
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38372e302f32342d3234203d3e203338373533.roa
File: 3131392e3131302e38372e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier: ySHK+nWej5tqupmo6WHGptxjH/SwTNnndW9y6saEl2U=
Subject key identifier: 79:BE:FB:39:5F:18:B1:14:B8:0F:B9:4A:19:C2:F3:1A:15:64:D0:14
Certificate issuer: /CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Certificate serial: 5DCA19F0CF8B956E99E9DD5AF4D56F4A468FC19F
Authority key identifier: 95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38372e302f32342d3234203d3e203338373533.roa
Signing time: Sun 03 May 2026 02:55:20 +0000
ROA not before: Sun 03 May 2026 02:50:20 +0000
ROA not after: Sun 02 May 2027 02:55:20 +0000
asID: 38753
IP address blocks: 119.110.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:15:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ca:19:f0:cf:8b:95:6e:99:e9:dd:5a:f4:d5:6f:4a:46:8f:c1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955AF2D41C7C84BFE354F8648EE3271584452C79
Validity
Not Before: May 3 02:50:20 2026 GMT
Not After : May 2 02:55:20 2027 GMT
Subject: CN=79BEFB395F18B114B80FB94A19C2F31A1564D014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:35:fa:50:00:f8:37:72:77:ab:0f:ac:5b:
fa:5a:57:aa:e3:53:8a:31:d7:a7:4d:1d:da:db:f5:
a0:3f:32:0b:9d:37:08:39:cb:0b:75:2a:38:88:1b:
c9:bc:1e:b1:60:80:86:13:65:80:66:91:65:5f:80:
48:30:53:95:28:fb:1c:e2:13:7d:51:a5:03:37:6d:
aa:5b:24:62:48:e4:50:b9:1d:49:ea:8f:a0:cd:97:
2f:7f:3f:1b:cf:95:95:61:12:4e:4a:67:b1:78:ca:
c0:2b:d9:56:3d:96:f6:30:94:eb:7c:cf:bf:bf:c3:
f1:ab:b6:96:27:13:0f:13:4f:9b:4a:33:f8:00:3b:
a8:bf:3f:66:0e:3f:32:a6:1a:d7:fe:63:68:8b:bb:
84:c8:eb:16:73:aa:30:18:38:69:b7:a8:fd:a1:57:
e1:6a:e2:6e:2e:e0:5b:cf:88:52:58:aa:fe:4f:84:
a5:ae:52:ca:a2:b4:c5:8b:09:10:2b:07:98:c2:8c:
a1:67:ac:26:26:c7:2b:ce:29:61:dd:12:19:58:2e:
3b:86:9f:7e:19:52:dd:7e:a2:5b:3f:d9:7d:09:38:
69:b0:89:3e:ae:87:08:de:01:47:a1:2a:d0:5d:f6:
5e:f9:86:e8:cd:66:a7:88:1d:fe:6f:c5:8c:93:b9:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BE:FB:39:5F:18:B1:14:B8:0F:B9:4A:19:C2:F3:1A:15:64:D0:14
X509v3 Authority Key Identifier:
keyid:95:5A:F2:D4:1C:7C:84:BF:E3:54:F8:64:8E:E3:27:15:84:45:2C:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/955AF2D41C7C84BFE354F8648EE3271584452C79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/955AF2D41C7C84BFE354F8648EE3271584452C79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38372e302f32342d3234203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.110.87.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0e:9d:b9:73:ec:2f:ee:3c:ac:52:16:4c:f4:30:c8:5b:88:
19:b3:11:b4:27:be:43:62:3a:23:7b:eb:5a:ca:9a:62:30:99:
a8:06:c8:3e:42:fe:fd:ae:b2:54:cc:34:a8:9a:a3:3e:ea:f0:
a7:c6:cf:5d:d4:2f:6e:0c:6a:88:d7:d8:3d:11:86:fb:48:5e:
d6:58:f8:11:ee:96:b1:1e:ba:4d:ab:85:ba:77:4d:00:41:7b:
8c:2a:22:56:f3:cb:c1:b6:c4:12:be:f2:75:d3:78:71:4c:77:
d5:46:17:28:80:18:a5:e2:80:20:8a:78:22:8c:b7:c3:90:c5:
39:8d:c4:52:03:78:67:14:40:be:0b:2b:f1:5f:b8:c2:a2:2a:
c5:26:88:7d:b2:30:e0:c7:0e:fe:98:ba:19:4d:4e:8b:6f:9c:
97:d2:9f:c0:c0:7d:8c:09:64:27:60:8e:16:a3:c7:ae:f4:87:
14:1c:b8:ae:ad:72:02:b2:c0:52:9e:1c:4e:60:f9:c9:76:41:
fc:a2:8d:06:bc:93:72:08:49:00:46:db:9a:ec:52:19:84:c5:
99:7b:7f:19:82:8f:84:9e:b5:02:b7:55:66:e3:2c:df:dc:39:
5e:a1:f4:5e:23:13:82:90:19:b6:b0:d2:0b:c5:18:e5:72:7c:
07:00:d5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:13 2026 by rpki-client