
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38362e302f32332d3233203d3e203338373533.roa
File: 3131392e3131302e38362e302f32332d3233203d3e203338373533.roa (raw, json)
Hash identifier: VbGlDKmfsC8jdy2jwLyJDuEE3d/2hqyMHnfS47Nzs2E=
Subject key identifier: E4:7B:FB:35:5F:9C:1F:AC:F9:19:E9:C9:3F:2D:4E:E9:6B:1E:B1:DC
Certificate issuer: /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial: 75EA828DA0F11F67CE485D16D52F89F5687E0CC3
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38362e302f32332d3233203d3e203338373533.roa
Signing time: Sun 03 May 2026 02:55:30 +0000
ROA not before: Sun 03 May 2026 02:50:30 +0000
ROA not after: Sun 02 May 2027 02:55:30 +0000
asID: 38753
IP address blocks: 119.110.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ea:82:8d:a0:f1:1f:67:ce:48:5d:16:d5:2f:89:f5:68:7e:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Validity
Not Before: May 3 02:50:30 2026 GMT
Not After : May 2 02:55:30 2027 GMT
Subject: CN=E47BFB355F9C1FACF919E9C93F2D4EE96B1EB1DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:b1:92:4a:f4:1c:bc:20:5c:9f:e6:6c:71:
97:94:1a:db:70:62:35:a3:21:bd:c9:2d:f9:2b:f1:
9d:5b:3b:78:55:b9:c3:94:18:68:78:4f:69:aa:0b:
d1:96:71:60:d3:b0:01:03:aa:e4:34:c9:c3:43:07:
c3:e1:37:a8:04:0e:59:7b:07:4d:6c:da:95:fb:83:
c8:f0:ff:ab:94:36:08:c6:fd:a1:1a:11:25:9b:bb:
8b:19:5a:e3:e3:ce:26:a9:30:48:8e:03:6b:13:5c:
fb:fe:a9:5a:bc:32:1b:64:d3:fb:50:cd:ae:b2:6f:
df:9a:af:31:2f:c1:7a:82:bb:bd:91:2a:c2:20:03:
39:2f:f2:24:cb:37:d1:8e:99:f4:bb:dc:ba:d3:92:
76:f2:95:4b:8a:ab:b6:ad:72:58:c7:46:ef:4b:bf:
e2:e0:ae:ed:5b:36:ef:0b:f5:0a:91:90:48:ec:f2:
b2:27:ee:03:1f:6f:09:e2:fc:19:c7:44:9c:ed:c2:
06:9a:63:ba:70:f4:0f:96:f9:e7:04:d2:c0:8b:6a:
4d:e7:28:61:e2:0a:98:19:79:84:6e:ad:b0:e7:66:
f8:01:0e:c5:a8:ae:30:87:76:cf:99:01:74:5f:cd:
2d:de:3e:a6:20:15:8a:bc:0b:52:7a:c6:cc:2f:50:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7B:FB:35:5F:9C:1F:AC:F9:19:E9:C9:3F:2D:4E:E9:6B:1E:B1:DC
X509v3 Authority Key Identifier:
keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38362e302f32332d3233203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.110.86.0/23
Signature Algorithm: sha256WithRSAEncryption
63:94:83:e8:f0:b5:e7:af:40:0f:1c:8e:be:2e:11:e1:11:b0:
9c:a3:39:3c:e4:cf:b0:5b:50:01:1b:bc:e0:5c:58:9e:55:54:
99:2a:79:91:be:4d:27:10:55:7d:04:ea:49:e8:5d:9a:6c:90:
07:34:a2:8b:f7:d3:38:27:d6:b6:77:27:8e:5a:2b:25:78:3f:
6e:1b:64:e7:20:74:9a:f9:7b:88:30:74:c1:88:cb:55:ed:96:
e7:a8:b4:19:cc:60:dd:3b:ed:28:50:f9:1d:29:7e:b6:d3:f2:
f1:74:dd:0a:2d:04:a1:39:f4:bf:d5:a1:72:05:67:53:ef:84:
53:20:58:e6:87:1e:c6:72:77:b7:75:69:9b:9a:a7:15:ef:4f:
46:22:a6:17:fd:51:e7:92:27:4c:7a:0e:83:4c:77:4d:93:ef:
c7:07:bf:c9:fd:6b:aa:f6:f0:52:4d:7b:05:33:94:b5:a0:d3:
4f:c8:9e:5a:a1:a4:7b:b8:94:79:e8:88:fb:a2:6c:c2:d1:b7:
f7:f6:4e:66:87:f7:ee:df:11:79:1b:a9:de:14:8f:37:15:dd:
91:ec:9c:7f:f9:ad:2c:d7:d3:2a:08:49:be:47:58:2a:33:b4:
30:3d:c4:34:0c:7f:ce:af:37:b2:0e:de:83:02:5b:5a:7b:14:
15:a7:b0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:52 2026 by rpki-client