: Sun 03 May 2026 02:53:26 +0000
ROA not before: Sun 03 May 2026 02:48:26 +0000
ROA not after: Sun 02 May 2027 02:53:26 +0000
asID: 45287
IP address blocks: 111.68.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl
rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:3a:54:c4:e0:79:02:98:84:f9:22:ab:81:44:08:76:8f:cd:2e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63
Validity
Not Before: May 3 02:48:26 2026 GMT
Not After : May 2 02:53:26 2027 GMT
Subject: CN=E5C0CA761BAF2C8DC506846DEFA040386BE755AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:f3:3c:09:5e:2f:ed:8c:89:4f:f8:3f:07:
c2:d1:37:f3:60:13:b8:01:58:29:13:da:55:56:b5:
48:e9:d6:3d:ba:b3:0b:87:ff:3d:84:f8:7b:99:fa:
7b:3e:ae:57:10:08:46:4a:a6:a6:82:c2:39:c4:c4:
00:5a:a4:c2:ab:58:75:f6:1c:40:6a:52:e0:85:7c:
69:d8:06:1d:8f:b0:37:13:96:a3:0f:80:5d:3c:6c:
2a:97:4e:57:be:a5:aa:09:59:7d:dc:cf:f7:38:42:
1c:c5:da:94:0a:63:a6:b9:38:67:01:70:06:8d:15:
a7:7c:68:22:af:1b:bd:cd:21:51:38:9a:bb:02:42:
56:fe:e9:29:61:1d:a8:c0:8d:78:c6:a4:d3:68:dc:
fa:58:91:f9:46:d1:bf:83:ef:54:25:0b:69:11:4e:
93:aa:bb:a9:32:29:5d:82:92:ab:17:c7:58:05:52:
65:8a:bb:40:30:a5:ce:ed:da:39:f8:ce:6f:4c:13:
dd:0d:74:d2:5c:4c:0d:7a:22:8e:01:a3:e2:43:fc:
30:f5:8a:f3:59:7c:17:49:58:4b:db:4f:15:29:dd:
19:94:ca:7a:ca:ca:d6:ce:98:43:26:ff:35:7a:2a:
8b:13:43:cd:65:38:f4:af:aa:85:16:58:5a:63:c8:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C0:CA:76:1B:AF:2C:8D:C5:06:84:6D:EF:A0:40:38:6B:E7:55:AB
X509v3 Authority Key Identifier:
keyid:19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3131312e36382e3131322e302f32302d3234203d3e203435323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.68.112.0/20
Signature Algorithm: sha256WithRSAEncryption
62:ea:23:c9:8c:66:c0:6d:3b:0e:9e:86:1a:a0:9b:b2:76:44:
22:68:fe:e8:00:48:86:a7:12:0e:6b:c7:c2:27:4e:1b:81:54:
ad:dc:5c:88:05:97:a5:cb:99:67:b4:1a:fd:fc:4d:a6:3d:a8:
63:7a:0f:55:f0:ff:6d:a4:af:3f:28:16:e3:62:b0:9c:be:58:
9e:3c:41:85:09:72:b2:5c:ad:bb:d8:f4:ee:ee:cc:3b:e9:75:
39:75:7f:dc:e6:f2:55:7c:11:e2:e5:15:d5:77:fd:2b:f6:1f:
fa:ca:26:fa:46:b1:40:b2:d2:2e:3c:8f:b2:3e:01:c3:8a:7b:
94:ff:fb:0a:04:14:51:00:76:de:51:d6:aa:c1:c6:30:94:4a:
e1:07:19:46:9e:2e:1d:dc:e4:d7:b2:78:c7:6c:48:49:60:30:
5c:c7:1c:d8:35:5c:15:21:7e:c7:76:50:6b:ec:ae:09:b4:ac:
5e:36:40:d0:f4:1c:b4:52:28:44:53:02:93:7f:d9:73:fe:6c:
a3:e3:01:f4:b0:55:6c:f6:65:1f:48:2a:d7:82:a8:fc:7d:cb:
bd:9b:03:ad:3f:95:62:4e:4e:60:81:e2:07:7d:40:9a:c7:b8:
3a:81:57:85:fb:15:16:bd:88:27:2f:60:81:40:5d:a1:c9:72:
4e:64:c4:71
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBzpUxOB5ApiE+SKrgUQIdo/NLtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlGNTkzRkI2MDk0QTUzRDJGNTY3RkEyM0VCRDAwQ0VF
NkJEN0Y2MzAeFw0yNjA1MDMwMjQ4MjZaFw0yNzA1MDIwMjUzMjZaMDMxMTAvBgNV
BAMTKEU1QzBDQTc2MUJBRjJDOERDNTA2ODQ2REVGQTA0MDM4NkJFNzU1QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrvM8CV4v7YyJT/g/B8LRN/Ng
E7gBWCkT2lVWtUjp1j26swuH/z2E+HuZ+ns+rlcQCEZKpqaCwjnExABapMKrWHX2
HEBqUuCFfGnYBh2PsDcTlqMPgF08bCqXTle+paoJWX3cz/c4QhzF2pQKY6a5OGcB
cAaNFad8aCKvG73NIVE4mrsCQlb+6SlhHajAjXjGpNNo3PpYkflG0b+D71QlC2kR
TpOqu6kyKV2CkqsXx1gFUmWKu0Awpc7t2jn4zm9ME90NdNJcTA16Io4Bo+JD/DD1
ivNZfBdJWEvbTxUp3RmUynrKytbOmEMm/zV6KosTQ81lOPSvqoUWWFpjyLsbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5cDKdhuvLI3FBoRt76BAOGvnVaswHwYDVR0j
BBgwFoAUGfWT+2CUpT0vVn+iPr0Azua9f2MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTgyNDlmYzMtNmM4NC00ZTkxLWIwNjctYTBjNmE4NDBhM2E5LzAvMTlGNTkzRkI2
MDk0QTUzRDJGNTY3RkEyM0VCRDAwQ0VFNkJEN0Y2My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xOUY1OTNGQjYwOTRBNTNEMkY1NjdGQTIzRUJEMDBDRUU2QkQ3
RjYzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk4MjQ5ZmMzLTZjODQtNGU5MS1i
MDY3LWEwYzZhODQwYTNhOS8wLzMxMzEzMTJlMzYzODJlMzEzMTMyMmUzMDJmMzIz
MDJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBG9EcDANBgkqhkiG
9w0BAQsFAAOCAQEAYuojyYxmwG07Dp6GGqCbsnZEImj+6ABIhqcSDmvHwidOG4FU
rdxciAWXpcuZZ7Qa/fxNpj2oY3oPVfD/baSvPygW42KwnL5YnjxBhQlyslytu9j0
7u7MO+l1OXV/3ObyVXwR4uUV1Xf9K/Yf+som+kaxQLLSLjyPsj4Bw4p7lP/7CgQU
UQB23lHWqsHGMJRK4QcZRp4uHdzk17J4x2xISWAwXMcc2DVcFSF+x3ZQa+yuCbSs
XjZA0PQctFIoRFMCk3/Zc/5so+MB9LBVbPZlH0gq14Ko/H3LvZsDrT+VYk5OYIHi
B31Amse4OoFXhfsVFr2IJy9ggUBdoclyTmTEcQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:52 2026 by rpki-client